The story of "my IOSU exploit"

Hey everyone!

This is my first blog post (ooh) and I thought I'd share the story of my "IOSU exploit" that had a few people excited lately. In case you weren't aware:



Is that a HBL icon? How'd I do that? This is the story of how a bit of fun turned into a screenshot and one of my favourite reactions to anything, ever.

As some of you know, developers like me enjoy hanging out on IRC channels, and I'm no different (#wiiubru on freenode, we have fun!) Aside from the usual debugging by committee and code golf competitions (almost had OurLoader under 200 bytes, but it turned out to not actually work... Maschell takes the win for now ;)) there's also a lot of tests, betas and PoC apps passed around. One such occasion is where we begin.

The developer of this particular app was passing around a rather curious ELF when I came online - they claimed it could change icons on the Home Menu without IOSU! Well, I couldn't resist that one. I downloaded the app and included .tga icon and transferred it over. I opened it up, and was greeted with this monstrosity:

jfcTYZo.jpg

UVDsoDl.jpg


Hrm. I don't think that's what it's meant to do... (that's Mii Maker btw)

After a quick panic chat on IRC, I found out that the app makes use of the USB temporary storage system available on the Wii U, where code can quickly throw stuff on a connected USB drive as part of some operation. Up until that point, I ran my Wii U driveless (I'm broke [no eShop stuff], it's a 32GB console and I never hacked my vWii) so I found some random USB key, formatted it and tried again. It worked! Mii Maker's icon had been replaced with a neat little HBL logo. After a quick rearranging of the menu, it was perfect:

u79NGMB.jpg


You see, by this point I had formed a bit of a plan. Every now and again I like to screw around a bit. It rarely ends well, but I still have fun getting there and crafting a convincing setup. I've done it before with WiFi passwords, GBATemp cookies and had several other plans that never went anywhere. Thus, we got to the tweet:

2YZH5jL.jpg


The game was on! The whole thing was noticed almost immediately by eagle-eyed Twitter followers with questions about the HBL icon in the image. After taking the above screenshot (just in case) I set myself a deadline - 45 minutes and the tweet's deleted. Which is exactly what I did.

Failed to fetch tweet 777459303825281025


I do my best. With that, I went to bed and woke up to find GBATemp involved; and some rather interesting conversation.

I wouldn't read too much into this, if anything you're gonna get a bunch of random people harassing him after they see that image.

It literally is "nothing to see here folks". People who are waiting are still gonna be waiting regardless, even if it was something to get hype about (which it's not).

Surprisingly, that's not really what happened. This was all on the 18th of September and beyond the posts I quote here this has kinda been ignored over that span of time. I do like the point about everyone waiting regardless, looks like all you lot are finally starting to harden up towards this sort of thing ;D

The symbol right next to it reads something with "Ran" on it, Random maybe?

That's my folder of "built-in apps I never use"; named "Randoms". It's an excellent organisation strategy.

Not sure what's your goal with that, but at least for me, it doesn't mattwr who owns or doesnt own the exploit. I'm patiently waiting while doing my stuff and don't need to take pics of other people's stuff.

IMHO the opposite is true - we need to archive evidence of stuff like this (when it's serious, of course) so we can hold people accountable. Ignoring an issue normalises it; if left unchecked it'll be "no big deal" to take the whole community for a Hykem-style ride.

Obligatory anti-flamewar stuff: When I say "hykem-style", I'm taking about the experience delivered to the community. Whether or not he actually had an exploit is irrelevant, as is his intentions. This is not the place to discuss it.

Is changing the icon with pycho already a known thing?

Gotcha! I left a like on this post to give the hint; apparently it did. All was silent until Thursday, when quite literally out of the blue:

Aren't you the dude who has IOSU ? dude give us ! :c

Woah! I was talking about PowerPC Assembly in a thread centred around playing Xbox games on the Wii U when all of a sudden, nearly 2 weeks later, this happens! I was asleep at the time, so I saw all this and the following at once:

He doesn't. Trust me. He releases everything that is usable and he consistently says IOSU is not required for homebrew.

tumblr_mp7u2fQdhN1s26aado1_500.png


By the way, the reason I didn't publicise any of this is because the original developer was very specific that this was to stay private. I'm probably pushing it with this blog post - sorry. I know you're reading this, but I can't let posts like that one slide indefinitely, esp. when it's edited to just "nevermind". Again, I'm sorry.

