Hacking Money pool?

[martyjake]

With Nintendo's HackerOne system possibly delaying exploits, we should create a money pool so people can release exploits to us instead of Nintendo.

The only problem is how we can make sure that the money will go to the developer instead of someone just stealing it.

I've been thinking about doing something with crypto coins, like Etherum's smart contracts, but I don't know if they would work for something like this.

Any ideas?

 

[LightOffPro]

Fool me once shame on you, fool me twice...

EDIT: For clarification, we tried this idea already with the 3DS. Didn't end well. And $2300 is serious cash.

11/2012
3ds SOC decapping fundraiser started by 3dsdev insider gshock/jl12 to find out the system's secrets and supposedly get it hacked faster. GBAtemp community raises $2300 before gshock disappears with the money, presumably to a resort in fiji with Gateway execs.

 

[zoogie]

https://www.patreon.com/gbatemp
ctrl-F "Bounty"

Haven't heard anything about when it will start, or if it will start.
Seems like the staff is becoming indifferent to the patreon thing in general. Hardly any posts or interest after the raffle and the monthly patreon accounts have been dwindling lately.
https://gbatemp.net/threads/gbatemp-youre-a-part-of-it.475568/

Fool me once shame on you, fool me twice...

For those who don't get the reference
https://gbatemp.net/threads/3ds-decapping-fundraising-topic.336767/

 

[martyjake]

Fool me once shame on you, fool me twice...

EDIT: For clarification, we tried this idea already with the 3DS. Didn't end well.

Yeah but this was an untrustworthy method, anyone could have just taken the money. We should find a better method to make sure that the developer gets the money and no one else.

 

[Kourin]

Yeah but this was an untrustworthy method, anyone could have just taken the money. We should find a better method to make sure that the developer gets the money and no one else.

And what method do you suggest?

 

[martyjake]

And what method do you suggest?

I don't know, I posted this so we can find one. Probably something with crypto coins and blockchain.

 

[LightOffPro]

And what method do you suggest?

Donating directly to the ReSwitched team seems a good bet to me. Those devs already proved themselves with the 3DS.

I don't know if they are currently accepting donations.

 

[Kourin]

I don't know, I posted this so we can find one. Probably something with crypto coins and blockchain.

The point is that the money has to sit in someone's account/a domain owned by someone. It's beyond easy for anyone to just take the money and run.

Donating directly to the ReSwitched team seems a good bet to me. Those devs already proved themselves with the 3DS.

I don't know if they are currently accepting donations.

Are ReSwitched actually planning on a release though? Or are they just going to keep their exploits to themselves? I haven't been following them or their efforts-

 

[LightOffPro]

Are ReSwitched actually planning on a release though? Or are they just going to keep their exploits to themselves? I haven't been following them or their efforts-

@SciresM says that everything that they make is intended to be of public use. I think that all the active devs on ReSwitched were and still are devs of the 3DS scene and everything that they made was eventually released to the public.

 

[Abu_Senpai]

Fool me once shame on you, fool me twice...

EDIT: For clarification, we tried this idea already with the 3DS. Didn't end well.

Wow so the community already did this? damn that is quite alot of money.

Yeah but this was an untrustworthy method, anyone could have just taken the money. We should find a better method to make sure that the developer gets the money and no one else.

I think the best way to avoid past mistakes would be to create a paypal that people can send money into. And then entrust that pay-pal to a moderator of this site or someone trust able who could then pass the cash along to the developer. That is the best way or at least that is what i think. I mean i doubt a moderator would go rouge and loose their status for a bit of cash.

 

[martyjake]

Wow so the community already did this? damn that is quite alot of money.



I think the best way to avoid past mistakes would be to create a paypal that people can send money into. And then entrust that pay-pal to a moderator of this site or someone trust able who could then pass the cash along to the developer. That is the best way or at least that is what i think. I mean i doubt a moderator would go rouge and loose their status for a bit of cash.

Yeah that's a good idea, but why hasn't it been before?

 

[Abu_Senpai]

Yeah that's a good idea, but why hasn't it been before?

I honestly have no idea. i am an off and on member.

Maybe one of the old timers here can tell us why?

