News for hackers. Stuff that matters.
Re:Inside Nintendo’s “perfect” method for detecting online S... by SifJar on Wednesday June 20, 2018 @12:30PM (#17356887)
More technical analysis: https://www.reddit.com/r/SwitchHacks/comments/8rxg26/psa_str...

(this is the post the Ars Technica post is referring to)

Re:Inside Nintendo’s “perfect” method for detecting online S... by jordigh on Wednesday June 20, 2018 @02:30PM (#17358227)
I haven't owned a console in decades, so bear with me: is it currently possible to buy a game and lend it to a friend? I used to borrow my friend's cartridges as a kid. Is that now piracy?

What about second-hand rentals, is that also immoral now?

Re:Inside Nintendo’s “perfect” method for detecting online S... by javagram on Wednesday June 20, 2018 @02:41PM (#17358359)
Lending cartridges and discs works fine (on all modern consoles) and is not piracy. (Edit: Microsoft proposed changing this with the Xbox one by requiring discs to be activated online, but backed down before ever implementing the plan)

The only piracy Nintendo is worried about is cartridge duplication or downloads that don’t involve paying the retail price in the eshop.

Re:Inside Nintendo’s “perfect” method for detecting online S... by setr on Thursday June 21, 2018 @09:32PM (#17370608)
Are you sure about that? The one and only time I've interacted with an xbox one, we picked up a physical game, put it in, and then downloaded the game to the xbox. Afaict, there was nothing on the disk itself except perhaps an identifier and a key; the download was substantial. Probably the stupidest interaction I've had with computers yet.

And if thats still the case, I can't imagine downloading the game to multiple xbox's valid behavior. But I also dont remember if the disk was required to be inserted to actually play (which would make the interaction even more obscene).

Re:Inside Nintendo’s “perfect” method for detecting online S... by CedarMadness on Wednesday June 20, 2018 @02:37PM (#17358319)
I think as long as two systems aren't playing the same copy at the same time, they wouldn't do any banning. So lending and rentals should still be acceptable.
Re:Inside Nintendo’s “perfect” method for detecting online S... by izacus on Wednesday June 20, 2018 @04:08PM (#17359253)
The gaming industry has waged war against reselling games for years. They've been partially successful: most PC games these days come as a Steam code. Any kind of Steam content is DRM protected and cannot be resold. You're also not allowed to play two of the games you own on two computers at once (Steam will immediately log you out). There's family sharing but again your family isn't allowed to play any of your games while you're playing.

On consoles the more expensive physical media is still transferable (BR discs and Switch cardridges). Any kind of digital downloads or DLC addons aren't shareable and you're not allowed to sell them or transfer them.

Re:Inside Nintendo’s “perfect” method for detecting online S... by spathi_fwiffo on Wednesday June 20, 2018 @03:59PM (#17359167)
As others said, physical stuff is still sharable; since only one can use it at a time.

However with app-store (no physical disc) stuff, that can't be shared. Basically the same as on PC when using Steam - you get single account lock-in because it is all software only.

(Steam has implemented limited sharing, but it isn't all that great).

Re:Inside Nintendo’s “perfect” method for detecting online S... by crtasm on Thursday June 21, 2018 @08:36AM (#17364503)
On both Xbox one and ps4 you and a friend can set each other's console as your 'home' console. You can then play their digital purchases as well as your own, but with the caveats:

- you must be signed in online to play your own purchases

- other accounts on the console you own lose access to games purchased by your account

You don't need to reveal your passwordor share accounts, just sign in on the console once and set it as 'home'.

