Hacking CDNSP is NOT dead. They just don't want us to use it.

Status
Not open for further replies.

blahblah

Well-Known Member
Member
Joined
May 16, 2018
Messages
1,136
Trophies
0
Age
34
XP
1,462
Country
United States
So, all updates and cdn exclusives will ALWAYS be uploaded on those sites?

There will always be scene pres of games and updates.

--------------------- MERGED ---------------------------

Need? Probably not as there are plenty of viable alternatives. Benefit? Plenty of people seem to enjoy the path to downloading it provides.

I just can't get to the "there is only one answer" thing people seem to be going for in this... I guess it is the pirate equivalent of the responsible disclosure debate.

Because you are refusing to engage in actual deliberate thought, you wind up in these 'both sides are valid' situations.

You concede that the public does not need an incredibly slow way to download games. Good. Now, does the public 'need' game updates more or less than they 'need' cdn access?
 

blawar

Developer
Developer
Joined
Nov 21, 2016
Messages
1,709
Trophies
1
Age
39
XP
4,294
Country
United States
If you have the DLC you will have its attendant update. Any number of things have bundled them together, indeed depending upon your reading of scene rules (I have not read any Switch stuff yet but going by older things and the spirit of them) it might even be required for such a thing.



Need? Probably not as there are plenty of viable alternatives. Benefit? Plenty of people seem to enjoy the path to downloading it provides.

I just can't get to the "there is only one answer" thing people seem to be going for in this... I guess it is the pirate equivalent of the responsible disclosure debate.

Noone distributes updates with DLC, and even if they did, it would be a waste of space and downloading as some people dont need the update.
 

Pluupy

_(:3」∠)_
Member
Joined
Sep 13, 2009
Messages
1,945
Trophies
1
XP
2,255
Country
United States
So when you guys say "scene releases" are you talking about those sites that just post information relative to a game or like actual game .NSP/.XCI/.sdsaddfsd available for download?

I've never really understood the purpose of "scene releases" when most pirate sites which distribute the games acquire the games through their own means and don't even have the same file sizes...

--------------------- MERGED ---------------------------

Noone distributes updates with DLC, and even if they did, it would be a waste of space and downloading as some people dont need the update.
What about games which require updates for DLC?
 

blawar

Developer
Developer
Joined
Nov 21, 2016
Messages
1,709
Trophies
1
Age
39
XP
4,294
Country
United States
So when you guys say "scene releases" are you talking about those sites that just post information relative to a game or like actual game .NSP/.XCI/.sdsaddfsd available for download?

I've never really understood the purpose of "scene releases" when most pirate sites which distribute the games acquire the games through their own means and don't even have the same file sizes...

--------------------- MERGED ---------------------------


What about games which require updates for DLC?

Those sites would just acquire scene releases to publish, if they could not download them from the CDN.
 

blahblah

Well-Known Member
Member
Joined
May 16, 2018
Messages
1,136
Trophies
0
Age
34
XP
1,462
Country
United States
It would be nice for those scene release sites to get cdn access

What are you even talking about? There are no 'scene release sites'. When people say scene releases, they are talking about release groups. Venom, Suxxors, etc. They do not release on 'scene release sites'.
 
  • Like
Reactions: jakkal

FAST6191

Techromancer
Editorial Team
Joined
Nov 21, 2005
Messages
36,327
Trophies
3
XP
27,259
Country
United Kingdom
Because you are refusing to engage in actual deliberate thought, you wind up in these 'both sides are valid' situations.

You concede that the public does not need an incredibly slow way to download games. Good. Now, does the public 'need' game updates more or less than they 'need' cdn access?

It is incredibly slow now? As far as I was aware it was achievable in timeframes most people find agreeable or otherwise topped out at faster than the connections most people have. Might not max out one of said Norwegian's gig speed internet connections but still gets down over timeframes that were "dinner/overnight".

I am sitting here contemplating the scenarios posed, history, the applicability of said history if the scenarios have changed, potential uses as more, if that is not "actual deliberate thought" then I am not entirely sure what is. Going further I have seen scenarios where it was unquestionably beneficial to keep various methods private. I am not yet convinced this is one and it is not just a mere convenience. It can still all be done and does not push things into technically possible but practically absurd territory from where I sit.

