Has anyone attempted to abuse the Nintendo Zone streetpass relay?

Discussion in '3DS - Nintendo Network' started by RemixDeluxe, Aug 6, 2013.

  1. chemistryfreak

    chemistryfreak GBAtemp Fan

    Member
    3
    Nov 8, 2008
    Using this method allows me to get 2 streetpass tags per 3DS in between the 8 hour limit. So basically both my 3DS exchange streetpass tags normally then using the above method I manage to get them to streetpass each other again. But the third attempt wasn't successful. I am still trying to figure out why...

    You just need your 3DS near the hotspot network.

    You are welcome! :D
     
  2. RemixDeluxe
    OP

    RemixDeluxe GBAtemp Psycho!

    Member
    10
    Nov 23, 2010
    United States
    I am getting the same results as well but least this should speed up the process on some streetpass games. If you manage to discover anymore please post right away in the topic.
     
  3. Somebunny

    Somebunny Somebunny is lurking in the shadows...

    Newcomer
    1
    May 18, 2013
    Gambia, The
    Germany
    I have something to add. I've been experimenting with the relay system, and I believe that it's *not* the public IP that counts. Routing IP packets from one computer to another one isn't nearly that easy, and can follow an arbitrary path through the web (ask Wikipedia about "traceroute" for some details). I have been using a SoftAP Nintendo Zone during the past days, i.e. my AP is not the router, but my computer, and the router is just the first stop along the way. (Oh, and abusing my smartphone as another hotspot doesn't change it either, besides getting another hit.)

    The only way (that I know of) to uniquely identify a specific hardware used to access the Web is the MAC address of your AP, and - fortunately for us - even that can be spoofed. I have set up a software AP with a correct SSID on my Linux system, and it is properly used as a Nintendo Zone by my two 3DS systems, granting me extra StreetPasses. Following this, I have shut down the AP, changed the MAC address to something different (while keeping the rest fixed, restarted the AP, and *poof*, another StreetPass on the *same* hardware as before. Messing with IP addresses did not grant me additional hits.

    If the AP's MAC address truly is the only relevant factor in the relay system, it should be possible to force StreetPass encounters over arbitrary distances, just by spoofing the correct MAC address on your private AP. If anybody who has already abused his own private Nintendo Zone is willing to test this, just send me a PM with your router's MAC address (and the SSID just to be sure), and I'll try to remote-pass you.
     
  4. RemixDeluxe
    OP

    RemixDeluxe GBAtemp Psycho!

    Member
    10
    Nov 23, 2010
    United States
    I just read that the streetpass relay has an 8 hour limit just as streetpassing with the same 3DS owner is too so its not as abuseable as we had hoped. Still 2 streetpasses every 8 hours is better than 1.
     
  5. RemixDeluxe
    OP

    RemixDeluxe GBAtemp Psycho!

    Member
    10
    Nov 23, 2010
    United States
    Somebunny

    That's a nice discovery and ill try to contribute as soon as I have the time.
     
  6. dicamarques

    dicamarques Definitely not Bruce Wayne.

    Member
    5
    Jun 25, 2010
    Portugal
    Your computer's Recycle Bin
    Yes never though of the mac address as an ID (it should never change).
    But still if using a vpn it would use the MAC from the host (or maybe it uses the first point in which it connects to, if thats true, it would be kinda of a bummer) But mac address spoofing might work for long distace sp.

    If anyone wants to make a softap with is pc I'm going to test this guide http://teh-geek.com/wp-content/uploads/2011/06/SoftAPBT5Teh-Geek.pdf
     
    Dartz150 likes this.
  7. Somebunny

    Somebunny Somebunny is lurking in the shadows...

    Newcomer
    1
    May 18, 2013
    Gambia, The
    Germany
    I have just remote-passed duke_srg, who lives in Russia (so it's very unlikely he just went past my home :) ). My initial theory was almost right, spoofing a MAC address seems to *almost* do the trick - but you also need to spoof a correct WiFi country code. (If you have never heard of this, well, I haven't heard about this either, until half an hour ago.)

    dicamarques, if you want some help setting your project up, just say so, and I'll see if I can help. I do not have enough time to do it myself, but I believe I can help you overcome some problems that can take weeks to figure out just with Google. A small warning, though - automating disant relays relies on some very non-standard features, some of which may be unavailable on Windows. Which is why I am running my tests on Linux.

    Edit: pic or it didn't happen

    [​IMG]
     

    Attached Files:

    dapaua likes this.
  8. Rizsparky

    Rizsparky Saiyan Prince

    Member
    5
    Aug 13, 2007
    The Future
    That's a pretty big discovery!
     
