Hacker News Reader

Comment by Narann | Hacker News Reader

All of this is weird. Leaving a SSL CA open to anyone ~~the day official servers are close~~.

EDIT: Bug exists since 1 march 2021.

At first, it seems nice. But its impossible that Nintendo being nice in anyway, and even less more by adding a bug. This, and Pretendo that seems to expect the bug before the release.

I find this really suspicious.

View on HN

I would assume they sat on this until Nintendo shut down service to ensure they wouldn't push a fix.

Indeed, from their blog post

> We've been holding on to this exploit for this day for quite some time, in case Nintendo decided to issue patches for it.

https://news.ycombinator.com/item?id=39978886

Before anybody asks why Nintendo would patch exploits for such an old system, they've been regularly patching exploits for the 3DS up until May 2023.

https://en-americas-support.nintendo.com/app/answers/detail/...

I'm somewhat skeptical that Nintendo won't end up fixing this one too. The eShop is still running so users can continue to download their purchased games: https://en-americas-support.nintendo.com/app/answers/detail/...

> For the foreseeable future, it is still possible to download update data and redownload purchased software and downloadable content from Nintendo eShop.

Yeah, this community prefers that these kinds of exploits (that require physical possession of the device to recover power over it) aren't patched. I don't see anything morally wrong with it. If security comes to the cost of the user losing control over the device, it is not security, it's abusive DRM.

Reply on news.ycombinator.com