But yeah i think if someone like Costello for example made a paypal which only HE could access. Then the community would simply need to donate how much ever cash that they wanted into said paypal account via email

Then once the exploit is released. Costello or whoever is in charge of the pay pal can simply send the cash from his pay pal into the pay pal of the developer.

 

[LightOffPro]

I think the best way to avoid past mistakes would be to create a paypal that people can send money into. And then entrust that pay-pal to a moderator of this site or someone trust able who could then pass the cash along to the developer. That is the best way or at least that is what i think. I mean i doubt a moderator would go rouge and loose their status for a bit of cash.

The problem with that is, who's gonna be the lucky dev? And will a single dev receive the cash while others are left in the dark?
I only know of Derrek (singular dev that made some interesting stuff on the 3DS, but never releases to the public) and the ReSwitched team... There should be a list somewhere of the active devs working on the Switch.

 

[Abu_Senpai]

The problem with that is, who's gonna be the lucky dev?
I only know of Derrek (singular dev that made some interesting stuff on the 3DS, but never releases to the public) and the ReSwitched team... There should be a list somewhere of the active devs working on the Switch.

Well if only one developer made the contribution then that developer should receive it all. But if a team was behind the exploit release or hack or whatever you want to call it then the cash should be split equally unless each team member agrees that one of the team members deserves more than the rest of the them. As a result of their contribution towards the exploit release.

Edit:

Oh and you would also need to discuss other terms before creating the whole pay-pal thing. Since as we can clearly see from the 3DS scene. There can be a list of devs behind hacks etc...
I personally think we should only reward devs who made big contributions like for example i would say Team molecule and the Flow should be given cash for their work.

Actually the best way to solve that problem would be to hold a Poll. Where you ask the community if ALL devs for a particular scene should be given cash or just the core team who made X system hack-able. I personally think just the core team should be given money, but i am sure many would want to donate to other minor devs too.

 

[The Real Jdbye]

With Nintendo's HackerOne system possibly delaying exploits, we should create a money pool so people can release exploits to us instead of Nintendo.

The only problem is how we can make sure that the money will go to the developer instead of someone just stealing it.

I've been thinking about doing something with crypto coins, like Etherum's smart contracts, but I don't know if they would work for something like this.

Any ideas?

I have had the same thought when hearing about the success of Nintendo's HackerOne program, and I'm sure there are plenty of people who would donate a few bucks to get new hacks on Switch/3DS, I myself would pitch in $20 for a Switch TrustZone hack. And wouldn't it be much better for everyone if the public had the hacks instead of Nintendo patching them before they're ever released?
Of course there will always be those anti-piracy people who will send exploits to Nintendo just to avoid piracy on the console, but I think most people would rather have a flourishing homebrew scene if there wasn't a monetary benefit to sending the exploits to Nintendo instead.

 

[DeoNaught]

I like the paypal Idea.

I think we should have like

10-30 for app,

maybe 30-60 for userland type exploit,

and then however much for kernel exploit.

BUT have several mods check before the money is given

something like that

 

[DarkOrb]

This idea might be too much, but it would be the best solution imo: A website like Kickstarter where hacker can post a Proof of Concept. Trusted mods have to approve the validity of the project before people can actually see it on the website. After the project reached a certain amount of money (f.e. 3000$), the website will automatically release the files and tutorial which the dev added to the project beforehand.

 

[DeoNaught]

This idea might be too much, but it would be the best solution imo: A website like Kickstarter where hacker can post a Proof of Concept. Trusted mods have to approve the validity of the project before people can actually see it on the website. After the project reached a certain amount of money (f.e. 3000$), the website will automatically release the files and tutorial which the dev added to the project beforehand.

No kickstarter

 

[DarkOrb]

No kickstarter

No, I didn't mean kickstarter. I meant a website where devs post their PoC, the files and a tutorial how to use these files. When this project got a certain amount of money of donations, the download-link and tutorial will be unlocked for everyone and the dev gets the money.

 

[Scrlklk]

No, I didn't mean kickstarter. I meant a website where devs post their PoC, the files and a tutorial how to use these files. When this project got a certain amount of money of donations, the download-link and tutorial will be unlocked for everyone and the dev gets the money.

I think you mean Patreon. Like what Cemu does