Hacking Savefile encryption of Ridge Racer 3D has been broken

[SanGor]

https://twitter.com/#!/BroadOn/status/53320201315430400

We might get an exploit earlier than we've expected

 

[Xuphor]

Interesting. Stil though, April first is here/coming depending on country.... Someone cold have just edited that in hex editor, it might not run on 3DS at all.

 

[WiiUBricker]

It's not an aprils fool. But it's nothing, really.

 

[MelodieOctavia]

I doubt this will come to anything.

 

[xakota]

Don't get too excited. It's a minor flaw in the savefile encryption. It probably isn't going to lead to anything.

 

[ultimatt42]

Don't get too excited. It's a minor flaw in the savefile encryption. It probably isn't going to lead to anything.

A minor flaw is the same as a major flaw if it lets you decrypt (and presumably re-encrypt) savefiles. I agree, it's probably not going to be useful by itself, but it's still a prerequisite for a lot of the things we'd like to be able to do on the 3DS. I've heard that saves aren't transferable because each save is encrypted using a system-specific key, but if we're able to decrypt them then we can make them transferable.

Also, if you can modify savefiles you can start poking around for buffer overflows and other exploitable bugs. I really hope Nintendo has had a few words with their third-party devs (and first-party devs, for that matter) asking them to triple check that ALL buffers in savefile reading code have overflow protection given how badly they got bitten on the Wii, but devs are still fallible so it's worth checking.

I wonder what the "slight flaw" was, anyone have any more info yet?

 

[deathking]

i hope something comes out of this
will probably get ridge racer in anticipation

 

[spiritofcat]

That was posted on twitter 21 hours ago, which is before April 1st even here in Australia so maybe it is true.
I wasn't aware that anyone had even found a way of extracting save files yet.

Edit: Looking at that twitter account there's a new post about that same fail applying to games too.

 

[deathking]

Ooops looks like the same fail applies to games! http://bit.ly/eQSrkD (No April's Fool!)

i hope something comes out of this

 

[xakota]

Ooops looks like the same fail applies to games! http://bit.ly/eQSrkD (No April's Fool!)

i hope something comes out of this

how could they POSSIBLY know that? There's no dumps!

 

[KuRensan]

Ooops looks like the same fail applies to games! http://bit.ly/eQSrkD (No April's Fool!)

i hope something comes out of this

how could they POSSIBLY know that? There's no dumps!

Because it is in the SAVEFILE which means it's in the save file and not in the game itself

 

[SanGor]

Ooops looks like the same fail applies to games! http://bit.ly/eQSrkD (No April's Fool!)

i hope something comes out of this

how could they POSSIBLY know that? There's no dumps!

They obviously have dumps ...

 

[linuxares]

That man really love to find loopholes =)

I really want to know what he works with IRL! =)

Good work man!

 

[morphius]

Where are the saves saved? Cart, Internal, or SD?

 

[koji2009]

Could this lead to an exploit? Possibly... The original wii exploit was taking advantage of a buffer overflow relating to Epona's name... The easiest way to test is to simply input a longer name than should be possible and see if the game crashes. That wouldn't be a guarantee it'd work, but it would tell us if there is any possible way to exploit it, or if the game would simply truncate the nick to fit.

 

[chortya]

Has anybody tried SMS4 or SMS2 for 3DS game backup?

 

[2128]

Where are the saves saved? Cart, Internal, or SD?

On the cart, just like the DS.

 

[tvararu]

Looks like we found a mjor flaw in the QR image handler -> http://crediar.no-ip.com/qrhaxx.JPG
41 minutes ago via web

Anyone man enough to scan that?

 

[koji2009]

Looks like we found a mjor flaw in the QR image handler -> http://crediar.no-ip.com/qrhaxx.JPG
41 minutes ago via web

Anyone man enough to scan that?

It's a rick roll... creates a "rick astley" mii.. lamest joke ever.

 

[chortya]

http://en.wikipedia.org/wiki/Rickrolling

For non-US/UK guys like me