Hacking Hykem's 5.5 iosu Exploit

[punkskaguy]

I thought we're safe under tubehax DNS? Can someone confirm that the system will update regardless? I deleted all my network connections on the Wii U while waiting for the news, but would be nice if I can go online to play some games (Mario Maker, Splatoon etc).

That's how DNS works. Even if you change from a public DNS to TubeHax:
Ip addresses are cached so that the client does not need to do another DNS lookup.

So even if you change now to TubeHax, chances are that the ip addresses of ninty update servers are already looked up.

EDIT: It's not impossible for your WiiU to update even 24 hours after switching to TubeHax DNS. In some cases your routers are caching already looked up IP addresses for 24 hours.

 

[Dark Ronin]

Guys, seriously, just calm down. When it hits - it hits and gets frontpaged in a seconds.

 

[davetheshrew]

Hype intensifies

 

[Aroth]

I thought we're safe under tubehax DNS? Can someone confirm that the system will update regardless? I deleted all my network connections on the Wii U while waiting for the news, but would be nice if I can go online to play some games (Mario Maker, Splatoon etc).

I can't figure it out. I updated with tubehax dns, but for some reason the dns does not work for me. I can even access the shop with it active

 

[davetheshrew]

I think snafud post is real, looks right, well played if not.

 

[punkskaguy]

I can't figure it out. I updated with tubehax dns, but for some reason the dns does not work for me. I can even access the shop with it active

Yes, DNS responses are cached:
- On the WiiU
- On your Router
- On your PC
- Almost everywhere

You may have the new DNS servers entered within your network settings on the WiiU. But your router already knows the IP addresses of "update.ninty.whatever.com" and doesn't look it up once more for about 24 hours (depending on the TTL - TimeToLive value of the DNS zone file)

 

[Aroth]

I think snafud post is real, looks right, well played if not.

It "looks" like a list of comments made to look like a snippet from an irc chat log. I could make on that has hykem and smealum having hot furry sex, doesnt meant they actually did it.

 

[joewandy]

That's how DNS works. Even if you change from a public DNS to TubeHax:
Ip addresses are cached so that the client does not need to do another DNS lookup.

So even if you change now to TubeHax, chances are that the ip addresses of ninty update servers are already looked up.

EDIT: It's not impossible for your WiiU to update even 24 hours after switching to TubeHax DNS. In some cases your routers are caching already looked up IP addresses for 24 hours.

Alright, I think I'll keep it offline for a while longer while waiting for any breakthrough. A lot of games to catch up on my PC anyway ..

 

[PF2M]

If you accidentally updated to 5.5.1, it appears that Yellows8's .mp4 exploit has NOT been patched (confirmed by Crediar).

DO NOT UPDATE TO 5.5.1 !

Why not? You're telling me that it's safe, yet we shouldn't do it? I remember Hykem saying something about it working on 5.5.1.

 

[Sam from NL ;)]

Why not? You're telling me that it's safe, yet we shouldn't do it? I remember Hykem saying something about it working on 5.5.1.

Will it be patched later in 2016?

 

[punkskaguy]

Why not? You're telling me that it's safe, yet we shouldn't do it? I remember Hykem saying something about it working on 5.5.1.

If anyone is in the mood to update his/her WiiU:
Almost anywhere you can read: DON'T DO IT!

If you do update anyways: Don't blame it on us afterwards.
You can still become some kind of incompatible to any upcoming exploit releases.

 

[Maximilious]

Why do you even have an internet connection set up on your console?

The problem with all of this is that you need a connection to run these exploits. Even if you're self-hosting you have to connect the WiiU to your network to run them. You can set up a black hole LAN but not every average user knows how to do that effectively.

For 5.5 consoles that will work of course, but once they can actually exploit they have no choice but to connect them to their LAN, because we are using an SSL overflow exploit that executes via the browser. Better for them to take risks (since, you know, they can't run exploits now anyway) and try to block updates now to tell it will work rather than getting everything exploited and then failing to block, and their consoles end up updating regardless.

 

[Lawliet80]

Update to 5.5.1 ?

 

[davetheshrew]

no activity at all in irc atm

 

[Lichtblick]

The problem with all of this is that you need a connection to run these exploits. Even if you're self-hosting you have to connect the WiiU to your network to run them. You can set up a black hole LAN but not every average user knows how to do that effectively.

For 5.5 consoles that will work of course, but once they can actually exploit they have no choice but to connect them to their LAN, because we are using an SSL overflow exploit that executes via the browser. Better for them to take risks (since, you know, they can't run exploits now anyway) and try to block updates now to tell it will work rather than getting everything exploited and then failing to block, and their consoles end up updating regardless.

You can just use static ip and don't fill in a gateway or fake gateway....or block wii u in your router from internet.....there are many ways. But most of the people doesnt understand IP / networking.

 

[wurstpistole]

Well I read that differently

<Hykem> I'm gonna release it probably in April
<Hykem> if not later
<wurstpistole> why
<heeha> for the glory of satan of course
<Hykem> that's why
<d4d> i hate u
<shadowno1> i love wurstpistole

 

[KoolKidsKlub]

<Hykem> Not exactly
<e135> oh?
<e135> so when?
<Hykem> Well it's all pretty much done
<Hykem> just got to package it up
<snafud>
<snafud> gtatemp offline in 3, 2, 1
<Hykem> 8-)
<e135> sweet
<fore4h> yay
<m0m> so today?
<5thplac3> nice one Hykem
<Hykem> yeh before I go to bed
<logger1994> aohdfsdjkfghdkfhgdkfhgdfgkjdhfg
<snafud> awesome

The only network I can imagine this happening is efnet and whois returns nothing for any user in that log except for Hykem himself, so unless you can say what network that happened on otherwise, nice try, mate.

 

[Pachee]

Url blocking through the modem is not an option for me because it blocks access to EVERYTHING nintendo on the network. Means no eshop on the 3ds as well, which is not acceptable for me.

Don't most routers allow url blocking per mac address nowadays? It is like a basic feature.

 

[Aroth]

Don't most routers allow url blocking per mac address nowadays? It is like a basic feature.

I think thats a standard feature of dd-wrt, haven't seen it on basic routers. I'd have to check though

 

[wurstpistole]

Don't most routers allow url blocking per mac address nowadays? It is like a basic feature.

I have a cheap tp-link router and set up a specific address block list of ninty eshop and update servers and can specifically block my WiiU by assessing that block list to the WiiU Mac address. I also block my 3ds with that and unblock if I want to do something update or eshop specific.