Hacking Anyone care to send me a Wii Mini?

[DeadlyFoez]

Shit. So it looks like our only chance is for me to hook up my wode. Unfortunately I don't have any kind of a breakout board for my wode so that will make soldering and figuring it all out really difficult. I'm not too sure I'm up for that kind of a task. It would take a lot of time and it might fail.

 

[JoostinOnline]

Shit. So it looks like our only chance is for me to hook up my wode. Unfortunately I don't have any kind of a breakout board for my wode so that will make soldering and figuring it all out really difficult. I'm not too sure I'm up for that kind of a task. It would take a lot of time and it might fail.

You have my support.

Mostly because I have nothing else to contribute.

 

[techboy]

There's no such thing as the signing bug on a Mini, so unless WODE can play tricks on the console (e.g. swapping DOLs in a disk after the signature check but before it is run), would a WODE even be helpful?

Either way, I'd love to see something come of this.

If you don't try, the question will always remain unanswered: Is a Wii Mini hackable? If you try and prove that it can't be hacked, we'll at least know it is possible to build an unhackable Wii.

 

[obcd]

What do you mean with breakout board? Are the mini dvd drive connections different from those on a standard wii? The reason I ask is to get a better view upon the situation.
You can never prove something is unhackable. What seems unhackable now could be hacked within a couple of months or years.
All you can say is that it hasn't been hacked at the moment...
I don't supose you tested the sd card pcb connections (test points) on a normal wii to see if there is a difference in hardware or the way they are driven?

How are WODE and the signing bug related? To my understanding, WODE emulates the wii DVD drive and uses a harddisk to load it's game contents. The signing bug (strcmp bug) is what made it possible to install bootmii @ boot2 on earlier wii's.

 

[techboy]

How are WODE and the signing bug related? To my understanding, WODE emulates the wii DVD drive and uses a harddisk to load it's game contents. The signing bug (strcmp bug) is what made it possible to install bootmii @ boot2 on earlier wii's.

Signing bug or related patches are needed to install or run anything unofficial, not just bootmii. Wii Disks are signed, and if you modify one to stuff a homebrew DOL inside, they don't boot anymore.

My question is basically: Is there something a WODE can do to run a modified disk that I don't know about? If not, what benefit will a WODE provide with respect to hacking a Mini?

 

[obcd]

Isn't the purpose of a modchip and a wode to circunvent the signing.
Isn't the checking done by the dvd drive itself?
So a thing like wode will always return a "check passed" upon the "check result request" from the wii.
The "media id" is part of the check to ensure that self burned media fails under normal conditions.

So, to my knowledge, yes, a wode makes it possible to run a disc with a homebrew app.

 

[snikerz]

Isn't the purpose of a modchip and a wode to circunvent the signing.
Isn't the checking done by the dvd drive itself?
So a thing like wode will always return a "check passed" upon the "check result request" from the wii.
The "media id" is part of the check to ensure that self burned media fails under normal conditions.

So, to my knowledge, yes, a wode makes it possible to run a disc with a homebrew app.

nope, modchips only circumvent the physical protection of a wii disc

 

[techboy]

Isn't the purpose of a modchip and a wode to circunvent the signing.
Isn't the checking done by the dvd drive itself?

The drive only checks if it's a burned vs. pressed disk. Signing checks are handled by IOS.

Modchips and WODE would allow burned copies of disks / HDDs full of images to be used, but they still need to be unmodified so the signature check passes.

 

[obcd]

It makes sense that way. It could explain why the announced modchip for wiiu doesn't enable homebrew.

 

[DeadlyFoez]

Hey. Anyone who cares to take a look at the raw dump from the wii mini, it is HERE. I have not even taken the time to look at it in a hex editor or done anything other than dump it bc I have been very busy with work. Let me know what you guys find. I hope you guys can figure out which IOSes are installed and their versions. I do not have the keys for this so don't bother asking. Have fun everyone.

P.S. Apparently this wii mini was previously owned. The previous owner must have formatted it. The only thing that I have done to change anything with the nand was run the wii mini and also create a save game for SSBB.

 

[JoostinOnline]

Lol, you couldn't have split that up? I sure hope my connection doesn't break during the download.

Anyway, thanks man. I'll take a look at it.

 

[JoostinOnline]

Okay, there wasn't much I could do without the keys. I did get a few things, but I don't know if they will be helpful.

It has boot1d (latest version) and boot2v4. The latter was something I found quite interesting, since (to my knowledge) all GC-less Wii's that came out like 1.5 years ago have boot2v5.

There are only 3 bad blocks on the NAND.

I also dumped a list of all strings in the file. That resulted in a 40MB file (most of which is just random characters) which I don't feel like uploading, but at the end there is a list of all files and directories. I cut it down to that section and it's only 141KB. I've uploaded a text file of it here:
http://filebin.ca/mt2gIyeeRz1/Titles.txt

If you translate all the folder names from hex to decimal (00000050 converts to 80, so it holds IOS80), you should be able to figure out every IOS installed on there.

 

[JoostinOnline]

Sorry for the triple post, but I want to make sure that this doesn't get missed. I filtered out everything but the main system title folders (I'm pretty sure I got all of them), and converted them to their decimal names. They are in the same order as they appear in the NAND dump.

00000029 IOS41
00000001 boot2
00000004 IOS4
00000002 System Menu
0000002b IOS43
0000001f IOS31
00000003 IOS3
0000000c IOS12
00000021 IOS33
00000050 IOS80
0000000d IOS13
0000000e IOS14
0000000f IOS15
00000011 IOS17
00000015 IOS21
00000016 IOS22
0000001c IOS28
0000002d IOS45
0000002e IOS46
00000022 IOS34
00000023 IOS35
00000024 IOS36
00000025 IOS37
00000026 IOS38
00000030 IOS48
00000035 IOS53
00000037 IOS55
00000038 IOS56
00000039 IOS57
0000003a IOS58
0000003b IOS59
0000003d IOS61
0000003e IOS62
00000009 IOS9

 

[techboy]

No stubs beyond IOS3 and IOS4? That's odd...

 

[DeadlyFoez]

Sorry for the triple post, but I want to make sure that this doesn't get missed. I filtered out everything but the main system title folders (I'm pretty sure I got all of them), and converted them to their decimal names. They are in the same order as they appear in the NAND dump.

Are you able to tell the versions of the IOSes?

Thanx man.

 

[JoostinOnline]

No stubs beyond IOS3 and IOS4? That's odd...

That is odd. I double checked by searching for the specific stub folder names in the original strings list (I can upload it if anybody wants me to, but it's 40MB) and nothing was there.

Are you able to tell the versions of the IOSes?

Thanx man.

Nope, just the folders.

Do you have a game with an update that includes stubs for 222+? This might indicate updates being blocked completely.

 

[DeadlyFoez]

The only games that I still own at the moment are Lego Batman and SSBB. I've sold the rest. But I would have figured that lego batman has some stubs in it. I haven't checked yet.

 

[JoostinOnline]

Unless 3 and 4 aren't stubs, why include them and not the others? And if they aren't stubs, why not include IOS16? The whole thing is weird.

 

[natkoden]

Aren't ios40-48 present in Korean Wiis only?

And ios59? As far as I know, that one comes with DQX.

 

[JoostinOnline]

Aren't ios40-48 present in Korean Wiis only?

And ios59? As far as I know, that one comes with DQX.

As of 4.3b, all Korean IOS's are included on all Wii's. It was to block a method for the Trucha Bug Patcher.

If updates are blocked, it would be necessary to include IOS59.