Noone distributes updates with DLC, and even if they did, it would be a waste of space and downloading as some people dont need the update.
Don't know about the Switch but PC and other devices do it all the time. Equally space wise a few megs of demonstrably useful in a common current use case/scenario and future use (if we are going with archival is a merit and we will want these in 20 years time) is no big deal and actually commendable.
 

blahblah

Well-Known Member
Member
Joined
May 16, 2018
Messages
1,136
Trophies
0
Age
34
XP
1,462
Country
United States
It is incredibly slow now? As far as I was aware it was achievable in timeframes most people find agreeable or otherwise topped out at faster than the connections most people have. Might not max out one of said Norwegian's gig speed internet connections but still gets down over timeframes that were "dinner/overnight".

I am sitting here contemplating the scenarios posed, history, the applicability of said history if the scenarios have changed, potential uses as more, if that is not "actual deliberate thought" then I am not entirely sure what is. Going further I have seen scenarios where it was unquestionably beneficial to keep various methods private. I am not yet convinced this is one and it is not just a mere convenience. It can still all be done and does not push things into technically possible but practically absurd territory from where I sit.

It's been slow for a long time. Google Drive is lightning fast. CDN is about 2 megabytes.

You failed to answer my question.
 

blawar

Developer
Developer
Joined
Nov 21, 2016
Messages
1,709
Trophies
1
Age
39
XP
4,294
Country
United States
It is incredibly slow now? As far as I was aware it was achievable in timeframes most people find agreeable or otherwise topped out at faster than the connections most people have. Might not max out one of said Norwegian's gig speed internet connections but still gets down over timeframes that were "dinner/overnight".

I am sitting here contemplating the scenarios posed, history, the applicability of said history if the scenarios have changed, potential uses as more, if that is not "actual deliberate thought" then I am not entirely sure what is. Going further I have seen scenarios where it was unquestionably beneficial to keep various methods private. I am not yet convinced this is one and it is not just a mere convenience. It can still all be done and does not push things into technically possible but practically absurd territory from where I sit.


Don't know about the Switch but PC and other devices do it all the time. Equally space wise a few megs of demonstrably useful in a common current use case/scenario and future use (if we are going with archival is a merit and we will want these in 20 years time) is no big deal and actually commendable.

You are arguing adding all of this extra complexity, so leechers can leech from the cdn for a few months and then noone has access. Again, this requires thinking past next week.
 

l915205

Well-Known Member
OP
Newcomer
Joined
Jun 28, 2018
Messages
74
Trophies
0
Age
43
XP
247
Country
Croatia
I have ~20-30 mbs transfer speed from CDN.
Pretty sufficient considering typical Switch content sizes. Also faster than legit eShop.
 

Ryab

Well-Known Member
Member
Joined
Aug 9, 2017
Messages
2,491
Trophies
1
XP
3,305
Country
United States
Previous thread was closed by the mod, so let's start with this warning:
Do not download and run random stuff from the internet. Like never. There are fake EdgeAuther versions floating around that steal your cert. There are no working CDNSP copy in public access yet.

Now quick recap of what previous thread was about:

Thread was deleted but that wasn't end of the story. Someone sent me the copy of EdgeAuther source code grabbed right before github repository was made private. So now I am 100% sure of the following things:
  1. CDNSP is still working. You can download everything from Nintendo CDN like it was prior to 6.0 FW.
  2. Changes to make CDNSP work again are trivial. My estimate is ~50 lines of code depending of your language of choice.
  3. Some people are desperately trying to hide this information from public. Apparently to make CDN their exclusive piracy source.
EdgeAuther code is licensed under MIT allowing me to post it here. But since author (simonmkwii) wants to keep it private I only tell what needs to be done to make CDNSP work again to those interested:

0. You have to went online after 6.0 FW update at least once. Then Nintendo will add your certificate to white list. If you never went online with 6.0+ FW and try to get token for CDN access your certificate will be banned. Take this step with grain of salt because there is no way to properly verify it. But it sounds plausible. Nintendo wants to be sure you made legit FW update.
1. To access CDN you need edge token, that's the only difference between 6.0 FW and previous versions. To request it you need to authenticate your device first (not possible if your certificate is banned). Device authentication process is described here. Edge token request is single extra HTTP call. Token is valid for 24 hours. This step is done by EdgeAuther utility.
2. Now you can use this token to run CDNSP, just add X-Nintendo-DenebEdgeToken header like this.

