Posted in: Games, Video Games | Tagged: Jailbreaks, nintendo, nintendo switch

The Old Browser Exploit Still Works On The Switch

Some people are just never satisfied with things, and the Nintendo Switch is no different. A simple old browser exploit originally used to jailbreak Apple iOS 9.3 devices was re-purposed to peel back layers of the Switch's security.

Like most Wi-Fi capable Nintendo devices, the Switch shouldn't have a functioning browser at all, but it does require some kind of HTTP access in order to get access to WiFi networks that require registration – like a hotel where you've got to go to a registration Splash-page to log in, or Starbucks for that matter.

The rudimentary browser on the Switch is based on Webkit technology but Nintendo has used an older, easily exploitable codebase, essentially stripping the Switch of it's first layer of security against hackers.

That said, the extent of this particular exploit is rather limited. It gives access to unofficial code but without tools to generate it. But this exploit can give access to the Switch OS, which can lead to information about what vulnerabilities lie within the system.

It's worth noting that Nintendo had the time to prevent this exploit from being used. The particular browser hack used is designated CVE-2016-4657 and was fashioned into an Apple-specific jailbreak in December 2016. This is not the first time Nintendo's browser security has been easily compromised either, similar jailbreaks were used on the 3DS.

So really, it just seems negligent at this point. Cyber-security is important, especially now that purchases are tied to user accounts. This may be Nintendo's first foray into that world, but they could have easily taken a page out of Microsoft or Sony's books.

Eurogamer has more details on the exploit here.

Enjoyed this? Please share on social media!

Stay up-to-date and support the site by following Bleeding Cool on Google News today!