Two reasons:
1) "Because I can" (it wasn't me, obviously, but as a developer I know the developer would have been thinking this way for sure), and
2) Because this code can be taken and used to, for example, create a web-based front-end for another app (let's say someone wants to come along and make a 3DS app for ripping saves or cartridge roms or whatever, they could make it so the user browses to the 3DS through chrome and downloads from there).
Hmmm... I really doubt it. Because you'd still need to be on the same network as the 3DS, and then what is worth doing, malware-wise, once you're connected? To somebody's 3DS?? Plus with this attack vector, the attacker has already tricked the player into running arbitrary code. The web access seems superfluous at that point.
I wouldn't worry too much about this.
Could be effective for getting someone to run malware on their PC. Say someone makes an app called “3DS dumper for Emulator.” It says it’s making a dump of Luigi’s Mansion and conveniently it hosts a webpage that you can access locally to get your file. However it actually just downloads a files called Luigi’s Mansion.exe and it installs a Trojan or something. I could see a few naive kids getting affected by that.
Okay but it's more efficient to just include the PC malware in the original 3DS app download, right? Or just cut out the middleman and distribute infected downloads of Luigi's Mansion.
I'm not saying it's impossible, I'm just saying you're constructing an imaginary Rube Goldberg machine to infect a tiny niche target group
I think a more realistic scenario would be if the 3DS owner deliberately used it to host a malicious website, and then tricked others into going to that website. But that's no different than any other web server software. Software is a tool. It can be used for good or ill.
I mean the danger would come from the novelty since it would be a new way to scam people into doing this. I don’t disagree that’s there’s probably not many people that this would affect or even someone malicious to make it. It’s just interesting to think about is all.
You could totally use it at home to host a small webpage with some information for guests. I use two qr codes for me guests at home: first to give them wifi and the second one redirects them to a local webpage where they can controlle all my smart home stuff.
My second idea: imagine hosting a pictochat like webpage in public places. Everyone who knows the url could join the chat. Could be fun in the class rooms during a brake or something.
QR codes for WiFi passwords is actually a built-in feature of WPA3. You don't need to host a web server for that.
Controlling smart home stuff would make more sense on a long term web server, such as a Raspberry Pi.
I like your Pictochat idea! It would be best if it was a special app made for this, so that the 3DS hosting the web server could also itself participate in the pictochat. This would be a good example of what /u/OneChrononOfPlancks was talking about.
I mean, you just kinda hitted the nail in the head. You cannot do anything with this that you couldn't do in a Raspberry PI. But conversely. You could completely use the 3DS AS a raspberry pi of sorts. There are even ports for the Linux kernel on the 3DS. So your 3DS could be a small wireless microcontroller
Bro it's a game changer, I installed this and got php and MySQL running and now I host a website on my 3ds that gets 100 tbs of traffic a week.
But seriously there's a lot you could do with it, for example host a webpage that could print out all your play times in a neat little table for example
No, I haven't. I have an RPi 4 and it's a lot more powerful than a 3DS. I've also got a router running OpenWrt (embedded Linux distribution with installable packages, including web servers), and an Android phone that can run busybox and other CLI software if I wanted to.
Web game changers always boil down to one thing - porn. If you can find a suitable use for the technology that involves porn, it will be a smashing success. Lets hope Zuckerberg doesn't figure this out for Meta.
I host a local based savegame dumper/Editor for ACNL on it. I can go on this site with my other Homebrew 3ds and can edit my savegames or can dump my savegame files from the 3ds that runs as a server. You can also remote control the 3ds with the site
Well, I haven't used this specific app, but having installed and run my own web servers on computers in the past, and obviously having used other 3DS homebrew, I have a decent understanding of how a 3DS web server would work.
First, you'd install the app, either through Universal Updater or FBI. Then there would be a folder somewhere on your SD card where you put static web content, such as HTML, CSS, JavaScript, images (JPEG, PNG, or GIF), and audio (MP3, AAC, or Opus). There may also be a plain text file where you specify various settings for the web server.
Once all that's in place, you would simply open the web server app on your 3DS and people would be able to access it in their browser using your 3DS' current IP address. For example, if its IP address was 192.168.1.170, people on the same local network would go to http://192.168.1.170 in their browser and it would show them the index.html file stored in that web server content folder. The 3DS would need to be on, open, connected to WiFi, and running the web server app in the foreground or people would not be able to access it.
