3dbrew - User contributions [en]

Talk:Nintendo Video

2011-07-28T04:06:44Z

Popoffka: discussion of ESJ_CNF

I've got an email from one of the persons who also tried spoofing Video servers and he made some interesting points:

* last number in the path sometimes differs, for example, his 3DS requests /1/COUNTRYCODE/10 instead of /1/COUTRYCODE/1, no matter which country I set in my console's settings
** this person's 3DS has Russian set as the default language, so the last number might indicate console's language
* each coutnry's videos seem to be encrypted with a special country-specific key, because same videos (i.e. the ones that look the same when are played in Video app) downloaded from different regions have different files
* even though the videos seem to be encrypted with a country-specific key, you can put videos from any region in any other region folder (i.e., you can download /1/77/1/ESP_MD1 from the real server and put it in /1/110/1/ on your spoofed server, and the 3DS will still play)
** perhaps all the videos are encrypted with the same key, but the encrypted files look different because of some value in the video's data that changes between countries... --[[User:Luigi2us|Luigi2us]] 13:28, 22 July 2011 (CEST)
*** maybe the key is based on a timestamp --[[User:Duke srg|Duke srg]] 14:19, 22 July 2011 (CEST)
**** IMO given the above info where NVideo still plays the video from other regions,(and also since videos' ciphertext in the same country don't match at all) it's likely an AES-CTR fixed key with metadata including at least release date timestamp for CTR. --[[User:Yellows8|Yellows8]] 05:53, 23 July 2011 (CEST)
*****BTW, video can be played from other countries within the region, but not from the other region. I.e. USA video can't be played on EUR console and vice versa. --[[User:Duke srg|Duke srg]] 06:05, 23 July 2011 (CEST)
* files contain information about where they're located on the screen, i.e. if you rename ESP_MD2 to ESP_MD1, it will still be shown in the top-right corner after it's downloaded

--[[User:Popoffka|Popoffka]] 06:44, 20 July 2011 (CEST)

I've just tested setting a different languges, the last number in the path os definitely a language code:
* 1 - English
* 2 - Francias
* 3 - Deutsch
* 4 - Italiano
* 5 - Espanol
* 8 - Netherlands
* 9 - Portugues
* 10 - Russian

Got some videos. Unknown 4 (3?) bytes in the header seems to be an unique id of video, at leas it increments with video release time.
UK server returns the same video for all alnguages, German servers videos for languages 2-10 ar ethe same and seems to have the same content with language-1 video but cyphered with another key? French servers acts like German, except that slot-2 video for at least language-10 (Russian) have another size than language-1 video, but seems to have the same content.

--[[User:Duke srg|Duke srg]] 09:29, 21 July 2011 (CEST)
For US regons files named ESE_MD*. Files can be renamed to ESP*, but download is aborted by 3DS on non-native region console
--[[User:Duke srg|Duke srg]] 09:28, 22 July 2011 (CEST)

Videos that a expired are downloaded from the spoofed server but not shown, regardless on the date set on the console. Console should check video availability or real date online for that. But not all videos expiring with the date mentioned in description, it seems that there is a property in file that defines whether that video should not be shown after expire date.
--[[User:Duke srg|Duke srg]] 04:23, 23 July 2011 (CEST)

Checked all european servers. Here is the list of all countries available in curent version of Nintendo Video player with server status

{| class="wikitable"
|-
! Country
! Status
|-
| Australia
| online
|-
| Austria
| offline
|-
| Belgium
| online
|-
| Czech Republic
| online, but no video
|-
| Finland
| offline
|-
| France
| online
|-
| Germany
| online
|-
| Greece
| offline
|-
| Denmark
| online
|-
| Ireland
| offline
|-
| Italy
| online
|-
| Luxembourg
| offline
|-
| Netherlands
| online
|-
| New Zealand
| online, but no video
|-
| Norway
| online
|-
| Poland
| online
|-
| Portugal
| offline
|-
| Russia
| offline
|-
| Sweden
| online
|-
| Switzerland
| offline
|-
| South Africa
| offline
|-
| Spain
| online
|-
| Turkey
| online, but no video
|-
| United Kingdom
| online
|}

