Hacking Wii u and Wii U game pad hack talk to be presented soon at CCC/30c3

[marcan_troll]

The point is... f0f said that they fully hacked the Wii U... and that it was impossible to do. But nintendo -did- do it. That means that either f0f didn't fully hack the system.. or they don't know everything that they think they do.

[citation needed]

I said it was impossible to do from vWii mode. It is. There is no way to turn on the gamepad from vWii mode. What Nintendo did is turn it on *before* vWii mode is entered. That was always possible and I never said it wasn't.

Edit: And, of course, if they needed to, Nintendo could always change what gets disabled in vWii mode and what doesn't. I've always said that vWii mode is malleable like that (hence the whole investigation into reverting it partially). Not being able to use the gamepad applied to vWii mode as it existed at the time.

 

[Maxternal]

The point is... f0f said that they fully hacked the Wii U... and that it was impossible to do. But nintendo -did- do it. That means that either f0f didn't fully hack the system.. or they don't know everything that they think they do.

They didn't say it was impossible to do. They said it was impossible to do WITHOUT a Wii U mode hack and that it couldn't be done from WITHIN vWii mode. Nintendo didn't even do it from vWii. They do the configuration from Wii U mode as well and since they're Nintendo, they don't need a hack to run code. If we're really lucky there's some other way to get around that but the most obvious way didn't work and the fact that Nintendo themselves chose to set it all up from Wii U mode kinda confirms what f0f said.

edit : ninja'd

 

[Ray Lewis]

Others told me why they avoid reacting. Hence, quotation marks:-) I have to expectations from certain people.
pwsincd

 

[BIFFTAZ]

Just incase it has slipped anyone's mind..

http://streaming.media.ccc.de/saalg/native/hq/

 

[pwsincd]

Colour me impressed. well done delroth and shuffle2.. no encryption ... wtf

 

[Stalkid64X]

Nobody posted proof. Random characters, troll pictures, slides, talk, and could have been theories presented. Four Horsemen presented a video at least. Albeit a dev kit gamepad. Nobody has presented actual proof. People hack cell phones and wireless devices also. Firmware is said to not be encrypted on gamepad. Still waiting to see any proof. This is why others have said, "Why get worked up? No proof was given and without a release who cares?".

Yes. Ignore the fact they posted hashes of certain keys that they could ONLY get with full access...

Shit. A youtube video. I mean that clearly is hardcore evidence.

 

[b17bomber]

I wonder how long it'll take to do stuff like dolphin to wii u for end users.

 

[pwsincd]

prolly until they port it to windows.

 

[Ericthegreat]

Yes. Ignore the fact they posted hashes of certain keys that they could ONLY get with full access...

Shit. A youtube video. I mean that clearly is hardcore evidence.

Well they prob are, but can you prove those hashes are real


Edit: Post 1337

 

[DinohScene]

Oh my Ninty what have you done.

The demo was astounding!
Never would've thought that the latency would be minimal.

 

[drmr]

can you prove those hashes are real

There are no "false" hashes. Everyone with the same level of access as f0f can verify the hashes, of course.

 

[Kamek64]

Can I still view the GamePad talk now? I missed it.

 

[Celice]

Can I still view the GamePad talk now? I missed it.

It will be uploaded at some point later, do not worry

 

[gohan123]

http://koeln.ftp.media.ccc.de/congr..._engineering_the_Wii_U_Gamepad_h264-iprod.mp4

 

[obcd]

I have trouble understanding the purpose of the hashes as well.
A year ago, they only proved to Nintendo how far the wiiu security was broken?
What's the point in giving such proof to Ninty?
Actually, was it even giving them proof? You have to know what is hashed to check it's hash.
Unless it's the same hash result ninty expects from their encrypted stuff when they run it....
Wasn't there even a slide saying the hash was from a file with a Wiiu and vWii key?
The original Team f0f blog didn't even say what was hashed...
Besides that, Maxternal managed to proof the ppc decoding stuff was a fact when he got wii linux running using that knowledge.
The keys make it possible to decrypt the files and reverse engineer the code running on the console.
They still don't allow you to run your own code if I am correct?
Isn't the key used to encrypt the code (so called private key) one that isn't present on the console?
Obvious, if you can decrypt the code and reverse engineer it, you can look for exploits to run unsigned code.
Don't get me wrong, previous sentence is easier written than done....
I need to look at the presentation again...Guess I am still dumb...

