Difference between revisions of "11.8.0-41"

From 3dbrew
Jump to navigation Jump to search
m
(Split into OS changelog and CDN changelog)
Line 30: Line 30:
 
If ExportTicketWrapped succeeded, then the new http headers are passed: "X-Authentication-Key" set to base64(wrapped_aes_key) and "X-Authentication-Data" set to base64(crypted_ticket).
 
If ExportTicketWrapped succeeded, then the new http headers are passed: "X-Authentication-Key" set to base64(wrapped_aes_key) and "X-Authentication-Data" set to base64(crypted_ticket).
  
This (when activated server-side - gradually since 2018-8-9, it appears) would prevent downloading contents entirely (including [[TMD]]s) without a valid ticket.
+
==Server-side changes==
 +
When 11.8.0-41 launched, the X-Authentication headers were not required; however, if they were indeed "voluntarily" sent, unsigned tickets would still have resulted in the download being blocked.
 +
 
 +
On 2018-8-9, at approximately the later half of 13h GMT, ticket-less downloads (of [[NCCH|contents]] as well as [[TMD]]s) started being blocked for a small number of titles, mainly 1st and 2nd party (but not their entirety: [https://gbatemp.net/threads/z.514370/page-12#post-8210076 list as of 2018-8-11])
 +
 
 +
The selection of affected titles appears to be manually maintained, and it is speculated (but not readily provable) that contractual limitations may influence Nintendo's ability to implement this change without consent of the original developers, hence the still very limited number of affected titles.
 +
 
  
 
==See Also==
 
==See Also==

Revision as of 12:24, 11 August 2018

The Old3DS+New3DS 11.8.0-41 system update was released on July 30, 2018. This Old3DS+New3DS update was released for the following regions: USA, EUR, JPN, CHN, KOR, and TWN.

Security flaws fixed: <fill this in manually later, see the updatedetails page from the ninupdates-report page(s) once available for now>.

Change-log

Official USA change-log:

  • Further improvements to overall system stability and other minor adjustments have been made to enhance the user experience

System Titles

<fill this in (manually) later>

Process9

Actual code changed in Process9.

pxi:am9 command 0x6d0184 was added, see AMPXI:ExportTicketWrapped

The anti-downgrade list was updated (versions bumped and new titles were added, such as TWL_FIRM).

AM

New am:net command 0x8290184 was added, see AMNet:ExportTicketWrapped. This is used by nim.

Friends

fpdver version string bumped to 0xC

nim

Added 2 new strings in the codebin: "X-Authentication-Key" and "X-Authentication-Data".

Now uses AMNet:ExportTicketWrapped during code related to downloading contents(?) (function at 0x143B9C; its caller at 0x123ABC uses amnet:Begin/ResumeImportContent)

If ExportTicketWrapped succeeded, then the new http headers are passed: "X-Authentication-Key" set to base64(wrapped_aes_key) and "X-Authentication-Data" set to base64(crypted_ticket).

Server-side changes

When 11.8.0-41 launched, the X-Authentication headers were not required; however, if they were indeed "voluntarily" sent, unsigned tickets would still have resulted in the download being blocked.

On 2018-8-9, at approximately the later half of 13h GMT, ticket-less downloads (of contents as well as TMDs) started being blocked for a small number of titles, mainly 1st and 2nd party (but not their entirety: list as of 2018-8-11)

The selection of affected titles appears to be manually maintained, and it is speculated (but not readily provable) that contractual limitations may influence Nintendo's ability to implement this change without consent of the original developers, hence the still very limited number of affected titles.


See Also

System update report(s):