Hacking Sulotion to fix a brick? (160-0103)

[TheTechGenius]

I would of found a way to fry the nand chip on the motherboard, so they can't read the data. Lol

 

[TheTechGenius]

usb killer?

Yeah. Lol.

 

[QuarkTheAwesome]

I wanna know how they gained access to the system menu when CBHC prevents it.

With no signs of a hard mod I wonder what tools they have. It'd be great to get our hands on that

Nintendo, being Nintendo, has access to Nintendo's private keys and whatnot. As far as we can tell, they used these keys to make a special boot1 image that passes the sigchecks (since it's signed by Nintendo) which they then flash onto an SD card. From there, some fancy tomfoolery with factory hardware and maybe the CMOS battery makes boot0 read that SD card (with process has been named "MCP Recovery") and then Nintendo's recovery environment runs.

 

[TheTechGenius]

Nintendo, being Nintendo, has access to Nintendo's private keys and whatnot. As far as we can tell, they used these keys to make a special boot1 image that passes the sigchecks (since it's signed by Nintendo) which they then flash onto an SD card. From there, some fancy tomfoolery with factory hardware and maybe the CMOS battery makes boot0 read that SD card (with process has been named "MCP Recovery") and then Nintendo's recovery environment runs.

We need a custom recovery for the WiiU! That would be awesome. Lol

 

[Pachee]

well i got it back from nintendo, they didnt opened the system or at least i dont see any signs of it.
but because the homebrew channel which still was on the "home-menu" they wont repair or fix it, simply cuz it contains illegal software which isnt developed or tested by nintendo.

so my wiiu adventures end here..

Topic may be closed!

Thank you for reporting it back.

 

[Quantumcat]

Nintendo, being Nintendo, has access to Nintendo's private keys and whatnot. As far as we can tell, they used these keys to make a special boot1 image that passes the sigchecks (since it's signed by Nintendo) which they then flash onto an SD card. From there, some fancy tomfoolery with factory hardware and maybe the CMOS battery makes boot0 read that SD card (with process has been named "MCP Recovery") and then Nintendo's recovery environment runs.

In that case, wouldn't they just access a special recovery home menu, not the original one?

 

[QuarkTheAwesome]

In that case, wouldn't they just access a special recovery home menu, not the original one?

They could really do whatever they'd like. I'd suspect they run some kind SCT or Minute-esque debug menu and browse around the MLC.