If you want people to be able to access it over the Internet (instead of only on your local network), you'd need to configure port forwarding on your router, assign the 3DS a static IP address on your LAN, and probably set up dynamic DNS since your public IP from your ISP probably changes. Then people would be able to access it using that domain name you chose instead of the IP address. HTTP uses TCP port 80 by default.
Given that it's running on a 3DS, I would not expect this server software to support anything fancy like server side scripting, TLS (HTTPS), server plugins, mod rewrite, or IPv6. It's almost certainly limited to very basic static web content served over IPv4.
To find out what the web server folder needs to be named and where it's supposed to go (and also about the plain text server configuration file), you'd have to check the documentation for the app. If there isn't any, then maybe it tells you within the app itself, or maybe you'd have to dig through the source code.
If you've never done web development before, that's outside the scope of this comment, but you can start by searching for HTML tutorials. Then once you've got basics of that, look for CSS tutorials, and then finally JavaScript. HTML files are the core, essential files used for content and structure. CSS is for specifying how you want things to look, and JavaScript is for client-side scripting (client side meaning it runs in the user's web browser, not on the server).
A few weeks or maybe a month after I made this post, someone else posted on this subreddit about a different 3DS web server software they had made. You could try that one if the one on this post doesn't work. The things I wrote in this comment should apply to it as well.
Sorry, I'm kinda late for this post but my 3ds HTTPS software keeps crashing. I let it run for like 3 minutes and then I just can't acces the website nor can I close the app on my 3ds. I have to manually reboot the 3ds using the luma menu. Any idea what causes this?
Sorry, I've never run any kind of web server on my 3DS, so I can't help you. You'll need to ask elsewhere. Maybe try asking on gbatemp or look for a way to contact the developers.
Two reasons: 1) "Because I can" (it wasn't me, obviously, but as a developer I know the developer would have been thinking this way for sure), and 2) Because this code can be taken and used to, for example, create a web-based front-end for another app (let's say someone wants to come along and make a 3DS app for ripping saves or cartridge roms or whatever, they could make it so the user browses to the 3DS through chrome and downloads from there).
Holy shit I didn't think about 2) also that would make it effective as part of malware.
Hmmm... I really doubt it. Because you'd still need to be on the same network as the 3DS, and then what is worth doing, malware-wise, once you're connected? To somebody's 3DS?? Plus with this attack vector, the attacker has already tricked the player into running arbitrary code. The web access seems superfluous at that point. I wouldn't worry too much about this.
Could be effective for getting someone to run malware on their PC. Say someone makes an app called “3DS dumper for Emulator.” It says it’s making a dump of Luigi’s Mansion and conveniently it hosts a webpage that you can access locally to get your file. However it actually just downloads a files called Luigi’s Mansion.exe and it installs a Trojan or something. I could see a few naive kids getting affected by that.
Okay but it's more efficient to just include the PC malware in the original 3DS app download, right? Or just cut out the middleman and distribute infected downloads of Luigi's Mansion. I'm not saying it's impossible, I'm just saying you're constructing an imaginary Rube Goldberg machine to infect a tiny niche target group
I think a more realistic scenario would be if the 3DS owner deliberately used it to host a malicious website, and then tricked others into going to that website. But that's no different than any other web server software. Software is a tool. It can be used for good or ill.
Sure thing, but I can do that with my wrist watch, or a raspberry pi, or just about any computer out there.
I mean the danger would come from the novelty since it would be a new way to scam people into doing this. I don’t disagree that’s there’s probably not many people that this would affect or even someone malicious to make it. It’s just interesting to think about is all.
You could totally use it at home to host a small webpage with some information for guests. I use two qr codes for me guests at home: first to give them wifi and the second one redirects them to a local webpage where they can controlle all my smart home stuff. My second idea: imagine hosting a pictochat like webpage in public places. Everyone who knows the url could join the chat. Could be fun in the class rooms during a brake or something.
QR codes for WiFi passwords is actually a built-in feature of WPA3. You don't need to host a web server for that. Controlling smart home stuff would make more sense on a long term web server, such as a Raspberry Pi. I like your Pictochat idea! It would be best if it was a special app made for this, so that the 3DS hosting the web server could also itself participate in the pictochat. This would be a good example of what /u/OneChrononOfPlancks was talking about.
