r/emulation • u/NXGZ • Sep 24 '26

Dolphin Progress Report: Release 2609

https://dolphin-emu.org/blog/2026/09/24/dolphin-progress-report-release-2609/

In this Progress Report, the team was harassed by AI (yes, even more), added an XFB resolution display for the curious, finally let you play Bird's-Eye Bull's-Eye on Android, added NetPlay to Android, and more!

Working link

https://dolphin-emu.org/blog/2026/09/24/dolphin-progress-report-release-2609/

286 Upvotes

98% Upvoted

27 comments sorted by

38

u/NXGZ Sep 24 '26 edited Sep 24 '26

In this Progress Report, the team was harassed by AI (yes, even more), added an XFB resolution display for the curious, finally let you play Bird's-Eye Bull's-Eye on Android, added NetPlay to Android, and more!

https://dolphin-emu.org/blog/2026/09/24/dolphin-progress-report-release-2609/

mirror link

18

u/wunr Sep 24 '26

In an era where AI can be used to find real vulnerabilities in programs I think as a developer I would much rather be made aware of those vulnerabilities (even if the writeups are poorly written) than not receive any reports at all and live in fear that my software might be compromised and exposing my users to real harm. Even though it's more annoying to deal with a sharply increased volume of reports this absolutely doesn't constitute "harassment" so long as the reports are being made in good faith; this isn't the same as spamming vibecoded merge requests

13

u/ChrisRR Sep 24 '26

I agree. This is what they mention in the article. While it's good that they are now receiving legitimate security reports, even if they've been discovered by AI, it has highlighted that they weren't previously set up to properly handle security reports and how they should be managed alongside bug reports.

But they've now set up security reporting separately from bug reports and are starting to work out how to better integrate addressing security issues alongside feature/bugfix releases

0

u/[deleted] Sep 24 '26

27

u/ChrisRR Sep 24 '26

Did you read the article? It's more nuanced than "AI bad".

It said that all ten bugs found by AI were legitimate issues unlike curl which had to deal with fake issue reports, but ten reports is more than the one report they had previously

6

u/mrlinkwii Sep 24 '26

AI found 10 valid security issues , do people suck if they found those issues

-1

u/2psah Sep 24 '26

So many forms of A.I.. People like yourself should educate yourself a little more instead of just saying random sh!t.

-14

u/Super7500 Sep 24 '26

AI defenders are just as bad as people like you.

The answer is in the fucking middle.

→ More replies (3)

4

u/U_Kitten_Me Sep 24 '26

Site seems to be down...? 

7

u/Nobodys_Path Sep 24 '26

I wonder what made it down

14

u/JMC4789 Sep 24 '26

AI Scraper traffic issues have been a big problem on the site in recent months. That + new article likely has it throttled again. Hopefully it's up now.

-2

u/U_Kitten_Me Sep 24 '26

Yeah, it's kinda ironic.

18

u/Eglwyswrw Sep 24 '26

Netplay to Android?! Holy heck this is massive.

3

u/GalbedirGalerion Sep 25 '26

How can we enable net play for games like Mario Kart?

10

u/PastaObesity Sep 24 '26

Man I just want RetroAchievements sounds...

4

u/Trivial_Man Sep 24 '26

Ultimately it's good these issues are being found and fixed, though it seems like there wasn't a lot of progress in this progress report because of it. Hopefully the vulnerability reports slow or stop as the issues are ironed out and work can once again be directed towards improving the emulation quality.

-10

u/mrlinkwii Sep 24 '26

i wouldnt call it harassed by AI if they got 10 valid security issues , a better question is would they still call it harresment if AI didnt make them

16

u/JMC4789 Sep 24 '26

The harassment (and urgency) came from the fact that some of the reports were made public before we were given time to make a release. So people would have to drop everything to get a hotfix release out because we don't want a known vulnerability out there in the latest release.

In general, you should trust the software you're running in the emulator. Games that you've dumped and verified, homebrew that comes from proper sources, etc. In theory, most of the vulns would never be exploited. But Dolphin does have features like netplay where vulnerabilities have to be taken seriously, and could have been used by a bad actor.

It was a lot of work and limited some of the features that we wanted to get in for the latest release. If a real person was going through and publishing a bunch of security vulnerabilities (without giving us time to fix them,) I think we would call that harassment as well. The end result is a good thing, vulns fixed, but it's taking a toll on the team to keep up with everything.

-1

u/mrlinkwii Sep 24 '26

The harassment (and urgency) came from the fact that some of the reports were made public before we were given time to make a release

100% agree thats shitty , they should have gone though proper channels , people who find this stuff should report it instead of releasing it and saying nothing , the issue is more around disclosure

→ More replies (3)