Hacking New Update Is Live

[sphere9]

wat if you went and did the twilight hack yourself? like playing the game to the point where you can do the hack would that work?

Unfortunately not. The reason it works is that they gave the horse a stupidly long name which causes the game to crash. You need to edit the savegame to have a twilight hack style exploit.

Of course, I'm sure there are other games they can exploit.... and maybe even a patcher - where you dump your own game, the patcher turns it in to twilight hack but maintaining your original signing. Something will emerge - but for now, I'm sticking with 3.2E.

thats the kind of program i was imagining, i can only hope it comes soon...

 

[teq]

Well, technically, any game can be exploited in a similar fashion.

If they control the saves via MD5 signing, though, it's going to be difficult to make something generic.

 

[Vidikron]

I need one thing clarified for me... does the HBC still work after the update if you installed it before the update?

 

[LagunaCid]

I need one thing clarified for me... does the HBC still work after the update if you installed it before the update?

From what I've heard, yes.

 

[ProdigySim]

If they control the saves via MD5 signing, though, it's going to be difficult to make something generic.

There's no such thing as MD5 signing.

And if they start signing saves individually on each console, it's going to piss of people who want to copy their saves from wii to wii, which is currently allowed. Worst case: Your wii dies and you have to get another, and now you can't use all your save files you backed up.
Nintendo won't implement save signing beyond the shared-secret style saving they're using now.

 

[teq]

If they control the saves via MD5 signing, though, it's going to be difficult to make something generic.

There's no such thing as MD5 signing.

And if they start signing saves individually on each console, it's going to piss of people who want to copy their saves from wii to wii, which is currently allowed. Worst case: Your wii dies and you have to get another, and now you can't use all your save files you backed up.
Nintendo won't implement save signing beyond the shared-secret style saving they're using now.

Uh, right...

There's no such thing as MD5 signing... what do you think MD5 is?

The Guitar Hero III save can't be backed up and you don't think they've already controlled saves? Give me a break...


They're going to do whatever they can to curtail cheating. Using a hacked Mario Kart save to unlock Mii racers and the golden wheel was just plain rediculous.

 

[TSPhoenix]

The fact that multiplayer games have unlockable characters is ridiculous.

 

[Tio BOB]

Quick question: will scrubbed games still work?

 

[SenorClean]

Depends how they are scrubbed.... so long as they aren't trucha signed, they should be fine.

 

[matthewn4444]

So if the hacked vc's still work, I'm assuming wiiware and other homebrew channels work too? And thanks for these messages, good thing I haven't updated yet.

I would also like to know if the saves from different regions will work.

 

[ProdigySim]

Uh, right...

There's no such thing as MD5 signing... what do you think MD5 is?

The Guitar Hero III save can't be backed up and you don't think they've already controlled saves? Give me a break...


They're going to do whatever they can to curtail cheating. Using a hacked Mario Kart save to unlock Mii racers and the golden wheel was just plain rediculous.

It's a hash, not a signature. What do you think a signature is?

GH3, SSBB, and Mario Kart Wii can't have their saves backed up because the games set different permissions on the save data themselves--disallowing the Wii System Menu access to it. If you use Waninkoko's Save Extractor (which hooks in to an inserted discs's credentials, giving it permission), you can successfully extract any save and put it on any Wii. There is no REAL control in place to keep saves from being copied.

Edit: To answer above, and for all YES, all INSTALLED channels should be WORKING. And although I haven't heard any reports, based on what Nintendo has said and what I've heard I don't think foreign saves are affected.

 

[teq]

The fact that multiplayer games have unlockable characters is ridiculous.

The list goes on:

+ No online community.

+ Miis are virtually useless.

+ Opera browser has an outdated version of Flash.

+ Mario Kart has a leaderboard but Brawl doesn't(really, what's up with that?).


Not to mention, I'm still bitter for MP3 not having multiplayer, when they managed to have it on the DS version.

 

[teq]

It's a hash, not a signature. What do you think a signature is?

The better question is: What do you think a hash is?

Cryptography is cryptography...


Get off your high horse.

 

[jservs7]

I cant wait to see how much more loving this thread will be once a solution is discovered.

