Hacking Question Possible My Nintendo Rewards abuse?

[ANTONIOPS]

I don't know how this system works but I think Nintendo gives you the points based on the ID or hash of the game card stored on the Ninty database, but what if someone with cfw access tries to spoof the id of the game card and the id matches with a real one? Do you think people could abuse this system?. Consoles would probably get banned but hey, who knows?

Edited: Guys, this is just a question, ok? I don't pretend to steal anything.

 

[smileyhead]

what if someone with cfw access tries to spoof the id of the game card and the id matches with a real one?

That's a great idea! Let's literally steal others' MyNintendo points! /s

 

[yardie]

nasty crook

 

[Deleted-355425]

Lol how many crappy desktop wallpapers do you really want from spending all them stolen gold coins

 

[SomeGamer]

Lol how many crappy desktop wallpapers do you really want from spending all them stolen gold coins

You can't get desktop wallpapers by spending Gold Coins.

 

[ArcLP]

All the people complaining about this don't really understand how this kind of thing works. I've got no opinion on OP's plan but just a heads up, it may be wrong to some, but life and systems doesn't fully work like that.

Even then I doubt OPs plan is fully possible. There'd probably be some validation issues upon trying. (PROBABLY)

 

[SciresM]

View attachment 114643

I don't know how this system works but I think Nintendo gives you the points based on the ID or hash of the game card stored on the Ninty database, but what if someone with cfw access tries to spoof the id of the game card and the id matches with a real one? Do you think people could abuse this system?. Consoles would probably get banned but hey, who knows?

When you register a game card, NIM makes a request to the following URL:

https://beach.hac.lp1.eshop.nintendo.net/v1/rom_cards/register?application_id=<title_id>&rom_card_cert=<game cart's unique certificate>

The uploaded certificate is verified serverside with RSA, using keydata that only Nintendo has.

I am pretty confident there is zero possibility for forgery -- the system is secure.

 

[Deleted-355425]

You can't get desktop wallpapers by spending Gold Coins.

It was a joke, the whole thing is pretty crappy.

 

[leon315]

game cartrige is NOT rewriteable!

 

[Futurdreamz]

All you're going to get are crappy wallpapers or discounts on games you're not going to buy anyways. Pretty pointless if you ask me.


...But this line of thinking might just be why we DON'T have any physical rewards yet.

 

[smileyhead]

game cartrige is NOT rewriteable!

No shit.
Also, spoofing ID != rewriting ID on the cart.

 

[ANTONIOPS]

When you register a game card, NIM makes a request to the following URL:

https://beach.hac.lp1.eshop.nintendo.net/v1/rom_cards/register?application_id=<title_id>&rom_card_cert=<game cart's unique certificate>

The uploaded certificate is verified serverside with RSA, using keydata that only Nintendo has.

I am pretty confident there is zero possibility for forgery -- the system is secure.

Ahh ok, so one way would be by brute forcing the keys but that can take ages, or by crafting a valid certificate but that won't work if nintendo stores all the generated certificates in a database.

 

[gameboy]

I was a Nintendo Platinum rewards member for years before they stopped that whole thing and i can tell you right now all of its rewards were utter trash and all the good ones were first come first serve.

 

[Deleted User]

I redeemed my splatoon 2 my friends and my copy, and it redeemed both. Maybe it's stored online/in the system?

 

[Jayro]

unless you borrow games from your friends who don't cash in on it first, there's no way to steal gold coins.

 

[dogmarch]

unless you borrow games from your friends who don't cash in on it first, there's no way to steal gold coins.

you could always hit them with a red shell.

anw, there isn't much rewards worth stealing coins for.

 

[Bladexdsl]

you'd have to steal a shitload of coins because 1 gold coin = 1 cent!

 

[FenexFox]

i remember hearing that eventually these coins are going to allow you to buy games like 500 coins is 5 EUR (i say EUR cause i didn't hear it mention any other currency) and also be used to get discounts like 500 coins = 5 EUR = 5 EUR discount of a game

so if what i remember is true this could be a big problem for nintendo and i assume they will try to ban anyone that tries it.

I could be completely wrong tho about any of this

 

[djricekcn]

Lol how many crappy desktop wallpapers do you really want from spending all them stolen gold coins

Coming March, at least for JP accounts, you 1gold point = 1 yen

 

[Jayro]

you'd have to steal a shitload of coins because 1 gold coin = 1 cent!

But each game cart gets you 12 coins.