Hacking Nintys new copyright protection (BCA)

xdeadxpoolx

Well-Known Member
OP
Newcomer
Joined
Apr 27, 2008
Messages
76
Trophies
0
XP
225
Country
United States
I Just wanted to pass this along for the discussion, maybe not everyone is totally aware of it. OneUp released a .nfo today with this info in it.



Code:
> Wii.ISO.Releases.Will.Need.BCA.Data.ReadNFO.Wii-OneUp.nfo

> NOTICE

ÂÂ> Wii (ISO)

ÂÂ > 2009-12-02

ÂÂ> .nfo release

> http://www.eurasia.nu/modules.php?name=News&file=article&sid=2488

> We would like to bring to your attention the new Anti Piracy Protection 
ÂÂNintendo have started using called BCA (Burst Cutting Area) checking
ÂÂ
--------------------------------------------------------------------------------
modrobert (eurasia): "As you might know by now the protection used in NSMB 
(New Super Mario Bros) for Wii is a BCA check (Burst Cutting Area). Actually 
the drive command 'ReadDiscBca' is old but this is first time it has been used 
in a game to check the disc. In order to avoid cracking each game with this 
protection the BCA data should be collected from the original game disc and 
stored somewhere so it can be handled by either modchips or softmods in a 
proper way. 

For those who wish to load backup games from disc regardless if they have 
modchip or softmodded Wii it might be a good idea to store BCA within the ISO. 
Overburning DVD-R seems to be asking for trouble as some burner firmware can't 
handle it, same goes for certain media. Other backup solutions might benefit 
from doing the check in a separate external file perhaps.

In any case the BCA data is required from the original disc when ripped and 
I think the best way would be to create some kind of standard to deal with it. 
Maybe in the form of a PPF3 patch (with undo data) as I don't think it would be
a good idea to mess with the game dumps directly."
----------------
Note from OneUp: 
----------------
We at OneUp believe the ISO should still be left untouched/unpatched for release 
but due to the fact that BCA checks are now being used, we also believe that it 
is the responsible thing for Wii ISO groups to include this 64 bytes of
BCA data in the form of a separate text accompanying the ISO file

We have included the application uLoader that is capable of displaying
an ORIGINAL Wii games BCA data, once installed follow steps below

1 - Insert ORIGINAL Wii DISC
2 - Click on 'DVD Button'
3 - Click on 'Show BCA Data' Button
4 - Write down your BCA data for release

ÂÂÂÂÂÂÂÂ ...::: Example for New Super Mario Bros. Wii :::...

ÂÂ0000000000000000 0000000000000000 0000000000000000 0000000000000000
ÂÂ0000000000000000 0000000000000000 0000000100000000 0000000000000000

James.Camerons.Avatar.The.Game.PAL.Wii-GLoBAL has BCA data protection but no BCA
data is available.
 

geoflcl

Permanent GBAtemp Newbie
Member
Joined
Jan 18, 2009
Messages
1,375
Trophies
0
Age
28
Website
loganderb.in
XP
501
Country
United States
God, Nintendo, haven't you realized that these aren't fixes, but only inconveniences?
wink2.gif
 

synce

だいこんちゃんのだいふぁん
Member
Joined
Nov 5, 2009
Messages
537
Trophies
0
XP
574
Country
Comoros
Well they're basically just trying to make modding too much of a hassle for people to consider... I put it off for the longest while for that reason, but in the end I just wanted to play Fatal Frame 4 already
wacko.gif


By the way does this even affect those of us with a softmod and something like GX loader? I could play the new Mario day one without issues
 

electrico

Well-Known Member
Newcomer
Joined
Oct 9, 2008
Messages
62
Trophies
0
XP
142
Country
Greece
Now that everything is clear i hope modchip teams build an update for their customers.And that's the reason that wiikey fusion delayed, i think.
 

xdeadxpoolx

Well-Known Member
OP
Newcomer
Joined
Apr 27, 2008
Messages
76
Trophies
0
XP
225
Country
United States
electrico said:
Now that everything is clear i hope modchip teams build an update for their customers.And that's the reason that wiikey fusion delayed, i think.

agreed, isnt this the exact reason that the chips started getting there flash memory?

Edit: Had to throw this in from wasabi page


19th of February 2008

Welcome to our brand new website! After months of hard work we're proud to present what we belive is by far the best Wii modchip out there.

Wasabi is not your typical Wii drivechip. Apart from all the usual features you'd expect from any good chip (including a working built-in GC audiofix), it sets new standards on many points:

* It's the first chip that works on all drives, from DMS to latest D2C drives (including GC2-D1A).
* It's the first D2C compatible chip that is upgradable from DVD.
* It's the easiest chip to install on D2C: only 9 wires, only 3 of them connected to a pin/via.
* It's the easiest chip to install on DMS and D2B as well: No need to use a dremel or super-glue with "cut-pin" drives, and there's no pin/via to solder even with the latest D2B boards.
* It's the first D2C compatible chip that is as clean as DMS/D2B drivechips: full control over the drive's firmware, no physical patching on the lines while the games are running. That means perfect stability, more control, and no stress on the drive's components.
* Best of all, it's the first chip to include a decent amount of flash memory (128KB) for firmware and data storage.


modchip comparison chart


Did you know that current ISO dumpers are currently missing a few KB of data stored in the barcode (BCA) and lead-in area ? This "extra" data could be read by the console and used to detect chips. SMG and SSBB are the first games to call one of the related drive commands, without interpreting the data yet. We take that as a warning. Thanks to on-board memory, the "extra" data of your whole game collection could be stored on the chip itself if that becomes necessary. The flash memory is also used to store the drivecode and could store patches and Wii/GC binaries in the future.

