Line 82:
Line 82:
! Fixed in version
! Fixed in version
! Last version this flaw was checked for
! Last version this flaw was checked for
+
! Timeframe info related to this was added to wiki
! Timeframe this was discovered
! Timeframe this was discovered
! Discovered by
! Discovered by
Line 95:
Line 96:
| None
| None
| [[10.3.0-28|10.3.0-X]]
| [[10.3.0-28|10.3.0-X]]
+
|
| May 14, 2015
| May 14, 2015
| [[User:Yellows8|Yellows8]]
| [[User:Yellows8|Yellows8]]
Line 110:
Line 112:
| [[10.2.0-28|10.2.0-X]]
| [[10.2.0-28|10.2.0-X]]
| [[10.2.0-28|10.2.0-X]]
| [[10.2.0-28|10.2.0-X]]
+
|
| December 22, 2014
| December 22, 2014
| [[User:Yellows8|Yellows8]], [[User:Myria|Myria]] independently (~spring 2015)
| [[User:Yellows8|Yellows8]], [[User:Myria|Myria]] independently (~spring 2015)
Line 117:
Line 120:
| [[10.6.0-31|10.6.0-X]]
| [[10.6.0-31|10.6.0-X]]
| [[10.6.0-31|10.6.0-X]]
| [[10.6.0-31|10.6.0-X]]
+
|
| January 3, 2015
| January 3, 2015
| [[User:Yellows8|Yellows8]]
| [[User:Yellows8|Yellows8]]
Line 126:
Line 130:
| 2013?
| 2013?
| A lot of people.
| A lot of people.
+
|-
+
| [[Internet_Browser|Browser-version-check]] bypass
+
| When the browser-version-check code runs where the savedata for it was never initialized(such as when the user used the "Initialize savedata" option), it will use base_timestamp=0 instead of the timestamp loaded from savedata. This is then used with "if(cur_timestamp - base_timestamp >= <24h timestamp>){Run browser-version-check HTTPS request code}".
+
Hence, if the savedata was just initialized, and if the system datetime is set to before January 2, 2000, the browser-version-check will be skipped. This includes January 1, 2000, 00:00, because that's the epoch(timestamp value 0x0) used with this timestamp.
+
+
See [http://yls8.mtheall.com/3dsbrowserhax.php here] for bypass usage instructions.
+
| None
+
| [[10.6.0-31|10.6.0-X]]
+
| February 25, 2016
+
| November 2, 2015 (Exactly one week after the browser version pages were initially updated server-side)
+
| [[User:Yellows8|Yellows8]]
|}
|}