Hacking Bushing *may* have found secruity flaw

[Kaer]

You're following a crappy logic to justify the fact you pirate video games, that all what I saw in your text. Hardware sales rising because of a softmod ? But where the hell have you heard that ? For me, it's just a stupid urban legend like the "you can keep pirated files 24hours" law which was invented by pirates some years ago and a lot of people thought it was true.

No one will blame you because you pirate, a lot of people pirates here, even me, but don't try to justify it with a stupid logic. You're like people who pirates because "omg there is only crappy games on Wii I don't want to buy thaaaaat". You don't want to buy a game ? So why are you pirating it ? When you see an expensive diamond which costs, let's say, 100000000$, will you steal it because, heh, you won't buy it ?

Here, when you are a pirate, you're welcomed. So, please stop justify and just say it "I'm a pirate, and I'm proud of it"

Note : Sorry for the grammar problems

First of all, I never said that I didn't pirate games. I didn't say that there was a big boost in sales, but that it in fact helped, no matter how minute the difference is. The fact that at least 12 people who would of never bought an Xbox to begin with bought one because it could be softmodded speaks for itself. I'm not the only one who did this for people, there's tons more out there. Not to mention that HardDrive makers profited in this as well since most people wanted to upgrade the drive from 8GB/10GB to 120GB/250GB and up.

In the GC days when you could play GC games via the Phantasy Star hack with the BBA, I pirated a few games that way. But you know what? I still had to buy the hardware just get that hack going. Still that didn't stop me from buying 20+ GC games or 10+ Wii games plus Wii Fit. Don't lecture me about piracy since I've probably been doing it longer than you have. My entire point of this is that THERE IS LEGITIMATE WAYS OF USING SOFTMODDED STUFF. Don't like Team Excuter's bios for legal reasons? Use the linux loader. Completely Legit. Or hell, use your Xbox as a webserver with Xbox Linux.

 

[Social0]

I'm a big pirate but I don't have the guts to say something dumb like " Games are overpriced " anymore cause seriously, even countries that charge very high prices for games... they really are quite cheap.

Think about all the people that worked so many hours for months/years. It's insane!

But Nintendo's not gonna respond to him at all

 

[Shuny]

THERE IS LEGITIMATE WAYS OF USING SOFTMODDED STUFF.

You failed . Homebrews already exists and you can boot Linux, play Tetris or even watch porn movies on your Wii. There is no legitimate ways of using a softmodded Wii except to use a DVD to put your NES roms like Waninkoko did. Seriously dude, do you really think all these guys are excited because OMFG§ they will be able to play their roms directly from the DVD ?

 

[Kaer]

THERE IS LEGITIMATE WAYS OF USING SOFTMODDED STUFF.

You failed . Homebrews already exists and you can boot Linux, play Tetris or even watch porn movies on your Wii. There is no legitimate ways of using a softmodded Wii except to use a DVD to put your NES roms like Waninkoko did. Seriously dude, do you really think all these guys are excited because OMFG§ they will be able to play their roms directly from the DVD ?

I honestly don't care about being able to read roms. I have my softmodded xbox for that. What if I wanted to direct boot linux without having to go through HBC every time? As ridiculous as the idea sounds, there's someone out there who would do it. What about a complete dashboard replacement a la XBMC? I never said that legitimate use would be for the masses. The great majority of the time the minority will use it for non-pirate reasons, whatever they may be.

 

[ackers]

WHAT THE HELL ARE U GEEKS TALKING ABOUT

 

[*~Arc]

I'm a big pirate but I don't have the guts to say something dumb like " Games are overpriced " anymore cause seriously, even countries that charge very high prices for games... they really are quite cheap.

Games are overpriced really. Two days of 8 hours of work and I can barely afford one game. yea "really affordable"

 

[Dr Eggman]

Here's what i think is going to happen.

Big N says "come to papa" to bushing, they have a hidden agenda.
bushing takes the ploy and sees a rep.
Ninty gives him 2 options, they sue his ass, or he works for them (or something similar)
bushing 'declares' hes out of the scene (doesnt say he works for ninty says hes pissed about this crap)

Sorry, but that's pretty fucking stupid. Like 99% of this thread. You kids need to grow up

Ya, it is pretty stupid, but i can see bushing getting angry and leaving the scene cause of all this fuss.

