Hacking Question Backup XCI Not Working Online

[MichaelShawJr]

Hello, when backing up my carts with SX Dumper, I changed the "wipe certificate" option to no, but anytime the game tries to connect to Nintendo servers the game just freezes. I also tried nxdumptool, I tried not trimming the xci, I tried it with an exfat card so I wouldn't have to split the xci, and tried downgrading from SX OS 3.0 back to 2.9.5, but all gave me the same result. The original cartridge still works online though so the cert is not banned. Is this caused by one of Nintendo's updates or something? Because I know people used to be able to do this. I'm not sure how long ago though.

 

[Reecey]

If you check out v3.0.0 sxos thread I’ve explained the problem to someone else in a bit more detail but to break it down quickly Nintendo added an extra layer of check in 9x firmware that xci backup (freeze) cannot pass and this check is ran through every title. Your only option now is to buy genuine titles of eshop or use a retail gamecard and play online that way through cfw. I now personally would say it’s a very good idea, it stops online cheating and general bad online activity that shouldn’t be happening.

 

[RednaxelaNnamtra]

If you check out v3.0.0 sxos thread I’ve explained the problem to someone else in a bit more detail but to break it down quickly Nintendo added an extra layer of check in 9x firmware that xci backup (freeze) cannot pass and this check is ran through every title. Your only option now is to buy genuine titles of eshop or use a retail gamecard and play online that way through cfw. I now personally would say it’s a very good idea, it stops online cheating and general bad online activity that shouldn’t be happening.

While its currently not possible, I don't think its imposible, if tx would analyse and crack the lotus firmware, to find out how it generates the new token. But since real backups are probably the smallest part of their userbase, I don't think they will do it in the near future, unless they maybe do it to try to prove the point that they aren't mainly used for piracy.

Btw, I don't know how this affects online cheating and other bad activities online, since the only thing it prevents is using of legit backups online. People that where doing this before can still do the same things, they just need to have the cardrige inserted.

 

[Reecey]

While its currently not possible, I don't think its imposible, if tx would analyse and crack the lotus firmware, to find out how it generates the new token. But since real backups are probably the smallest part of their userbase, I don't think they will do it in the near future, unless they maybe do it to try to prove the point that they aren't mainly used for piracy.

Btw, I don't know how this affects online cheating and other bad activities online, since the only thing it prevents is using of legit backups online. People that where doing this before can still do the same things, they just need to have the cardrige inserted.

I’m sure it cannot ever be done, it comes from Nintendo’s online servers which prevents using the backups. Even if TX managed to bypass it Nintendo would just change it there end.

Any modification done ie hacks won’t pass the check.

Tbh I was gutted about this change when I first found out but the more I think about it, it’s probably not a bad thing.

 

[RednaxelaNnamtra]

I’m sure it cannot ever be done, it comes from Nintendo’s online servers which prevents using the backups. Even if TX managed to bypass it Nintendo would just change it there end.

Any modification done ie hacks won’t pass the check.

Tbh I was gutted about this change when I first found out but the more I think about it, it’s probably not a bad thing.

It doesn't come directly from the server, when authenticating this happens :
the server sends a seed
The seeds gets passed through to Gamecard reader, then Gamecard reader does unknown magic
The result gets returned and send to the server.

Thats everything happening there, and does not prevent anything except xci loading for online. You can still modify the game to your hearts desire with layeredfs and also cheat as much as you want, while going online (please don't do this).

If TX gets a way to dump the decrypted lotus firmware, or decrypt it, they could analyse the magic happening inside the Gamecard reader asic, and if it doesn't need some extra information from the Gamecard, just implement it themself.
If it needs addition informations, they would need to find a way to dump it from real cardiges.
So the hardest part of this is getting the decrypted lotus firmware, and maybe get some internal secrets. If they get this done, even changes on Nintendos side aren't that big of a deal anymore, since they would just need to diff it to see the changes.

 

[MeAndHax]

While its currently not possible, I don't think its imposible, if tx would analyse and crack the lotus firmware, to find out how it generates the new token. But since real backups are probably the smallest part of their userbase, I don't think they will do it in the near future, unless they maybe do it to try to prove the point that they aren't mainly used for piracy.

Btw, I don't know how this affects online cheating and other bad activities online, since the only thing it prevents is using of legit backups online. People that where doing this before can still do the same things, they just need to have the cardrige inserted.

What? So you cannot play legit xci with certificates backups online? Can you give me the link where you explain it? I thought it’s possible

in the 3.0 thread you say exactly the same thing “you cannot play because there’s an extra layer“

But what does this mean?

 

[RednaxelaNnamtra]

What? So you cannot play legit xci with certificates backups online? Can you give me the link where you explain it? I thought it’s possible

in the 3.0 thread you say exactly the same „you cannot play because there’s an extra layer“

But what does this mean?

I can try to find it, but I think I have the informations mostly from the Reswitched discord.

In simple, when the switch tries to log in for online play with a gamecard, the server send the switch a random string and expects the switch to answer a specific way.
The switch generates this answer by forwarding the random string from the server to the Gamecard reader, and the game card reader generates this answer in a currently unknown way and returns it to the switch.

 

[Goku1992A]

You can't go online with a game dump! That will never happen just make a dualboot and play your games legally. I hate to sound like a jerk but it's a waste of time trying to do this and risk your system getting banned,

 

[MeAndHax]

You can't go online with a game dump! That will never happen just make a dualboot and play your games legally. I hate to sound like a jerk but it's a waste of time trying to do this and risk your system getting banned,

okay but who asked for your opinion? This is just useless babbling and brings no one forward and does also not answer my question lol

I can try to find it, but I think I have the informations mostly from the Reswitched discord.