Re:Inside Nintendo’s “perfect” method for detecting online S... by mclehman on Thursday June 21, 2018 @02:03PM (#17367698)
Back on the xbox 360, there was a more involved process to do the same thing. A digital purchase really granted two licenses: one tied to your account and one tied to the specific 360 that downloaded it. My sister and I took advantage of that to share season passes for various Call of Duty games.
Re:Inside Nintendo’s “perfect” method for detecting online S... by crtasm on Saturday June 23, 2018 @07:22AM (#17380708)
Useful trick, although I first discovered it when visiting family, buying a game on my account and then wondering why I couldn't play it offline back on my own console.
Re:Inside Nintendo’s “perfect” method for detecting online S... by jsgo on Wednesday June 20, 2018 @02:33PM (#17358261)
I'm a bit confused here. I have two Switch consoles, one for myself and one for my daughter. Say I buy the cartridge for the new Smash Bros game. We take turns between my console and her console using the cartridge (not at the same time, for obvious reasons).

Because her unique console and my unique console are sharing a cart (with same cert, I imagine), is that going to lead to us being banned? I honestly haven't done online yet (BotW mostly, some Bomberman local multiplayer), so I don't know if this is an obvious "no" or not, but I do plan to play Smash Bros.

Re:Inside Nintendo’s “perfect” method for detecting online S... by intopieces on Wednesday June 20, 2018 @03:09PM (#17358668)
This is perfectly OK. Since you're using a physical cartridge, it's not possible for that cert to be accessing the online system at the same time.
Re:Inside Nintendo’s “perfect” method for detecting online S... by ss248 on Wednesday June 20, 2018 @12:24PM (#17356821)
>If you download an illegitimate copy of a Switch game that was purchased on a different console/account, Nintendo can detect the mismatch as soon as you log in and immediately ban the console from its network.

What is stopping hackers from purchasing one game legitimately and just spoof the data after?

Re:Inside Nintendo’s “perfect” method for detecting online S... by beefhash on Wednesday June 20, 2018 @01:15PM (#17357335)
> What is stopping hackers from purchasing one game legitimately and just spoof the data after?

If you mean "spoof" in the sense of duplicating the certificate/ticket: Because two consoles would try to use the same cart certificate/ticket.

If you mean "spoof" in the sense of making a fake certificate/ticket: The certificate/ticket are signed by Nintendo, so they can verify on the server side if it's fake or not.

If you mean spoof the console data: As far as I know, you require an NNID to go online, which the console is tied to. So the pirates would have to share login data and chain all the carts/tickets to that one console and login combination. That's probably going to be practically infeasible. Even if it wasn't, Nintendo could probably notice an odd amount of sign-ins coming from a single console, yet also all over the world.

Re:Inside Nintendo’s “perfect” method for detecting online S... by kodablah on Wednesday June 20, 2018 @12:54PM (#17357090)
Didn't read the reddit post, but usually the way these things work is there are two cert checks. One for the console and one for the game. The game cert is signed (or there is a signature somewhere) by both the console cert and Nintendo's game-cert CA (not to be confused with Nintendo's console-cert CA which may have the same root but are unlikely the same) in that order. Both are checked server side.
Re:Inside Nintendo’s “perfect” method for detecting online S... by SmallDeadGuy on Wednesday June 20, 2018 @12:28PM (#17356855)
You can't spoof the data, it's generated unique to each game then signed by Nintendo in a way that isn't reversible to anyone else.
Re:Inside Nintendo’s “perfect” method for detecting online S... by ss248 on Wednesday June 20, 2018 @12:34PM (#17356920)
Yeah, i have read the reddit post now [1].

If i understood correctly, Nintendo only allows access to online features of the game specified in that particular certificate.

[1] - https://www.reddit.com/r/SwitchHacks/comments/8rxg26/psa_str...

Re:Inside Nintendo’s “perfect” method for detecting online S... by Scaevolus on Wednesday June 20, 2018 @02:22PM (#17358124)
This does mean that you can buy a game, hack it using a modded console, and play online.

This doesn't prevent cheating in online games, just piracy.

Re:Inside Nintendo’s “perfect” method for detecting online S... by acct1771 on Thursday June 21, 2018 @04:15PM (#17368881)
> signed by Nintendo in a way that isn't reversible to anyone else.

Well, now you're just challenging people.