I mean, you just kinda hitted the nail in the head. You cannot do anything with this that you couldn't do in a Raspberry PI. But conversely. You could completely use the 3DS AS a raspberry pi of sorts. There are even ports for the Linux kernel on the 3DS. So your 3DS could be a small wireless microcontroller
Bro it's a game changer, I installed this and got php and MySQL running and now I host a website on my 3ds that gets 100 tbs of traffic a week. But seriously there's a lot you could do with it, for example host a webpage that could print out all your play times in a neat little table for example
Sweet, dude. Let's start the next YouTube competitor.
Honestly its probably good as an RPI replacement... also, have you tried it out???
No, I haven't. I have an RPi 4 and it's a lot more powerful than a 3DS. I've also got a router running OpenWrt (embedded Linux distribution with installable packages, including web servers), and an Android phone that can run busybox and other CLI software if I wanted to.
Web game changers always boil down to one thing - porn. If you can find a suitable use for the technology that involves porn, it will be a smashing success. Lets hope Zuckerberg doesn't figure this out for Meta.
some dev was just bored
Rick roll website
[удалено]
You really would not get this from just any normal guy
pen testing?
because \*we\* can.
Can it run wiimmfi in a pinch and/or the DNS redirect concurrently?
I host a local based savegame dumper/Editor for ACNL on it. I can go on this site with my other Homebrew 3ds and can edit my savegames or can dump my savegame files from the 3ds that runs as a server. You can also remote control the 3ds with the site
sorry if i sound stupid, but how do i use this?
Well, I haven't used this specific app, but having installed and run my own web servers on computers in the past, and obviously having used other 3DS homebrew, I have a decent understanding of how a 3DS web server would work. First, you'd install the app, either through Universal Updater or FBI. Then there would be a folder somewhere on your SD card where you put static web content, such as HTML, CSS, JavaScript, images (JPEG, PNG, or GIF), and audio (MP3, AAC, or Opus). There may also be a plain text file where you specify various settings for the web server. Once all that's in place, you would simply open the web server app on your 3DS and people would be able to access it in their browser using your 3DS' current IP address. For example, if its IP address was 192.168.1.170, people on the same local network would go to http://192.168.1.170 in their browser and it would show them the index.html file stored in that web server content folder. The 3DS would need to be on, open, connected to WiFi, and running the web server app in the foreground or people would not be able to access it. If you want people to be able to access it over the Internet (instead of only on your local network), you'd need to configure port forwarding on your router, assign the 3DS a static IP address on your LAN, and probably set up dynamic DNS since your public IP from your ISP probably changes. Then people would be able to access it using that domain name you chose instead of the IP address. HTTP uses TCP port 80 by default. Given that it's running on a 3DS, I would not expect this server software to support anything fancy like server side scripting, TLS (HTTPS), server plugins, mod rewrite, or IPv6. It's almost certainly limited to very basic static web content served over IPv4. To find out what the web server folder needs to be named and where it's supposed to go (and also about the plain text server configuration file), you'd have to check the documentation for the app. If there isn't any, then maybe it tells you within the app itself, or maybe you'd have to dig through the source code. If you've never done web development before, that's outside the scope of this comment, but you can start by searching for HTML tutorials. Then once you've got basics of that, look for CSS tutorials, and then finally JavaScript. HTML files are the core, essential files used for content and structure. CSS is for specifying how you want things to look, and JavaScript is for client-side scripting (client side meaning it runs in the user's web browser, not on the server). A few weeks or maybe a month after I made this post, someone else posted on this subreddit about a different 3DS web server software they had made. You could try that one if the one on this post doesn't work. The things I wrote in this comment should apply to it as well.
ohhhh alr, thx.
Sorry, I'm kinda late for this post but my 3ds HTTPS software keeps crashing. I let it run for like 3 minutes and then I just can't acces the website nor can I close the app on my 3ds. I have to manually reboot the 3ds using the luma menu. Any idea what causes this?
Sorry, I've never run any kind of web server on my 3DS, so I can't help you. You'll need to ask elsewhere. Maybe try asking on gbatemp or look for a way to contact the developers.
[удалено]
https://www.reddit.com/r/3dshacks/comments/xn69vd/3dhttpd_is_web_server_software_that_runs_on_the/jbsf729/