Me being me, I then responded in the stupidest, most aggressive way possible:
Oh you probably missed the tweet he made , unless he was trolling.
Edit: https://twitter.com/EpicLPer/status/777460334110052352
Not trying to spark a war , but oh well..
Dps6uX4XPOKeA.gif


this doesn't invalidate what I said about not needing IOSU for homebrew btw. There's more to this situation that meets the eye. Riddle for ya: "Re-releasing iPhones is a new direction in business"
We wish ! Not sure if the Wiiu powerful enough tho..
I dunno, I'm pretty sure the Wii U is powerful enough to run Wii U games. Just my opinion though.

In case you were wondering, the re-released iPhone is the SE, which is a direction (south-east) and south-east of Patrick there's an invisible link to the post I liked (about changing the icon being a known thing). I was really proud of the whole thing at the time, eagerly explaining the riddle on IRC. Now I'm not so sure.

I was originally planning on keeping this entry all light-hearted and "haha" but looking at that post I think an apology is in order. I'm sorry, guys. I don't have an IOSU exploit. It was silly of me to deceive you all like that, especially after what the community's been through with developers who were completely serious. Again, I'm sorry.

I'm not really sure where to take this post now; so I suppose I'll just end it off here. There you have it - the story of the mystery HBL icon and what followed. I hope you enjoyed reading about it!
  • Like
Reactions: 20 people

Comments

@VinsCool Well, you'd have to convince the person who made it to release. They were pretty damn sure that they didn't anyone on IRC to redistribute it so I wouldn't be able to upload it. I also don't think it's really appropriate to reveal their identity. I will ask though.
 
  • Like
Reactions: 1 person
Is that secret person margen67? Why is margen the only. Dude in the blog roll
 
Interesting read... But personally I'm so jaded about IOSU news that I hardly pay attention to any of it anymore until the scene explodes with a bunch of releases and tutorials about it, which I don't see happening any time soon.

That said, it's good that you explain yourself like this. I don't know how many people would...
 
  • Like
Reactions: 3 people
That's actually cool :P I don't know if you were allowed to see the source code but i think it was using some nn_idbe function ? :)
 
C
So I see people saying that Cafiine can replace Home Menu icons, but I thought that Cafiine was only designed to replace files in the /vol/content directory only? Or is there a modified Cafiine out there which can replace files in the /meta and /code folders that I'm not aware of?
 
  • Like
Reactions: 1 person
With all that's been done and said for fun and so on, I sincerely hope we can get USB access on the Wii U within the next decade, SD cards are all well and good, but USB is so much cheaper when it comes to its price per GB :P

But then again, no sense in getting one's hopes up XD
 
  • Like
Reactions: 1 person
Nice post :)
ehm... *chough* *chough*

------
By the way, the reason I didn't publicise any of this is because the original developer was very specific that this was to stay private. I'm probably pushing it with this blog post - sorry. I know you're reading this, but I can't let posts like that one slide indefinitely, esp. when it's edited to just "nevermind". Again, I'm sorry.
------
Don't worry at all. I was joking when I said it should stay private :P
The only reason is that it use some code from another developer so I would've to ask him before
 
  • Like
Reactions: 2 people
About my quote: I was not educated like that. I do not have the need to be spying over other people stuff and taking screens of every single thing they do or post. If it isn't related to me directly, it isn't of my interest.

Have a good day.
 

Blog entry information

Author
QuarkTheAwesome
Views
556
Comments
32
Last update

More entries in Personal Blogs

More entries from QuarkTheAwesome

General chit-chat
Help Users
    Xdqwerty @ Xdqwerty: Good afternoon