Re:Inside Nintendo’s “perfect” method for detecting online S... by oh_sigh on Wednesday June 20, 2018 @12:35PM (#17356929)
How will they handle online banned units when they start getting resold on Craigslist to people who don't know to check it's online access status?
Re:Inside Nintendo’s “perfect” method for detecting online S... by SmellyGeekBoy on Wednesday June 20, 2018 @01:23PM (#17357445)
The same way Microsoft and Sony have always done, I'd imagine. Or Apple for that matter.. It's not like there isn't plenty of precedent for this.

That answer being "hard luck, once it's locked it's locked".

Re:Inside Nintendo’s “perfect” method for detecting online S... by ben174 on Wednesday June 20, 2018 @12:38PM (#17356957)
I assume the same way it’s handled when you buy any other broken product. Buyer beware.
Re:Inside Nintendo’s “perfect” method for detecting online S... by EpicEng on Wednesday June 20, 2018 @01:15PM (#17357328)
Would you buy a console without turning it on?
Re:Inside Nintendo’s “perfect” method for detecting online S... by Sir_Cmpwn on Wednesday June 20, 2018 @01:29PM (#17357516)
Would you buy a console without turning it on, popping in an online-ready game, and attempting to go online?
Re:Inside Nintendo’s “perfect” method for detecting online S... by BHSPitMonkey on Wednesday June 20, 2018 @02:00PM (#17357887)
Nintendo should start adding some bright, easily visible message to the system UI that indicates the device is permanently restricted so that buyers doing a cursory check would see it. It should be as obvious as a theft-bricked iPhone.
Re:Inside Nintendo’s “perfect” method for detecting online S... by JackCh on Wednesday June 20, 2018 @02:56PM (#17358534)
I believe they have a financial incentive to not do this. If buying a second-hand switch is perceived as risky, then sales of new switches will be encouraged. Of course this would cause a switch to depreciate even more when you buy it since it would suppress the market price of a used switch. But I'd wager most people aren't considering how much they could get from selling their switch when they're considering buying one.
Re:Inside Nintendo’s “perfect” method for detecting online S... by EpicEng on Wednesday June 20, 2018 @04:42PM (#17359564)
Alright I'm claiming ignorance here; I didn't know you had to play an online game to know. Figured it would tell you as soon as it came up assuming you were near wifi (which even then is a big assumption.) My mistake, hadn't thought it through.
Re:Inside Nintendo’s “perfect” method for detecting online S... by kbob on Thursday June 21, 2018 @09:49AM (#17365025)
I never connected my Switch to the network. Is there some functionality I'm missing?
Re:Inside Nintendo’s “perfect” method for detecting online S... by Doxin on Friday June 22, 2018 @05:44AM (#17372717)
the E-shop and system updates mostly. If you don't care about either of those it's not a big deal to not have your switch networked.

sidenote: I love how the switch deals with system updates, from a user perspective they take less than 3 seconds.

Re:Inside Nintendo’s “perfect” method for detecting online S... by jpeter on Wednesday June 20, 2018 @02:43PM (#17358389)
Nintendo? The same company that let's you download games directly from there store (without buying them) so you can play them on an emulator?
Re:Inside Nintendo’s “perfect” method for detecting online S... by rasz on Wednesday June 20, 2018 @04:13PM (#17359290)
Nintendo. The same company shipping scene rom dump inside Wii Super Mario Bros.
Re:Inside Nintendo’s “perfect” method for detecting online S... by adamrezich on Wednesday June 20, 2018 @03:56PM (#17359135)
Where is this?
Re:Inside Nintendo’s “perfect” method for detecting online S... by benologist on Wednesday June 20, 2018 @01:14PM (#17357324)
Sounds like the EU will have to invite Nintendo to go fuck themselves for disabling resellable devices. The other thing they do that's pretty nasty is requiring their permission to buy a developer kit instead of something like wifi or a USB cable.
Re:Inside Nintendo’s “perfect” method for detecting online S... by LocalH on Wednesday June 20, 2018 @01:32PM (#17357553)
They're not disabling anything. They're banning consoles from online services after attempts to connect to those online services with a pirated game. The device itself is perfectly usable for single-player gaming. This is exactly like Sony and Microsoft have already done for years. If the EU goes after Nintendo here, why haven't they already gone after Sony and Microsoft for the same thing?
Re:Inside Nintendo’s “perfect” method for detecting online S... by benologist on Wednesday June 20, 2018 @01:38PM (#17357621)
Do Microsoft and Sony ban the person or the actual console device? Nintendo are going for the account and the device for what amounts to unsanctioned-by-them use of software:

     "permanently ban those consoles from Nintendo's network."