All other countries are not available in current version of the Nintendo Video client.
Offline and no video servers should be checked from the native region to make certain. Russia is offline for sure, but as for Portugal, it should work because this service was earlier announced to start.
--[[User:Duke srg|Duke srg]] 09:56, 25 July 2011 (CEST)

As for other regions, video is available in Japan, USA, Canada and Mexico
--[[User:Duke srg|Duke srg]] 11:28, 25 July 2011 (CEST)

It seems that japan clients is a bit smarter. It requests ESJ_CNF file, which is the small 1074 bytes 'boss' type file with a timestamp of "Thu, 1 Jan 1970 04:07:54 UTC". Without that file videos just starting to download and terminates immidiately
--[[User:Duke srg|Duke srg]] 08:09, 27 July 2011 (CEST)

* Can somebody with a Japanese 3DS confirm this? Also, can somebody check if the ESP_CNF (or ESE_CNF) file exists on other region's servers? I can't do that myself because I'm in Thailand ATM and I have very limited internet access. --[[User:Popoffka|Popoffka]] 08:06, 28 July 2011 (CEST)

Talk:Nintendo Video

2011-07-20T02:44:47Z

Popoffka: added some info got by a Russian guy who mailed me

Nintendo Video

2011-07-19T03:39:48Z

Popoffka: some new info about regions

'''''Attention:''' What's described here was found out by reverse-engineering Nintendo Video on a European 3DS and might not apply to Japanese Nintendo Video service.''

'''Nintendo Video''' is a service allowing owners of Japanese and European 3DSes to download and watch various videos offered by Nintendo. Nintendo Video uses SpotPass to download videos even when the Nintendo Video app itself is not running.

== Internet connection ==

To identify your 3DS's region and country, different URLs are requested by 3DS's from different countries. A URL contains a subdomain that's specific for your region (EU/USA/JP) and a country code that's specific to your country. Here's a table containing country codes and subdomains known so far:

{| class="wikitable"
|-
! Country
! Country code
! Region subdomain
|-
| United Kingdom
| 110
| pubeu-p
|-
| Germany
| 78
| pubeu-p
|-
| USA
| Unknown
| pubus-p
|-
| Japan
| Unknown
| pubjp-p
|}

In all requests below, ''COUNTRYCODE'' should be replaced with your country's code and ''COUNTRYSUBDOMAIN'' should be replaced with your region's subdomain.

Surprisingly, Nintendo Video uses plain unencrypted HTTP connection to transfer videos. When "Connectivity check" button is pressed, Nintendo Video sends a following HTTP request to ''COUNTRYSUBDOMAIN''.est.c.app.nintendowifi.net:

<tt>GET /1/''COUNTRYCODE''/1/CHECK HTTP/1.1

Host: ''COUNTRYSUBDOMAIN''.est.c.app.nintendowifi.net</tt>

As you can see, no console-specific data is being sent. The server respons with either a 403 or 404 error code, where 403 means that user's region (determined by IP, I guess) doesn't match the region specified by ''COUNTRYCODE'' and 'COUNTRYSUBDOMAIN' and 404 means that everything's OK.