  9. LAA

    LAA GBAtemp Fan

    Member
    2
    Aug 3, 2008
    Really hope something comes of this!
    I'd love all the puzzle pieces and to finally get some street pass use in games... (Maybe even finally get all the trophies in KH3D...)
     
  10. duke_srg

    duke_srg GBAtemp Advanced Maniac

    Member
    6
    Mar 1, 2011
    Serbia, Republic of
    Moscow
    Confirmed! Have no idea why my hat is changed, but last time I was in germany a year ago ;)
    Can you explain a bit about WiFi country code, is it like WiFi region like UE/JP where different channels are disabled (WiFi Regulatory Domain)? Unfortunately I have no access to my customizeable linux-based router right now =(
    [​IMG]
     
  11. Tane

    Tane GBAtemp Regular

    Member
    2
    Aug 8, 2013
    United States
    This is way cool. For someone like myself, who lives in the middle of nowhere, with no possible chance of Streetpassing people... this is exciting. And I like tinkering with Linux (although this one might be a bit above my head, and I'll need help on).

    Somebunny - I'm trying to wrap my mind around this. Do you think is it possible to setup a distant-remote-relay StreetPass Network if a bunch of people made some of these spoofed MAC address SoftAP's (via Linux I'm assuming from your post)? Like say, 10 people all create one of these spoofed points around the world, tune it to a specific WiFi Country Code - would these 10 people begin passing each other on a regular basis?

    I apologize if I'm missing some of the nuances in this, but i'm excited about the possibilities. I would love to have a private StreetPass Network in my house ;-D
     
  12. dicamarques

    dicamarques Definitely not Bruce Wayne.

    Member
    5
    Jun 25, 2010
    Portugal
    Your computer's Recycle Bin
    This is great if you could tell me how've you made the softap, i tried with BT5 and my 3DS didnt detected it.
     
  13. duke_srg

    duke_srg GBAtemp Advanced Maniac

    Member
    6
    Mar 1, 2011
    Serbia, Republic of
    Moscow
    IMO the easiest way to get a globally spoofed Nintendo Zone StretPass is to choose one unique MAC address and use it on all configured Nintendo Zone spoof access points. This is the easiest way to use this feature on a wide range of devices such as WRT-based routers or rooted Android phones.
    I propose 40:53:50:4F:4F:46, i.e "@SPOOF" in hex. The lower two bits of the first octet must be unset to represent a global unicast address.
     
  14. donelwero

    donelwero GBAtemp Fan

    Member
    2
    Jul 17, 2008
    Mexico
    León, Gto.
    There are not much people with 3DS where I live, so this is becoming really interesting.
     
  15. Amigos2222

    Amigos2222 Member

    Newcomer
    2
    Dec 21, 2005
    Just connected using your suggested MAC. Let me know if you now get a streepass using it when you reconnect.
     
  16. dicamarques

    dicamarques Definitely not Bruce Wayne.

    Member
    5
    Jun 25, 2010
    Portugal
    Your computer's Recycle Bin
    Yes it might be a possible, but lets not forget that nintendo MAY block that mac, but its just a matter of changing it again
     
  17. ItsMetaKnight

    ItsMetaKnight GBAtemp Advanced Fan

    Member
    6
    Mar 4, 2008
    "but you also need to spoof a correct WiFi country code"

    Could you please explain? :)
     
  18. donelwero

    donelwero GBAtemp Fan

    Member
    2
    Jul 17, 2008
    Mexico
    León, Gto.
    Yeah, a noob friendly how-to would be much appreciated for all of us that want to be part of this.
     
    SignZ likes this.
  19. dicamarques

    dicamarques Definitely not Bruce Wayne.

    Member
    5
    Jun 25, 2010
    Portugal
    Your computer's Recycle Bin
    Guys just take it easy. People are still trying to understand how this thing works.
    What we know:
    Mac address is used as id
    Any router can be a nzone relay.
    And you can make a router on your own computer (which is better since not everyone has a router able to spoof mac addresses)

    Although this wont be that easy to everyone, people need a wifi card with master mode capable and another internet source i.e: another wifi card or ethernet. Also it will most like be on a linux so if you have a laptop its probable that his wifi card is compatibly and if it has an ethernet connect you can use it.
     
  20. Tane

    Tane GBAtemp Regular

    Member
    2
    Aug 8, 2013
    United States
    What I would like to know... is how does the data get transmitted from one router to the next, knowing it's a Nintendo Zone spoofed relay? That's the only part I can't figure out. How do the routers know to talk to each other over the internet? There must be some sort of configured inter-connectivity occurring.
     
Quick Reply
Draft saved Draft deleted
Loading...