Changes

Jump to navigation Jump to search
1,120 bytes added ,  02:02, 1 September 2010
Added payload cleartext format, cipher and key is still unknown.
Line 15: Line 15:  
The client is basically a NetFront browser rigged to only work with certain APs, and with the capability of booting RSA-1024 signed NDS software downloaded with https. DS Station seems to only support Nintendo's custom [http://code.google.com/p/wmb-asm/wiki/NTFA NTFA] file format for graphics. Nintendo Spot supports other formats, one of the formats is GIF. Nintendo Zone supports NTFA, GIF, and PNG.
 
The client is basically a NetFront browser rigged to only work with certain APs, and with the capability of booting RSA-1024 signed NDS software downloaded with https. DS Station seems to only support Nintendo's custom [http://code.google.com/p/wmb-asm/wiki/NTFA NTFA] file format for graphics. Nintendo Spot supports other formats, one of the formats is GIF. Nintendo Zone supports NTFA, GIF, and PNG.
 
The DSi NZone with the memo menu, can take pictures with the DSi cameras and save to the camera album. You can also draw stuff then save to camera album, and take screenshots of either screen at anytime(except when loading pages, sometimes memo menu is disabled by third-party sites) and save to NZone savedata. Screenshots can be viewed later via the memo menu, regardless if NZone beacons are in range or not. The NZone WFC usage notes state: "Photos, drawings or any other kind of images that you post via the Nintendo Zone can be viewed and downloaded by other users, and may be made public via Nintendo Zone or the internet. These photos, drawings or other kinds of image may then be copied, edited and/or posted by others." The rest is just "your images may be seen by a large number of people, don't post offensive material or copyrighted etc."
 
The DSi NZone with the memo menu, can take pictures with the DSi cameras and save to the camera album. You can also draw stuff then save to camera album, and take screenshots of either screen at anytime(except when loading pages, sometimes memo menu is disabled by third-party sites) and save to NZone savedata. Screenshots can be viewed later via the memo menu, regardless if NZone beacons are in range or not. The NZone WFC usage notes state: "Photos, drawings or any other kind of images that you post via the Nintendo Zone can be viewed and downloaded by other users, and may be made public via Nintendo Zone or the internet. These photos, drawings or other kinds of image may then be copied, edited and/or posted by others." The rest is just "your images may be seen by a large number of people, don't post offensive material or copyrighted etc."
 +
 +
=== Beacon payload format ===
 +
 +
The NZone beacon payload is encrypted, the cipher and key is unknown. This table is the format of the cleartext data, this was dumped by hooking the Arm9 IPX function. The crypto is done Arm7-side.
 +
TWL SDK probably scans for beacons, checks if beacon_type is 0 or 1, and checks if the payload length is 0x70. If those succeed, it then decrypts the whole payload and verifies the checksum. When the checksum is valid, NZone is detected.
 +
 +
{| class="wikitable" border="1"
 +
|-
 +
!  OFFSET
 +
!  SIZE
 +
!  DESCRIPTION
 +
|-
 +
|  0x00
 +
|  32
 +
|  AP SSID.
 +
|-
 +
| 0x20
 +
| 10
 +
| Authentication parameter, required for connecting to the server. Server uses this to determine which third-party content to link to on the index page.
 +
|-
 +
| 0x2a
 +
| 2
 +
| This u16 was always one in all dumps, unknown what this is.
 +
|-
 +
| 0x2c
 +
| 24
 +
| Some retailer ID string includes the country, unknown what this is. "McDonalds Japan"
 +
|-
 +
| 0x44
 +
| 32
 +
| WEP key, if any.
 +
|-
 +
| 0x64
 +
| 4
 +
| Unknown, region related maybe?
 +
|-
 +
| 0x68
 +
| 4
 +
| Padding?
 +
|-
 +
| 0x6c
 +
| 2
 +
| Unknown, was always 0x428 in all dumps.
 +
|-
 +
| 0x6e
 +
| 2
 +
| CRC16 over whole payload.
 +
|}
    
== Versions ==
 
== Versions ==

Navigation menu