     "a banned console will stay banned from the network"
Re:Inside Nintendo’s “perfect” method for detecting online S... by Isomatik on Wednesday June 20, 2018 @02:31PM (#17358241)
I can say at least that the Xbox 360's standard ban for pirated games that failed verification checks was a console level ban, as in, you can take your hard drive and plug it into a new console and you're gaming again. There were also several times account bans were applied as well, like when Forza 3 dropped several weeks early and people tried playing online.
Re:Inside Nintendo’s “perfect” method for detecting online S... by scotteh on Wednesday June 20, 2018 @01:31PM (#17357539)
The devices aren't being disabled, they're just having their access to Nintendo's online services restricted. This practice isn't anything new, and has been around as long as internet-enabled consoles have.
Re:Inside Nintendo’s “perfect” method for detecting online S... by benologist on Wednesday June 20, 2018 @01:32PM (#17357554)
From the article:

     "permanently ban those consoles from Nintendo's network."

     "a banned console will stay banned from the network permanently"
It's a device-level ban so it will be applied to any subsequent owners.
Re:Inside Nintendo’s “perfect” method for detecting online S... by wernercd on Wednesday June 20, 2018 @01:51PM (#17357771)
If the device has pirated material, isn't the assumption that it's hacked?

How can a resold device be trusted, no matter the owner?

Re:Inside Nintendo’s “perfect” method for detecting online S... by benologist on Wednesday June 20, 2018 @01:57PM (#17357856)
We don't throw out (or ban from online) computers, telephones or tablets when they get a piece of malware installed instead we remove the malware or reset the devices.
Re:Inside Nintendo’s “perfect” method for detecting online S... by MBCook on Wednesday June 20, 2018 @01:50PM (#17357760)
Yep. Normal resale is fine and won’t trigger a ban, trying o circumvent the anti-piracy/cheating stuff will.

Just like the other consoles on the market.

So don’t buy those consoles second hand. Again, exactly the same as PS and Xbox.

Re:Inside Nintendo’s “perfect” method for detecting online S... by benologist on Wednesday June 20, 2018 @01:54PM (#17357812)
If Microsoft and Sony do it too it just means all three companies are willfully infringing consumers' rights to buy and sell stuff second hand.
Re:Inside Nintendo’s “perfect” method for detecting online S... by evgen on Wednesday June 20, 2018 @02:24PM (#17358148)
They are not infringing on consumers rights to buy and sell the consoles, but the seller who knows that the console has been banned from online services is perpetrating a fraud upon the buyer. You can buy and sell consoles all day long, but transfer of ownership does not change the status of the console any more than selling a broken console (that is outside any hardware warrantee) obligates a manufacturer to make it work again.
Re:Inside Nintendo’s “perfect” method for detecting online S... by benologist on Wednesday June 20, 2018 @02:47PM (#17358423)
It's more like the company is punishing the current and arbitrarily the future owners of a perfectly functional device because they have some project going to prevent copyright infringement within their company, and way above that is consumer protection laws that are just woefully slow to be applied forcefully.

It took many years but Steam changed their old refund policy after a judge in Australia noted how criminal the old one was where they gave themselves permission to steal indiscriminately from consumers seeking refunds and used their imaginary authority to steal from an estimated 20,000 Australians. They actually stole from people all over the world but seem to have gotten away with it everywhere else.

Re:Inside Nintendo’s “perfect” method for detecting online S... by spathi_fwiffo on Wednesday June 20, 2018 @04:08PM (#17359255)
I think their idea is to punish the current owner; but if that is allowed, there also must be some kind of protection for the secondhand market.