In simple, when the switch tries to log in for online play with a gamecard, the server send the switch a random string and expects the switch to answer a specific way.
The switch generates this answer by forwarding the random string from the server to the Gamecard reader, and the game card reader generates this answer in a currently unknown way and returns it to the switch.

Okay well it could be possible in the future, I thought it only checked for a valid license inside the cartridge

You can't go online with a game dump! That will never happen just make a dualboot and play your games legally. I hate to sound like a jerk but it's a waste of time trying to do this and risk your system getting banned,

Also I would like to note that It’s not even illegal when I dump my own games that I own And bought for safety. This was my plan because I hate carrying around bunch of cartridges but prefer buying a game physically than digital...

I can try to find it, but I think I have the informations mostly from the Reswitched discord.

In simple, when the switch tries to log in for online play with a gamecard, the server send the switch a random string and expects the switch to answer a specific way.
The switch generates this answer by forwarding the random string from the server to the Gamecard reader, and the game card reader generates this answer in a currently unknown way and returns it to the switch.

Does this mean that the xci freeze and you have to restart your console or crash when you try to go online?

 

[MeAndHax]

I’m sure it cannot ever be done, it comes from Nintendo’s online servers which prevents using the backups. Even if TX managed to bypass it Nintendo would just change it there end.

Any modification done ie hacks won’t pass the check.

Tbh I was gutted about this change when I first found out but the more I think about it, it’s probably not a bad thing.

I found the thread on xecuter forum and you said that when you don’t link your account then it works(?) or did I get it wrongly? Also it looks like it started to appear once SX os 2.9 was released, did someone try going online with 2.8?

 

[Goku1992A]

@MeAndHax

SXOS doesn't enable you to run XCI online idk who told you that but it doesn't work like that at all. They are going to flag your system because it can detect CFW on it that is why I gave the answer I gave. If you run Dualboot you will not have problems.

 

[MeAndHax]

@MeAndHax

SXOS doesn't enable you to run XCI online idk who told you that but it doesn't work like that at all. They are going to flag your system because it can detect CFW on it that is why I gave the answer I gave. If you run Dualboot you will not have problems.

you have clearly no idea what is happening and how the bans really trigger. Read the 200 pages of the ban thread and u understand

 

[Reecey]

I found the thread on xecuter forum and you said that when you don’t link your account then it works(?) or did I get it wrongly? Also it looks like it started to appear once SX os 2.9 was released, did someone try going online with 2.8?

This was when I first found out back with 9x firmware and sxos 2.9.0 I originally thought it had something to do with linking your Nintendo Account to your switch but as time went on we realised it was something Nintendo has implemented with a new check that checked every game. I notified TX about this issue months ago.

 

[Reecey]

Could I ask someone here, if you guys are using online in sxos cfw have any of you got Mario Odyssey the genuine eshop version does luigis balloon world work for you or does it throw up a server communication error? I’ve noticed this now for about 9-10 days I’m not sure if it’s a Nintendo server problem or sxos 3.0.0 I just need to know thanks

 

[PiracyForTheMasses]

Illegal, no. You are breaking Nintendo TOS and EULA though.

 

[MichaelShawJr]

Could I ask someone here, if you guys are using online in sxos cfw have any of you got Mario Odyssey the genuine eshop version does luigis balloon world work for you or does it throw up a server communication error? I’ve noticed this now for about 9-10 days I’m not sure if it’s a Nintendo server problem or sxos 3.0.0 I just need to know thanks

I can test this for you if you have a save file that has it unlocked already.

For everyone else, legit xci dumps work fine offline, so if you are away from home, you don't have to bring all your cartridges with you. Only time you need the cartridges is for online play, or for any other reason that requires connecting to Nintendo 's servers

 

[Reecey]

I can test this for you if you have a save file that has it unlocked already.

For everyone else, legit xci dumps work fine offline, so if you are away from home, you don't have to bring all your cartridges with you. Only time you need the cartridges is for online play, or for any other reason that requires connecting to Nintendo 's servers

Thanks you do realise I meant checking Luigi balloon world online if I extracted the save I would be chancing a ban, maybe 50/50 also if you injected it you would be at a high risk as well because of backing up/uploading the save to Nintis server. If you have Odyssey the eshop version just complete the main story it doesn’t take long then Balloon world will appear.

 

[MichaelShawJr]

Thanks you do realise I meant checking Luigi balloon world online if I extracted the save I would be chancing a ban, maybe 50/50 also if you injected it you would be at a high risk as well because of backing up/uploading the save to Nintis server. If you have Odyssey the eshop version just complete the main story it doesn’t take long then Balloon world will appear.

Idk I have edited saves many times, never had an issue. How long is the main story?

 

[Reecey]

Idk I have edited saves many times, never had an issue. How long is the main story?

The main story as long as you have Mario 3D game experience take 1hr. Half it’s not that long. I’m worried more giving you the save and you injecting it a ban is very possible because of Nintendo back up system. I’ve heard of bans been issued over injecting saves. If you want it I can give it to you, don’t get me wrong I’m not trying to tell you what to do give me the word I will pm it you?

 

[MichaelShawJr]

The main story as long as you have Mario 3D game experience take 1hr. Half it’s not that long. I’m worried more giving you the save and you injecting it a ban is very possible because of Nintendo back up system. I’ve heard of bans been issued over injecting saves. If you want it I can give it to you, don’t get me wrong I’m not trying to tell you what to do give me the word I will pm it you?

No need, I found a 100% file online so you didn't have to worry. Does your balloon world work on Stock or Atmosphere? If it does, maybe sx os 3.0.2 will fix it?

Sorry for the shitty phone camera recording. I didn't feel like hooking up my capture card, but this should get the point across.