Hacking Hykem's 5.5 iosu Exploit

ajd4096 · Dec 29, 2015

SonyUSA said:
There is no verification, online or otherwise, for that kind of thing. A future firmware could -possibly- do this, but since we will have emuNAND, the check could be completely patched out or just send modified responses. So this isn't really something to worry about, no. If they don't do it on N3DS which has better security, they won't do it on WiiU.

If Nintendo do it correctly you wouldn't even know there was a check being done at all, let alone know how to send the correct response.
Fortunately they don't seem to care, and often make mistakes.

EmceeKerser · Dec 29, 2015

ajd4096 said:
Fortunately they don't seem to care, and often make mistakes.

Thats exactly what we thought about the 3ds from updates 9.9 - 10.3. Then they released the web browser block

Zap Rowsdower · Dec 29, 2015

SonyUSA said:
Also, from Hykem's latest update, you can surmise:

1. The 5.4, 5.5, and lower exploits are working and complete.

I'm not sure that is a fair assumption to make. We have no idea the specifics of what he plans to release, or how long he has focused on the 5.4+ webkit... if at all.

Bimmel · Dec 29, 2015

Nothing more but this: Thank you Hykem. And everybody behind the scenes.

SonyUSA · Dec 30, 2015

ajd4096 said:
If Nintendo do it correctly you wouldn't even know there was a check being done at all, let alone know how to send the correct response.
Fortunately they don't seem to care, and often make mistakes.

Packet scanner

ajd4096 · Dec 30, 2015

SonyUSA said:
Packet scanner

Steganography.

SonyUSA · Dec 30, 2015

Zap Rowsdower said:
I'm not sure that is a fair assumption to make. We have no idea the specifics of what he plans to release, or how long he has focused on the 5.4+ webkit... if at all.

Yes, he says IF he cannot get the permanent install to work, he will release everything -immediately-, which implies it's ready

MiiDontLikeU · Dec 30, 2015

Is he working on the project alone?

SonyUSA · Dec 30, 2015

ajd4096 said:
Steganography.

We know what data they send, if we see something weird we will know something is concealed, therefore defeating the purpose of the concealment, and since we will have full system access we can just use a debugger to see what the WiiU is sending if nobody wants to packet scan.

gudenau · Dec 30, 2015

SonyUSA said:
Something like that already exists.

--------------------- MERGED ---------------------------

Hardware key spoof in emuNAND

You can unban without emuNAND, do not ask me how; I do not know.

--------------------- MERGED ---------------------------

MiiDontLikeU said:
Is he working on the project alone?

Mostly.

aracom · Dec 30, 2015

gudenaurock said:
You can unban without emuNAND, do not ask me how; I do not know.

If the first unban methods show up, we're pretty fucked. If they haven't made a new ban system, something like bean did for Wiimmfi would've been a good thing. Although I really don't think they did something like that, so we'll have MKW all over again.

gudenau · Dec 30, 2015

aracom said:
If the first unban methods show up, we're pretty fucked. If they haven't made a new ban system, something like bean did for Wiimmfi would've been a good thing. Although I really don't think they did something like that, so we'll have MKW all over again.

Not like the people who know how at this point will ever share it. All they said is that they know how.

MattKimura · Dec 30, 2015

If/when IOSU is here and Loadiine gets ported, I hope that the LoadiineReady format won't get abandoned (Ex: Code Content Meta folders)
I heard you guys talking about .wud and .wux files, I delete my .wud files a while back because they take up way too much space on my computer!

Even for USB loading, I"d hope we don't HAVE to use .wud/.wux files.

ajd4096 · Dec 30, 2015

SonyUSA said:
We know what data they send, if we see something weird we will know something is concealed, therefore defeating the purpose of the concealment, and since we will have full system access we can just use a debugger to see what the WiiU is sending if nobody wants to packet scan.

If it is done right, it won't even look weird. That's the whole point of steganography.
It would be absolutely trivial to trickle back the installed firmware one byte (or bit) at a time and piece it together server-side.
Do Nintendo want to do this at scale for a console due to be replaced? Probably not, but it most certainly is possible.

Simonwayneee · Dec 30, 2015

MattKimura said:
If/when IOSU is here and Loadiine gets ported, I hope that the LoadiineReady format won't get abandoned (Ex: Code Content Meta folders)
I heard you guys talking about .wud and .wux files, I delete my .wud files a while back because they take up way too much space on my computer!

Even for USB loading, I"d hope we don't HAVE to use .wud/.wux files.

(Please know that this is what I think)
IF there is a new format like *.wbfs for Wii, there should be a converter, that converts the files into the new format.

Zap Rowsdower · Dec 30, 2015

SonyUSA said:
Yes, he says IF he cannot get the permanent install to work, he will release everything -immediately-, which implies it's ready

The latest intentions stated are not what is in question here. I have no doubt that firmwares 5.3.2 and less IOSU will either be supported either initially or ported to soon after. Now what IS left to question is the "everything". Hykem has not explicitly said that he was working on the 5.4+ webkit, just that it was being worked on... which probably just means that he had heard others say that they were working on it.

SonyUSA · Dec 30, 2015

ajd4096 said:
If it is done right, it won't even look weird. That's the whole point of steganography.
It would be absolutely trivial to trickle back the installed firmware one byte (or bit) at a time and piece it together server-side.
Do Nintendo want to do this at scale for a console due to be replaced? Probably not, but it most certainly is possible.

Look brah, if Blizzard can't even do it properly, a company who had an entire department devoted to coding Warden and its server/client secret checks only to be defeated by ONE GUY, then I think we can handle it on the Wii U. You can't just make checks like that invisible, there has to be processes/threads that run to perform the functions/hashes to send back to nintendo. You can't make something like that invisible, we will see it right away by checking processes.

Plus, the buttholes at Sony and M$ would have implemented this if it was possible.

MRJPGames · Dec 30, 2015

But what if Hykem is kill?

Chuardo · Dec 30, 2015

MRJPGames said:
But what if Hykem is kill?

???

gudenau · Dec 30, 2015

Could we limit the users that can post here to one that have any idea what is going on?

Hacking Hykem's 5.5 iosu Exploit

Well-Known Member

Well-Known Member

Well-Known Member

~ Game Soundtrack Collector ~

We're all mad here

Well-Known Member

We're all mad here

Member

We're all mad here

Largely ignored

Well-Known Member

Largely ignored

3DS & WiiU Enthusiast

Well-Known Member

Simonwayneee

Guest

Well-Known Member

We're all mad here

Pretty great guy

Well-Known Member

Largely ignored

Similar threads

Popular threads in this forum