What does Nintendo Switch and iOS 9.3 have in common? CVE-2016-4657 walk-through (opens in new tab)

(youtube.com)

119 pointsLiveOverflow9y ago29 comments

29 comments

24 comments · 8 top-level

jsheard9y ago· 5 in thread

The 3DS was hacked multiple times via pre-existing WebKit exploits, you'd think Nintendo would have learned to keep it up to date by now. Apparently not...

IntelMiner9y ago

Nintendo doesn't directly control the browser. The browser is based on "NetFront" from Japanese company "Access Co. Ltd"

According to Wikipedia, the last "stable release" was in 2012. Which may also contribute to things

https://en.wikipedia.org/wiki/NetFront

mathw9y ago

Well, you can blame them, because they could have picked a browser that's rather more up to date.

fredoralive9y ago

The browser last updated in 2012 seems to be the older Netfront that uses a custom engine, not the Webkit one (Netfront NX).

The older Netfront predates Webkit, it was available for the Dreamcast.

creshal9y ago

And before that they used pre-Blink Opera.

Nintendo really has bad luck with picking their browser vendors…

1 more reply

grawlinson9y ago

Nintendo isn't the only one.

The PS Vita (and PS4, but I may be wrong) were also hacked by a chain of exploits that started with, you guessed it, simple WebKit exploits.

imjustsaying9y ago· 4 in thread

>What does Nintendo Switch and iOS 9.3 have in common? CVE-2016-4657 walk-through

For the ESLers out there, the verb here should be do instead of does.

jimmies9y ago

"What does Nintendo Switch have in common with iOS 9.3?" will work too, right?

imjustsaying9y ago

yes

LiveOverflowOP9y ago

thanks. I blame it on being not a native speaker :P I fixed it on YouTube.

esrauch9y ago

Just fyi his correction is right but somewhat pedantic: no one would bat an eye at that error in a work email.

1 more reply

russellbeattie9y ago· 3 in thread

I noticed when I signed into Twitter via the Switch, it used the internal browser, which Twitter identified as Safari. Not sure what the actual User-Agent was, but the big N seems to have just pulled the browser code off the shelf (not surprising).

creshal9y ago

WebKit based browsers tend to include Safari in their user agent.

pbhjpbhj9y ago

http://www.supportdetails.net/ and http://www.whatsmybrowser.org/ both give the full UA string.

anomie319y ago

The web browser used is Netfront, according to licensing info.

anomie319y ago· 3 in thread

I gotta say, I'm really annoyed at whoever let the cat out of the bag so soon. I'm afraid shit like this will frustrate the efforts of many. Have some patience y'all.

LiveOverflowOP9y ago

It was already out of the bag. That the switch is vulnerable to this was quickly known on day 1 and shortly after posted all over the internet. I didn't leak something private.

anomie319y ago

I know, I wasn't referring to you in particular, it was no secret a while ago. I guess it was inevitable since it was so easy. I'm just sore that this will likely be patched in future updates now.

nicky09y ago

You're gonna have to be cleverer then.

throwaway164849y ago· 1 in thread

Considering all the horror stories about Japan's IT industry, should this really come as a surprise?

kworker9y ago

What horror?

hulahoof9y ago

I was at work so unable to watch video, the GitHub[1] page was quite informative though =)

[1] https://github.com/LiveOverflow/lo_nintendoswitch/blob/maste...

veli_joza9y ago

Thanks for very informative video. Sketches and diagrams on top of code are really well done. I wish more tutorials would use them.

breakingcups9y ago

Very well explained video. This was incredibly interesting to watch.

j / k navigate · click thread line to collapse

29 comments

24 comments · 8 top-level

jsheard9y ago· 5 in thread

The 3DS was hacked multiple times via pre-existing WebKit exploits, you'd think Nintendo would have learned to keep it up to date by now. Apparently not...

IntelMiner9y ago

Nintendo doesn't directly control the browser. The browser is based on "NetFront" from Japanese company "Access Co. Ltd"

According to Wikipedia, the last "stable release" was in 2012. Which may also contribute to things

https://en.wikipedia.org/wiki/NetFront

mathw9y ago

Well, you can blame them, because they could have picked a browser that's rather more up to date.

fredoralive9y ago

The browser last updated in 2012 seems to be the older Netfront that uses a custom engine, not the Webkit one (Netfront NX).

The older Netfront predates Webkit, it was available for the Dreamcast.

creshal9y ago

And before that they used pre-Blink Opera.

Nintendo really has bad luck with picking their browser vendors…

1 more reply

grawlinson9y ago

Nintendo isn't the only one.

The PS Vita (and PS4, but I may be wrong) were also hacked by a chain of exploits that started with, you guessed it, simple WebKit exploits.

imjustsaying9y ago· 4 in thread

>What does Nintendo Switch and iOS 9.3 have in common? CVE-2016-4657 walk-through

For the ESLers out there, the verb here should be do instead of does.

jimmies9y ago

"What does Nintendo Switch have in common with iOS 9.3?" will work too, right?

imjustsaying9y ago

yes

LiveOverflowOP9y ago

thanks. I blame it on being not a native speaker :P I fixed it on YouTube.

esrauch9y ago

Just fyi his correction is right but somewhat pedantic: no one would bat an eye at that error in a work email.

1 more reply

russellbeattie9y ago· 3 in thread

creshal9y ago

WebKit based browsers tend to include Safari in their user agent.

pbhjpbhj9y ago

http://www.supportdetails.net/ and http://www.whatsmybrowser.org/ both give the full UA string.

anomie319y ago

The web browser used is Netfront, according to licensing info.

anomie319y ago· 3 in thread

I gotta say, I'm really annoyed at whoever let the cat out of the bag so soon. I'm afraid shit like this will frustrate the efforts of many. Have some patience y'all.

LiveOverflowOP9y ago

It was already out of the bag. That the switch is vulnerable to this was quickly known on day 1 and shortly after posted all over the internet. I didn't leak something private.

anomie319y ago

I know, I wasn't referring to you in particular, it was no secret a while ago. I guess it was inevitable since it was so easy. I'm just sore that this will likely be patched in future updates now.

nicky09y ago

You're gonna have to be cleverer then.

throwaway164849y ago· 1 in thread

Considering all the horror stories about Japan's IT industry, should this really come as a surprise?

kworker9y ago

What horror?

hulahoof9y ago

I was at work so unable to watch video, the GitHub[1] page was quite informative though =)

[1] https://github.com/LiveOverflow/lo_nintendoswitch/blob/maste...

veli_joza9y ago

Thanks for very informative video. Sketches and diagrams on top of code are really well done. I wish more tutorials would use them.

breakingcups9y ago

Very well explained video. This was incredibly interesting to watch.

j / k navigate · click thread line to collapse