The way EdgeAuther requests edge token is pretty straightforward. Two HTTP calls and your are golden. The only thing I don't understand is how AES key is derived to CMAC request body. There are also some hardcoded constants (Client ID, User-Agent, endpoint URL) that I suspect may be different for every FW revision. My copy is for 6.0 FW. If anyone is interested to implement working utility or patch CDNSP.py I can try to write pseudo-code for the authentication process.
no its dead the second you attempt to download something your cet will be banned besides the guys who made cdnsp are now just giving people links to NSPS
 

pka4916

Well-Known Member
Member
Joined
May 24, 2006
Messages
201
Trophies
1
Location
USA
XP
406
Country
United States
so how do you make it work then. Downloaded that master file and put in CDNSP-GUI-Bob-v6 but no changes or even when i run those py files
 

Draxzelex

Well-Known Member
Member
Joined
Aug 6, 2017
Messages
18,674
Trophies
2
Age
28
Location
New York City
XP
12,636
Country
United States
so how do you make it work then. Downloaded that master file and put in CDNSP-GUI-Bob-v6 but no changes or even when i run those py files
You didn't read the OP. You need an edge token to download from the CDN but the way to generate those is being kept private for numerous reasons which it should. The only reason it now needs an edge token is due to the excessive CDN downloading the community conducted when CNDSP was publicly available
 

FAST6191

Techromancer
Editorial Team
Joined
Nov 21, 2005
Messages
36,327
Trophies
3
XP
27,259
Country
United Kingdom
It's been slow for a long time. Google Drive is lightning fast. CDN is about 2 megabytes.

You failed to answer my question.
I did indeed fail to answer it directly, however I would hold the post conveys my opinion there. Much like "if you hack then you lose online and anything you do get is a perk" it seems something similar has happened for these hypothetical good souls providing us all with Nintendo CDN data -- their easy ride has come to an end, and not for no reason.

You are arguing adding all of this extra complexity, so leechers can leech from the cdn for a few months and then noone has access. Again, this requires thinking past next week.
I always try to think for the future (see all my posts here contemplating future abilities to choose update levels and considering the 20 years from now stuff). Not seeing a shining land of milk and honey denied us because of the actions of the OP or the hypotheticals stemming from it, merely the easy ride of a few coming to an end.

So when you guys say "scene releases" are you talking about those sites that just post information relative to a game or like actual game .NSP/.XCI/.sdsaddfsd available for download?

I've never really understood the purpose of "scene releases" when most pirate sites which distribute the games acquire the games through their own means and don't even have the same file sizes...
Back in the day software commonly needed cracking to make it work for everybody. Similarly if you were around for the PS1 you could have seen the nightmare of hundreds of different iso and archival formats, to say nothing of a the annoyance of a single file in your multi file download being missing or a small part of your hundreds of megs download being corrupt and having to try again (Johnny just split and stuck on rapidshare is likely to be different to Phil just split and stuck on megaupload, scene archive is scene archive so it does not matter whether you get it by carrier pigeon, semaphore or topsite). For security and other reasons people came together to make anonymous groups that released things to standards ( https://scenerules.org/ if you want to read the various ones). This was the Scene with a capital S. Some time in the PS2-xbox 360 era we got the rise of p2p methods and thus the p2p group was born in earnest (though the term mostly arose from video, especially as the Scene had not got its finger out of its arse to make nice multi gig MKV H264 videos and was still limited to "Xvid AVI as playable by MPEG4 capable DVD player at CD sizes" and anybody with a DVD, a copy of DVD decrypter and a copy of something like gordianknot could do better).
Console wise as time went on the need to crack and shrink things went down (and to the dismay of some was occasionally even dropped as a requirement if a mod chip or flash cart could handle it, for an example of this coming true then see all the fun and games people are having with the non flash cart methods of running DS games on the DSi and 3ds, or how many original xbox games needed to be redumped to work on the 360), and was further frustrated by increased security making certain things harder.
 

Meepers55

Flintstones Regular
Member
Joined
Aug 7, 2018
Messages
318
Trophies
0
XP
939
Country
United States
Noone distributes updates with DLC, and even if they did, it would be a waste of space and downloading as some people dont need the update.
It depends on the site you use really. I use one in which each post usually links the base game, updates, and dlc.
 

l915205

Well-Known Member
OP
Newcomer
Joined
Jun 28, 2018
Messages
74
Trophies
0
Age
43
XP
247
Country
Croatia
If you have any other theories, you are more than welcome to bring them to the table.
They designed whole cert infrastructure with fine grained per-device access control in mind, learning form Wii U mistakes. It didn't accidentally happens to be in place when CDNSP surfaced.
Additional security measures were incorporated in 6.0 because it was first major FW release after CFW went widespread, not because someone downloaded too many games.
 
Status
Not open for further replies.
General chit-chat
Help Users
    Psionic Roshambo @ Psionic Roshambo: It's like a steam deck lol