The first batch of wasabi will be shipped to retailers on the second week of March. Have a look at our product page for more info!
 

Cyan

GBATemp's lurking knight
Former Staff
Joined
Oct 27, 2002
Messages
23,719
Trophies
4
Age
44
Location
Engine room, learning
XP
15,431
Country
France
Actual homebrew dumper don't read BCA, so only release group can extract these data for the moment.
I think if backup loaders and modchips start using bca data files, homebrew dumpers and USBloader internal dumpers will add it, right ?


@xdeadxpoolx : Nice catch about Wasabi ! let's see if they make use of it now.
 

techboy

Well-Known Member
Member
Joined
Mar 15, 2009
Messages
1,720
Trophies
0
Age
30
Location
Pennsylvania
Website
Visit site
XP
295
Country
United States
When will N learn that now that piracy has started, stopping it is almost impossible? Adding the anti-piracy after the fact isn't going to help. D3-2 was a step forward, but it's only time before the modchips show up.
If they want to stop most chips, they'd need to make D3-2 units with the whole circuit board potted in epoxy.

The BCA protection took what, a day or two to crack on NSMBW? If we're cracking AP protection in days, and it takes weeks or months for new protection to show up, N is fighting a losing war.
 

damysteryman

I am too busy IRL these days...
Member
Joined
Oct 4, 2007
Messages
1,223
Trophies
0
XP
1,007
Country
Antarctica
I agree.

Software-wise, I think they cannot stop us.

Hardware-wise, I think that a chip is posible, but I don't know why nobody has made a Drivechip for D3-2 drives. Surely there's some way to hack the big D1A chip on the drive motherboard.

As for the BCA data, I hope that the user could write the BCA data to the end of their game's ISO, then have a homebrew loader read it and implement it, in order to load the BCA-protected discs. I've seen a program released by the faltmii guys which writes the BCA data to the end of an ISO, now we need a way to implement it, that way we don't have to patch and fakesign every future game.

I wonder if anybody could code an app which could read and dump the BCA data while dumping a disc. Maybe somebody could convince wanin to update his cIOS DVD Dumper...

I'm downloading uLoader right now, and I'm going to dump the BCA data for every legitimate game I come across. I'll start with my Legit games, then I'll probably borrow some from friends, then I'm going to upload the bca data I've collected to the internet for all to use.

"Now where'd I put my Wii Sports disc? Wait, I know."
 

hiver

Well-Known Member
Newcomer
Joined
Nov 15, 2009
Messages
46
Trophies
0
XP
67
Country
United States
so with this info now
can an iso with the bca protection be resolved to run the backup dvd .iso of nsmb on a hardmodded wiikey v1 ?
 

gene0915

Well-Known Member
Member
Joined
Apr 6, 2008
Messages
331
Trophies
0
XP
1,216
Country
United States
ringorinfret said:
pretty interesting read...wasabi team saw it coming!!

Before anyone goes and starts sucking Wasabi's dick, remember that this is one of the many mod chip makers who til this day, have not released a firmware update for any of THEIR chips (TTBOMK) that deals with the protection in NSMB. Good thing people PAID for a product with such wonderful support. I think after the SMG stuff, mod chip makers coasted for a while and saw USB loaders taking off and pretty much gave up. Can't blame 'em, who wants to buy a modchip when a Wii can be fully software hacked and made to play games from a USB drive?

I'm not just giving Wasabi shit, out of all the Wii mod chips floating around out there, which ones were quick with a firmware update for NSMB? I think 1 was but I forget their name?!
 

hiver

Well-Known Member
Newcomer
Joined
Nov 15, 2009
Messages
46
Trophies
0
XP
67
Country
United States
I guess what I'm asking since I can make my own 1:1 backup

in future if no update or with an update from wiikey team

will I ever be able to use my wiikey v1 with 1.9s/x update at 4.1u ntsc

and play a backup of nsmb if its patched in some way sorta like a program ?

so like some one can make a crack or patch for an .iso of all the new wii games removing the bca or whatever

enabling me to play my backups once again from a disc with NO homebrew ?? on my wiikeyv1 ?

i just got a modchip to play my backups and now it seems pointless
 

ringorinfret

Well-Known Member
Member
Joined
Mar 10, 2008
Messages
306
Trophies
0
XP
142
Country
United States
da_letter_a said:
I agree.

Software-wise, I think they cannot stop us.

Hardware-wise, I think that a chip is posible, but I don't know why nobody has made a Drivechip for D3-2 drives. Surely there's some way to hack the big D1A chip on the drive motherboard.

