Hacking Hykem's 5.5 iosu Exploit

[ajd4096]

There is no verification, online or otherwise, for that kind of thing. A future firmware could -possibly- do this, but since we will have emuNAND, the check could be completely patched out or just send modified responses. So this isn't really something to worry about, no. If they don't do it on N3DS which has better security, they won't do it on WiiU.

If Nintendo do it correctly you wouldn't even know there was a check being done at all, let alone know how to send the correct response.
Fortunately they don't seem to care, and often make mistakes.

 

[EmceeKerser]

Fortunately they don't seem to care, and often make mistakes.

Thats exactly what we thought about the 3ds from updates 9.9 - 10.3. Then they released the web browser block

 

[Zap Rowsdower]

Also, from Hykem's latest update, you can surmise:

1. The 5.4, 5.5, and lower exploits are working and complete.

I'm not sure that is a fair assumption to make. We have no idea the specifics of what he plans to release, or how long he has focused on the 5.4+ webkit... if at all.

 

[Bimmel]

Nothing more but this: Thank you Hykem. And everybody behind the scenes.

 

[SonyUSA]

If Nintendo do it correctly you wouldn't even know there was a check being done at all, let alone know how to send the correct response.
Fortunately they don't seem to care, and often make mistakes.

Packet scanner

 

[ajd4096]

Packet scanner

Steganography.

 

[SonyUSA]

I'm not sure that is a fair assumption to make. We have no idea the specifics of what he plans to release, or how long he has focused on the 5.4+ webkit... if at all.

Yes, he says IF he cannot get the permanent install to work, he will release everything -immediately-, which implies it's ready

 

[MiiDontLikeU]

Is he working on the project alone?

 

[SonyUSA]

Steganography.

We know what data they send, if we see something weird we will know something is concealed, therefore defeating the purpose of the concealment, and since we will have full system access we can just use a debugger to see what the WiiU is sending if nobody wants to packet scan.

 

[gudenau]

Something like that already exists.

--------------------- MERGED ---------------------------



Hardware key spoof in emuNAND

You can unban without emuNAND, do not ask me how; I do not know.

--------------------- MERGED ---------------------------

Is he working on the project alone?

Mostly.

 

[aracom]

You can unban without emuNAND, do not ask me how; I do not know.

If the first unban methods show up, we're pretty fucked. If they haven't made a new ban system, something like bean did for Wiimmfi would've been a good thing. Although I really don't think they did something like that, so we'll have MKW all over again.

 

[gudenau]

If the first unban methods show up, we're pretty fucked. If they haven't made a new ban system, something like bean did for Wiimmfi would've been a good thing. Although I really don't think they did something like that, so we'll have MKW all over again.

Not like the people who know how at this point will ever share it. All they said is that they know how.

 

[MattKimura]

If/when IOSU is here and Loadiine gets ported, I hope that the LoadiineReady format won't get abandoned (Ex: Code Content Meta folders)
I heard you guys talking about .wud and .wux files, I delete my .wud files a while back because they take up way too much space on my computer!

Even for USB loading, I"d hope we don't HAVE to use .wud/.wux files.

 

[ajd4096]

We know what data they send, if we see something weird we will know something is concealed, therefore defeating the purpose of the concealment, and since we will have full system access we can just use a debugger to see what the WiiU is sending if nobody wants to packet scan.

If it is done right, it won't even look weird. That's the whole point of steganography.
It would be absolutely trivial to trickle back the installed firmware one byte (or bit) at a time and piece it together server-side.
Do Nintendo want to do this at scale for a console due to be replaced? Probably not, but it most certainly is possible.

 

[Simonwayneee]

If/when IOSU is here and Loadiine gets ported, I hope that the LoadiineReady format won't get abandoned (Ex: Code Content Meta folders)
I heard you guys talking about .wud and .wux files, I delete my .wud files a while back because they take up way too much space on my computer!

Even for USB loading, I"d hope we don't HAVE to use .wud/.wux files.

(Please know that this is what I think)
IF there is a new format like *.wbfs for Wii, there should be a converter, that converts the files into the new format.

 

[Zap Rowsdower]

Yes, he says IF he cannot get the permanent install to work, he will release everything -immediately-, which implies it's ready

The latest intentions stated are not what is in question here. I have no doubt that firmwares 5.3.2 and less IOSU will either be supported either initially or ported to soon after. Now what IS left to question is the "everything". Hykem has not explicitly said that he was working on the 5.4+ webkit, just that it was being worked on... which probably just means that he had heard others say that they were working on it.

 

[SonyUSA]

If it is done right, it won't even look weird. That's the whole point of steganography.
It would be absolutely trivial to trickle back the installed firmware one byte (or bit) at a time and piece it together server-side.
Do Nintendo want to do this at scale for a console due to be replaced? Probably not, but it most certainly is possible.

Look brah, if Blizzard can't even do it properly, a company who had an entire department devoted to coding Warden and its server/client secret checks only to be defeated by ONE GUY, then I think we can handle it on the Wii U. You can't just make checks like that invisible, there has to be processes/threads that run to perform the functions/hashes to send back to nintendo. You can't make something like that invisible, we will see it right away by checking processes.

Plus, the buttholes at Sony and M$ would have implemented this if it was possible.

 

[MRJPGames]

But what if Hykem is kill?

 

[Chuardo]

But what if Hykem is kill?

???

 

[gudenau]

Could we limit the users that can post here to one that have any idea what is going on?