 

[lolsjoel]

Quit bickering.

 

[ProdigySim]

It's a hash, not a signature. What do you think a signature is?

The better question is: What do you think a hash is?

Cryptography is cryptography...


Get off your high horse.

I think a hash is a way of identifying a file, and is a one-way cryptographic technique. MD5 hashes are used for passwords in databases because it means that the passwords are not actually stored, nor recoverable, but it can be reliably known that a user has provided the correct password by computing an MD5 hash of the password and checking it against the one stored in a database.

If, as you suggest, Nintendo decided to "encrypt" save data with MD5, the data would not be recoverable. Nothing could read the save data. That would kind of ruin the point of it being "save" data.

 

[littlestevie]

It's a hash, not a signature. What do you think a signature is?

The better question is: What do you think a hash is?

Cryptography is cryptography...


Get off your high horse.

a hash is a sum of the bytes its a version of a checksum.
a signature is a password that everything (sometimes hashes) are signed with.
MD5 sums can be signed to make the signature but MD5 itself isnt anymore then
a glorified Checksum (checksums can be fooled MD5 not so much as it is a sum of
all data that can be worked out independant of the file as well)

MD5 is not cryptography

a signature is

 

[HowardC]

Just using logic about the scope of what is practical for them to do, this isn't as big a deal as everyone is making it. Just to go down the line of what this update supposedly does and the solutions we already have at our disposal....

1. Removes hacked saves, making the tp exploit impossible. Well a couple of things regarding this.

First off at this point you should already have the homebrew channel installed and afawk this update does NOT effect any installed channels. I pitty anyone who hadn't but for most of us this isn't a big deal. So that part of it will only start to hurt once new wii's come shipped with the latest firmware (a loong way off I imagine). Secondly, keep in mind that it is pretty impossible to do what some are speculating, namely "block all hacked saves" unless something is glaringly wrong with the save, there is no way for nintendo to detect hacked saves. Obviously they can check for specific saves, like the tp exploit and can, if they REALLY want to wear themselves out, check all nintendo brand games for invalid data, but it would be impossible to check all games for all kinds of hacks, especially third party games.

Also on a somewhat related note, the few games that don't let you transfer saves have nothing to do with nintendo or security issues. It's simply a flag that can be set in the save (how I dunno) to prevent it from being copied. Generally this trick is used by third parties to make up for sloppy programming, the prime example being metal slug anthology, which is "locked" because the save itself is a glorified windows INI file, meaning it's full ascii and fully commented and anyone with acess to it could easily "hack" it to unlock everything. (I have btw, it's as simple as changing some settings).

2. Removes trucha bug.

Do we really need trucha at this point? Proper rips don't use it, only modified discs and programs. While having that feature would be nice, it isn't the end of the world to lose it, especially considering that you need a modchip to use trucha discs and thanks to the flash dumper app you can get your own personal wii's key, thus eliminating any issues with VC/Wiiware and Homebrew channels, assuming of course you are willing to use the legit sig and someone writes an app to inject it easily (which I'm sure will happen once we are forced to all use this update).


So don't panic. Trucha was never meant to last anyway and exploits are FAR from impossible, especially now that thanks to the homebrew channel, devs have access to the wii's filesystem for study. All that would be required to get a new exploit working would be a third party title and some time.

 

[teq]

a hash is a sum of the bytes its a version of a checksum.
a signature is a password that everything (sometimes hashes) are signed with.
MD5 sums can be signed to make the signature but MD5 itself isnt anymore then
a glorified Checksum (checksums can be fooled MD5 not so much as it is a sum of
all data that can be worked out independant of the file as well)

MD5 is not cryptography

a signature is

Uh... you're not too familiar with cryptography, are you?

MD5 itself describes an algorithm for producing hashes, which are aptly named MD5 sums.

MD5 sums are: A) hashes(as they're formed from tables), and B) signatures used in cryptography.

 

[cracker]

I don't have a Wii but I had to read this thread out of curiosity of what is going on.

Has anyone tried hex editing the exploited TP save in case it is as simple as an MD5/CRC check? Just change something that you know won't break the exploit -- text.