If everything is OK with the region check, the 3DS proceeds to download videos. It seems that support for only four videos is hardcoded into Nintendo Video app, because it makes following requests (to the same server as the CHECK query):

<tt>GET /1/''COUNTRYCODE''/1/ESP_MD1 HTTP/1.1

Host: ''COUNTRYSUBDOMAIN''.est.c.app.nintendowifi.net</tt>

<tt>GET /1/''COUNTRYCODE''/1/ESP_MD2 HTTP/1.1

Host: ''COUNTRYSUBDOMAIN''.est.c.app.nintendowifi.net</tt>

<tt>GET /1/''COUNTRYCODE''/1/ESP_MD3 HTTP/1.1

Host: ''COUNTRYSUBDOMAIN''.est.c.app.nintendowifi.net</tt>

<tt>GET /1/''COUNTRYCODE''/1/ESP_MD4 HTTP/1.1

Host: ''COUNTRYSUBDOMAIN''.est.c.app.nintendowifi.net</tt>

ESP_MD''i'' seems to return 403 if user's region doesn't match, 404 if ''i''th video doesn't exist and the video itself otherwise. As of 18th of July 2011, only 1st and 2nd videos are available from UK IP addresses.

These videos can easily be downloaded from any computer with IP address that matches country specified by ''COUNTRYCODE'' and ''COUNTRYSUBDOMAIN'' using wget without any special settings.

== SD storage ==

After downloading videos, Nintendo Video stores them on the SD card. However, it's not yet known how the data is stored and it's possible that it's encrypted with a console-specific key.

== File format ==

File format used for storing videos is not yet known either. Both videos that were available at 18th of July 2011 contained string "boss" in the first four bytes, which leads me to believe this is a [http://en.wikipedia.org/wiki/Magic_number_(programming)#Magic_numbers_in_files "magic number"] used to identify this type of file.

{| class="wikitable"
|-
! Offset
! Length
!
|-
| 0x0
| 0x4
| "boss"
|-
| 0x4
| 0x4
| Always 00 01 00 01
|-
| 0x8
| 0x4
| Unknown
|-
| 0xC
| 0x7
| Always 00 00 00 00 4E 1D 61
|-
| 0x13
| 0x1
| Unknown
|-
| 0x14
| 0x8
| Always 00 01 00 00 00 02 00 02
|}

== Server spoofing ==

In case you want to try messing with Nintendo Video, here's a description of what I did:

# Set up a DNS server using bind9, which returned my IP as the IP for pubeu-p.est.c.app.nintendowifi.net [http://pastie.org/2230422 (bind config)].
## Don't forget to replace MY_IP in config with your IP address, but '''don't''' replace the IP of conntest.nintendowifi.net service
# Set up an HTTP server using nginx and put ESP_MD1, ESP_MD2 (which I have downloaded from Nintendo's servers earlier, see above) in my /var/www/1/110/1/ folder.
# Configured my 3DS to use my DNS server as both primary and secondary DNS server.
# ???
# PROFIT!

== External links ==
* [http://www.youtube.com/watch?v=Tl8QYofL1tg A video showing Nintendo Video server being spoofed]

Nintendo Software

2011-07-18T03:52:40Z

Popoffka: added nintendo video

*[[Home Menu]]
*[[3D Video]]
*[[Activity Log]]
*[[AR Games]]
*[[Download Play]]
*[[eShop]]
*[[Face Raiders]]
*[[Friend List]]
*[[Game Notes]]
*[[Health & Safety Information]]
*[[Internet Browser]]
*[[Mii Maker]]
*[[Nintendo 3DS Camera]]
*[[Nintendo 3DS Sound]]
*[[Nintendo Zone]]
*[[Notifications]]
*[[SpotPass]]
*[[StreetPass]]
*[[StreetPass Mii Plaza]]
*[[System Settings]]
*[[System Transfer]]
*[[Nintendo Video]]

Nintendo Video

2011-07-18T03:45:28Z

Popoffka: Created page with some info I found out

'''''Attention:''' What's described here was found out by reverse-engineering Nintendo Video on a European 3DS and might not apply to Japanese Nintendo Video service.''

'''Nintendo Video''' is a service allowing owners of Japanese and European 3DSes to download and watch various videos offered by Nintendo. Nintendo Video uses SpotPass to download videos even when the Nintendo Video app itself is not running.