If there was some form of serial #check system (like a car's VIN) for the consoles, then it would be harder to re-sell disabled consoles; still wouldn't prevent people from trying to re-sell them, but it would make it more firmly a case of fraud on the sellers' part if they lied about the serial#.

Re:Inside Nintendo’s “perfect” method for detecting online S... by benologist on Wednesday June 20, 2018 @04:51PM (#17359641)
Why can't they just ban by account? Anyone circumventing bans is going to be committing identity fraud or other crimes so shouldn't they be passing it to law enforcement if they want to pursue it.

Switch hardware will likely be resold for decades so it's obviously going to be onerous for consumers that the devices may be invisibly crippled just because they want less copyright infringement.

They don't even need to ban accounts permanently, it's pretty disproportionate when you think in years and decades of a device's life.

Re:Inside Nintendo’s “perfect” method for detecting online S... by crtasm on Thursday June 21, 2018 @08:45AM (#17364550)
If it's like Sony or Microsoft consoles all you need to make a new account is a different email.

You wouldn't have your save games but if you're setup to run unlicensed copies of games maybe you can also transfer those?

Re:Inside Nintendo’s “perfect” method for detecting online S... by ribosometronome on Wednesday June 20, 2018 @01:26PM (#17357485)
>Sounds like the EU will have to invite Nintendo to go fuck themselves for disabling resellable devices.

Don't virtually all phones have similar functionality?

Re:Inside Nintendo’s “perfect” method for detecting online S... by benologist on Wednesday June 20, 2018 @01:28PM (#17357507)
Do you mean the registry to prevent reselling stolen phones?
Re:Inside Nintendo’s “perfect” method for detecting online S... by reacweb on Wednesday June 20, 2018 @01:13PM (#17357303)
I can't drive my car as soon as I run a red light. The punishment seems harsh.
Re:Inside Nintendo’s “perfect” method for detecting online S... by CGamesPlay on Wednesday June 20, 2018 @01:31PM (#17357532)
I feel like a closer analogy would be "I can't drive my car as soon as I install flame-thrower exhaust".

What would cause a user in normal operation of a switch to be permanently banned form the Nintendo network?

Re:Inside Nintendo’s “perfect” method for detecting online S... by loser777 on Wednesday June 20, 2018 @01:42PM (#17357672)
Isn't the most direct analogy: a stolen car refuses to start? But I would still download a car if I could.

side note: What does flamethrower mean in this case? Some potentially totally legitimate car modifications (e.g., two-step launch control) have the side effect of dumping unburnt fuel into the exhaust, creating a "flamethrower" effect. Not sure if two-step violates noise or "flamethrower" laws first though ;).

Re:Inside Nintendo’s “perfect” method for detecting online S... by secabeen on Wednesday June 20, 2018 @07:39PM (#17360889)
> Isn't the most direct analogy: a stolen car refuses to start? But I would still download a car if I could.

Perhaps, and if you buy a stolen item, and the police find it, they will return it to the original owner. You get nothing, you just lost the money you spent.

Re:Inside Nintendo’s “perfect” method for detecting online S... by reacweb on Thursday June 21, 2018 @03:19AM (#17362849)
A "normal" user who has a child who has received a "pirated game" as a gift at school?
Re:Inside Nintendo’s “perfect” method for detecting online S... by Thaxll on Wednesday June 20, 2018 @02:36PM (#17358296)
The Switch is already hacked meaning that you can have cheaters online, none of what Nintendo is doing prevents that so it's a huge fail ( where Sony and MS are secured )
Re:Inside Nintendo’s “perfect” method for detecting online S... by mkirklions on Wednesday June 20, 2018 @01:05PM (#17357218)
Since its Nintendo, how easy will it be to break their system?

I can only imagine after beating Zelda and this years Smash people will have plenty of time to make their 450 dollar system(after necessary hardware) interesting.

Im teasing, but after a decade of awful Nintendo systems and letdowns, I'm not above trashing this company.