 

[Stalkid64X]

There are no "false" hashes. Everyone with the same level of access as f0f can verify the hashes, of course.

I guess I should have specified that it was proof enough for those technically knowledgable enough to understand how it was proof as opposed to... well, here.

Notice, gbatemprz, that your precious youtube video evidence was shredded by counter evidence within hours. The hashes have been posted for around a year now and not one single person has come forward to dispute them as fact. Again - a single piece of proof otherwise, or accept that you're living in fantasy land.
(And not the great Dizzy one, either.)

A quick little dumbed down summary for those struggling;
To get those keys/files to hash, you need access. Each represented `how much` access had been gained at the times they were posted as the presentation said.

You cannot get them without access, and when you have access to them, you essentially own the system.

The hashes were things that Nintendo would very likely know, and are independantly verifiable proof of `owning` the Wii U by anyone with a sufficient level of access, meaning it would be idiotic to have faked. Peer reviewable by people skilled enough to understand it, if you like.

 

[rednekcowboy]

I guess I should have specified that it was proof enough for those technically knowledgable enough to understand how it was proof as opposed to... well, here.

Notice, gbatemprz, that your precious youtube video evidence was shredded by counter evidence within hours. The hashes have been posted for around a year now and not one single person has come forward to dispute them as fact. Again - a single piece of proof otherwise, or accept that you're living in fantasy land.
(And not the great Dizzy one, either.)

Just because no one has gotten the level of access needed to prove/refute them does not make them real. For now, they are just a series of random numbers posted on the web with a picture of a trollface.

Not saying they are fake or real, but at this point they are just as likely as that youtube video that you referenced as there is no proof either way for either the hashes or the video. We can all speculate as to what is likely and what is more probable than not, but at this point there is no proof of anything.

Your blind devotion is commendable--extremely idiotic to put that much faith in someone, but commendable nonetheless. I know some dogs that aren't near as unquestioningly loyal as you are.

 

[FAST6191]

Read the last few pages of this thread.... it was cringeworthy.

On it being fake. There is certainly an element of "you are only as good as your last hack" in these circles, however previous work and standing (both of which are top flight and world class) does extend some basic benefit of the doubt. If we were dealing in software then sure "show us your cards" and "I will believe it when I see it". Secondly the presentation did explain in great depth what things are what and though there are few better choices of people to fake such a thing we are also dealing with this is a company of their peers and faking things there would have all sorts of ramifications.

 

[obcd]

10 So, educate us and explain how they are proof enough?
They might become proof if someone else manages to extract the same information from the system?
At that moment, they will only proof that f0f got that information first..
At this moment, there is not someone else...
So, are you guilty until proven not guilty....?
Or not guilty until proven guilty...?
Don't get me wrong, I don't doubt Team f0f did what they said they did.
I just fail to understand how the hashes are proof?
goto 10
Sorry for my crappy basic.. I am not that good in ppc assembly...

 

[Stalkid64X]

Your blind devotion is commendable--extremely idiotic to put that much faith in someone, but commendable nonetheless. I know some dogs that aren't near as unquestioningly loyal as you are.

If by "blind devotion" you mean trusting the word of people I was fortunate enough to be allowed to see the working process of on the HBC - along with knowledge of all their past verifiable work on many, many devices - I plead guilty. Everything I saw, public or private, earned them that trust. I don't know about you (or care) but if friends and associates have earned that trust - and in this field they have an exemplary record over many, many years - then yes, I'll accept things I know are entirely possible from them. I know them, and I judge that based on knowledge not `devotion`. Give me a reason I shouldn't, with some kind of actual non conspiracist drivel evidence to back it up. I've been asking for that for some time.