 

[Sotoro]

Even if there is a way to change the drives firmeware, bushing will never make the way public...

 

[OSW]

edit: maybe stupid...

nitrotux made a claim in the other topic (also quoted in nexst persons post) that sounded good, but someone replied rejecting him. i don't know whos right so i'll just wait...

 

[Brian117]

QUOTE(nitrotux @ Jul 18 2008, 01:30 PM) *
OK, someone with some authority on Wii hacking (sorry, I promised not to say who) recently confirmed the debug command theory.

I don't know how to say it so that everyone understands, but here goes:



THE KEY TO PLAYING BACKUPS WITHOUT DRIVECHIP IS BY UPLOADING YOUR OWN EXPLOIT CODE INTO THE DVD FIRMWARE BY SENDING THE DEBUG COMMANDS.


If you take a look at libOGC, at the function DVD_LowUnlockDrive, this is how to put the drive into debug mode:
CODE
static u8 __dvd_unlockcmd$221[12] = {0xff,0x01,'m','a','t','s','h','i','t','a',0x02,0x00};
static u8 __dvd_unlockcmd$222[12] = {0xff,0x00,'d','v','d','-','g','a','m','e',0x03,0x00};

s32 DVD_LowUnlockDrive(dvdcallbacklow cb)
{
#ifdef _DVD_DEBUG
printf("DVD_LowUnlockDrive()\n");
#endif
u32 i;

__dvd_callback = __dvd_unlockdrivecb;
__dvd_finalunlockcb = cb;
__dvd_stopnextint = 0;

for(i=0;i

 

[nitrotux]

So with this code, we can put the Wii's DVD drive into debug mode, which will then let us be able to play backups without a modchip? Or will it just let us update custom firmware which will then sooner or later configure the drive into playing backups?

The second one.

It will just let us update custom firmware which will then sooner or later configure the drive into playing backups.

 

[Slimmmmmm]

are aware that Bushing reads sites like TehSkeen and GBAtemp, right?

Yeah he was reading it the same time I was, hi m8

He didn't post though, maybe because the thread just kinda wanders off for a bit? I hope my post is not interpreted as spam, I'm just pointing out we need to encourage bushing and marcan etc to post and not just read.

 

[Warren_303]

This is amazing newz if true. I just hope that since Nintendo will soon be aware of this that they wont try and fuck up the homebrew channel with another update. Then again I'm sure someone will find away around the update as usual.

Still no need to update anyway. Sorry I'm drunk hehe.

 

[jan777]

nintendo might not care,,if they are carefully overseeing the homebrew developement,they will know they can trust bushing and his antipiracy homebrew etc

so bushing may also patch this security hole with a new version HBC or patchmii if someone else might find that hole(if nintendo doesnt care)

sorry

 

[gamidi]

Well if you need drivecode, yaosm is open source and it is written completely in drivecode. So if you can upload it to the drive it will probably run backups.

 

[Jademalo]

Wait, so right here weve pretty much just figured out how to create a virtual modchip thats acctually written to the DVD drive instead of being soldered? because, (correct me if im wrong) modchips just patch the DVD drive with code from their own chip, and all were doing is putting that code into the drives chip?

=D

 

[Arm the Homeless]

I don't think so. xP

 

[Jademalo]

dam... well, i bet the post after me will either agree or disagree with one of us

 

[F0ur2o]

***not my source***

All current Wii drivechips work by connecting to an unused serial debug port of the DVD drive controller (that's that DMS/D2A/D2B thingy you've heard of). This debug port can for example be used to read/write to the RAM used by the DVD controller, and that's exactly what the current drivechips do: To make backup discs work, these drivechips must modify the DVD controller RAM in some way. Now what makes the drivechips detectable is that the Wii can read/write that RAM too (in fact even gamecube software can do that - just remember how GCOS can read your DVD drive date/version, or how gamecube homebrew discs can be used to update the drivechip firmware), so it can check for any unusual changes in the DVD controller RAM that can only be caused by a drivechip. Maybe the easiest way of doing so would be to check a special memory location that unlocks the DVD controller memory. About the first thing ALL current drivechips need to do to get backups running is to write the value 0x41 to that memory location.


I challenge the world to solve this.

 

[WB3000]

Ah, it's a shame this being patched would also limit homebrew expansion into the DVD realm, but I guess the two cannot exist at the same time.