In December last year, Nintendo released a remaster update for its out-of-date 3DS messaging app Swapnote.
It had a lot of fans wondering what was really going on at the time, as it didn't seem like much of a remaster at all. The Nintendo patch notes provided with this software update stated it "fixed some problems" but as usual, didn't elaborate.
It turns out the story goes a little deeper, with dataminer 'OatmealDome' relaying how the note sharing service actually had a vulnerability in the message parser which was able to be exploited over StreetPass - in turn allowing an "attacker" to run any code they wanted.
The individual behind this discovery 'mrnbayoh' received $1,682 USD from Nintendo (via HackerOne) as a reward. So, there you go - this "likely" explains why Nintendo rolled out an update years after it disabled the app's primary feature.
In case you don't remember, this free service was effectively discontinued back in 2013 when Nintendo found out users were exchanging offensive material. It then disabled the online functionality, limiting it to local wireless.
[source hackerone.com, via twitter.com]
Comments 27
So now when a piece of software gets a patch its called a remaster? This is weird
I didn’t even know Swapnote got a remaster?
@Handy_Man It didn’t. Nintendo just rereleased it and Nintendo Life insists on calling it a remaster. Likely to get people to click on the article.
Edit: Turns out Nintendo officially called it a remaster. My bad.
@bobzbulder Nintendo refers to it as "Swapnote Remastered" in the official patch notes.
https://en-americas-support.nintendo.com/app/answers/detail/a_id/54060/~/how-to-update-swapnote#v12
I actually noticed the pending update the other day. I guess I should do it. It did make me reopen the app and look at all the notes. My brother and I used it a lot before I had a cellphone, and my friends and I sent each other silly nites. Was cute to see it again, I hadn't realized those had survived all the 3ds I had replaced
Really wish Nintendo would put swapnote on Switch, I loved this app, so much fun sending friends silly mail and it was neat being able to see how my friends draw there silly notes too.
I'm a little confused why Nintendo called this a "remaster", though this does explain why Nintendo patched a game they already effectively killed years ago.
Reading this just made me sad again that Nintendo killed Swapnote off for no good reason.
@Liam_Doolan Oh my bad.
Oh, that's wild. Impressive on Nintendo's part, keeping up on security.
@TsukiDeity So you are one of those "users were exchanging naughty material"
@TsukiDeity I hear you, right now my only means sending dong pictures to my friends is inviting them to my island in Animal Crossing and escorting them to my "Ask me about my ****" stall with corresponding painting next to it.
Under $2,000? That's insulting. Nintendo hates everyone, even those actively trying to help them.
@PosterBoy Nothing wrong with being a little naughty with good friends haha
@TheBigK That's actually pretty hilarious. Good work!
From the sounds of these comments, I'm thinking most folks don't realize Swapdoodle on 3DS exists.
All you guys in here sad about losing Swapnote... Awhile back Nintendo re-released it as Swapdoodle, which is the exact same app, but with the ability to send attachments removed. It's not only still available to download, but still has its internet functionality intact (last I checked).
You still can send messages to each other, just like before. You just can't attach photos or screenshots. I'm also hoping they eventually bring it to Switch, but for now if you have a 3DS, you can still send doodles and messages to your friends over WiFi.
@PeterAndCompany Honestly, I never knew about Swapdoodle until today. I was looking up Swapnote as this article is the first time I heard anything about it in years, and downloaded Swapdoodle when I found out about it.
@PeterAndCompany was nowhere close to as good & filled with microtransactions. Man i miss swap note. That was probably the best nintendo app, with the screenshot posting in 3D being the 2nd. I miss that Nintendo. RIP Iwata.
@TsukiDeity Same. A Switch version would be perfect. I remember sending all my friends drawings. Sometimes we'd make a reply game from it.
@BadWaluigi2
???
$1600 for info on an exploit that's not needed (half a dozen exploits already exist), that nobody would have likely discovered, on a legacy platform discontinued... is more than generous.
Clearly it was enough to incentivise this person to go digging. So... if they're not complaining, I'm not quite sure why you are.
Is this a bit like Sick Note?
@JaxonH You get even less for bootlicking lol
@Interneto
Not sure what that's supposed to mean.
I suppose expecting intelligent critical thinking from members on this site is expecting too much.
Who needs swap notes when you got 5 art academy games. Save the animation creating for the Mac or PC.
@JaxonH "they incentivised him to do it"
That makes no sense. He found it first, then brought it to their attention, then got paid. Not the other away around.
And your argument contradicts itself. If it wasn't a consequential exploit, why would Nintendo put a bounty on it?
No matter which way you slice it, you're incorrect.
@BadWaluigi2
Why are you responding to old posts? Just looking for an argument?
It makes perfect sense. He found it and brought it to their attention knowing that they have a program where they pay if you find things and bring it to their attention.
And Nintendo didn’t put a bounty on it. They simply pay for anything submitted that’s legitimate. Exploit can be legitimate but that doesn’t mean it’s a high probability threat. If they don’t pay then they ruin their reputation for offering to pay for exploits. And it prevents the one in 1 million chance it actually gets discovered and used, even though everybody’s moved on from the 3DS anyways nobody cares because the systems already hack to hell anyway
@JaxonH I was simply criticizing your usage of the term "incentive" as he was unaware of the $1600 figure before doing his thing. "Incentive" would only make sense if Nintendo pre-authorized some public reward/bounty.
I only visit this page like once a month lol. Not going to not respond to something merely because it's"old" which is subjective here on the internet
Tap here to load 27 comments
Leave A Comment
Hold on there, you need to login to post a comment...