== Internet connection ==

Surprisingly, Nintendo Video uses plain unencrypted HTTP connection to transfer videos. When "Connectivity check" button is pressed, Nintendo Video sends a following HTTP request to pubeu-p.est.c.app.nintendowifi.net:

<tt>GET /1/110/1/CHECK HTTP/1.1

Host: pubeu-p.est.c.app.nintendowifi.net</tt>

As you can see, no console-specific data is being sent. The server respons with either a 403 or 404 error code, where 403 means that user's region is not allowed to use Nintendo Video (the region is mot likely determined by IP address) and 404 means that everything's OK.

If everything is OK with the region check, the 3DS proceeds to download videos. It seems that support for only four videos is hardcoded into Nintendo Video app, because it makes following requests (to the same server as the CHECK query):

<tt>GET /1/110/1/ESP_MD1 HTTP/1.1

Host: pubeu-p.est.c.app.nintendowifi.net</tt>

<tt>GET /1/110/1/ESP_MD2 HTTP/1.1

Host: pubeu-p.est.c.app.nintendowifi.net</tt>

<tt>GET /1/110/1/ESP_MD3 HTTP/1.1

Host: pubeu-p.est.c.app.nintendowifi.net</tt>

<tt>GET /1/110/1/ESP_MD4 HTTP/1.1

Host: pubeu-p.est.c.app.nintendowifi.net</tt>

ESP_MD''i'' seems to return 403 if user's region is not allowed, 404 if ''i''th video doesn't exist and the video itself otherwise. As of 18th of July 2011, only 1st and 2nd videos are available from UK IP addresses.

These videos can easily be downloaded from any computer with UK IP address (DE & NL should probably work too, but I didn't check that) using wget without any special settings.

== SD storage ==

After downloading videos, Nintendo Video stores them on the SD card. However, it's not yet known how the data is stored and it's possible that it's encrypted with a console-specific key.

== File format ==

File format used for storing videos is not yet known either. Both videos that were available at 18th of July 2011 contained string "boss" in the first four bytes, which leads me to believe this is a [http://en.wikipedia.org/wiki/Magic_number_(programming)#Magic_numbers_in_files "magic number"] used to identify this type of file.

== Server spoofing ==

In case you want to try messing with Nintendo Video, here's a description of what I did:

# Set up a DNS server using bind9, which returned my IP as the IP for pubeu-p.est.c.app.nintendowifi.net [http://pastie.org/2230422 (bind config)].
## Don't forget to replace MY_IP in config with your IP address, but '''don't''' replace the IP of conntest.nintendowifi.net service
# Set up an HTTP server using nginx and put ESP_MD1, ESP_MD2 (which I have downloaded from Nintendo's servers earlier, see above) in my /var/www/1/110/1/ folder.
# Configured my 3DS to use my DNS server as both primary and secondary DNS server.
# ???
# PROFIT!

== External links ==
* [http://www.youtube.com/watch?v=Tl8QYofL1tg A video showing Nintendo Video server being spoofed]

Talk:CXI

2011-06-01T05:15:06Z

Popoffka: question

How 3DS system judge encryption type? [[User_talk:Matyapiro|Matyapiro]]

Sorry the question is not understood. What do you mean? [[User:Neimod|Neimod]]

I think that he means "How does the 3DS decide what encryption method must be used" --[[User:Quincy|Quincy]] 23:47, 29 May 2011 (CEST)

That question does not make sense. There are no decisions. It is always AES CTR. [[User:Neimod|Neimod]]

Sorry,how does the 3DS decide what key to use for encryption?
[[User_talk:Matyapiro|Matyapiro]]
:If you figure that out, let us know, thanks. [[User:Neimod|Neimod]] 02:45, 1 June 2011 (CEST)

How did you get this data? Did you find some way to dump 3DS cartridges? --[[User:Popoffka|Popoffka]] 09:15, 1 June 2011 (CEST)