As for the BCA data, I hope that the user could write the BCA data to the end of their game's ISO, then have a homebrew loader read it and implement it, in order to load the BCA-protected discs. I've seen a program released by the faltmii guys which writes the BCA data to the end of an ISO, now we need a way to implement it, that way we don't have to patch and fakesign every future game.

I wonder if anybody could code an app which could read and dump the BCA data while dumping a disc. Maybe somebody could convince wanin to update his cIOS DVD Dumper...

I'm downloading uLoader right now, and I'm going to dump the BCA data for every legitimate game I come across. I'll start with my Legit games, then I'll probably borrow some from friends, then I'm going to upload the bca data I've collected to the internet for all to use.

"Now where'd I put my Wii Sports disc? Wait, I know."

i think it is pointless to upload BCA for games that dont use it...so far only NSMB and Avatar are protected this way if I am not mistaken... every other game dont need any BCA
 

VashTS

Beat it, son
Member
Joined
Mar 14, 2009
Messages
4,266
Trophies
1
Age
38
Location
Upstate NY
XP
3,256
Country
United States
Maybe CSI Deadly Intent as well? That game was overlooked cause no one cares about including me, I just like to see things get fixed and learn why
 

damysteryman

I am too busy IRL these days...
Member
Joined
Oct 4, 2007
Messages
1,223
Trophies
0
XP
1,007
Country
Antarctica
@ringorinfret
True. I wasn't thinking about that when I made that post... (lol)

So, I'll dump the BCA for every recent and future game I come across.

@VashTS
I don't have a copy of that game, so I can't help you there...
 

LightyKD

Future CEO of OUYA Inc.
Member
Joined
Jun 25, 2008
Messages
5,444
Trophies
2
Age
37
Location
Angel Grove, CA
XP
4,665
Country
United States
da_letter_a said:
@ringorinfret
True. I wasn't thinking about that when I made that post... (lol)

So, I'll dump the BCA for every recent and future game I come across.

@VashTS
I don't have a copy of that game, so I can't help you there...

to da_letter_a

its a bit off topic but I couldnt help to ask. Will we be seeing a version of cIOSCORP that will use cIOS rev 15. Im asking because NSMB the patched version shows on the disc channel but loads to a restart b/c cIOSCORP 3.5 uses cIOS rev 14. I don't want to sound like a nag or a pester, I'm just curious.
 

damysteryman

I am too busy IRL these days...
Member
Joined
Oct 4, 2007
Messages
1,223
Trophies
0
XP
1,007
Country
Antarctica
Nope. rev15 causes 001 error for pretty much everything I throw at it.

Which patch are you using? the old one, when the game was first released? If so, that's why. That old patch doesn't work with softmods. Use the newer nsmbxy ppf patch by vki. You'll find the link to the patch in my sig.
 

You may also like...

General chit-chat
Help Users
  • Veho @ Veho:
    "OFFER ME THE PLANT BASED OPTION ONE MORE TIME I DARE YOU MOTHERFUCKER"
    +1
  • K3N1 @ K3N1:
    FUCK YO SIGN
    +1
  • K3N1 @ K3N1:
    CNN: Man shot over wanting a McChicken by disgruntled ex-McDonald employee
    +1
  • K3N1 @ K3N1:
    McDonald's later promoted the man to ceo
    +1
  • M4x1mumReZ @ M4x1mumReZ:
    The McChicken is great.
  • Veho @ Veho:
    Yet another Anbernic.
  • K3N1 @ K3N1:
    @Veho, Seen the Arduboy Mini?
    +1
  • M4x1mumReZ @ M4x1mumReZ:
    I've heard of the Arduboy.
  • M4x1mumReZ @ M4x1mumReZ:
    Didn't know a Mini one is out.
  • Veho @ Veho:
    Interdasting.
    +1
  • Veho @ Veho:
    But it doesn't have a speaker or battery.
    +1
  • M4x1mumReZ @ M4x1mumReZ:
    Guess you could fit one in there.
  • Veho @ Veho:
    The contacts are there, and the device already has charge control circuitry, but you have to buy and solder the battery yourself.
    +1
  • Veho @ Veho:
    And that's too fiddly for ole' butterfingers over here.
    +1
  • Veho @ Veho:
    Gimme a finished product please.
    +1
  • Veho @ Veho:
    No rough edges either, I might hurt myself.
    +1
  • M4x1mumReZ @ M4x1mumReZ:
    Nah, I can do it within a few mins.
  • Veho @ Veho:
    Well yes, I suppose you can, but I can't.
    +1
  • M4x1mumReZ @ M4x1mumReZ:
    If it has a USB port, then you could perhaps try connecting a power bank.
  • Veho @ Veho:
    It has USB-C.
    +1
  • M4x1mumReZ @ M4x1mumReZ:
    That should be alright.
  • K3N1 @ K3N1:
    Well that was an owie hit my hand on the oven
  • M4x1mumReZ @ M4x1mumReZ:
    Hope you're alright there
  • K3N1 @ K3N1:
    I enjoy the pain
    +1
    K3N1 @ K3N1: I enjoy the pain +1