Homebrew SigHax Updates and Discussion Thread

[adrifcastr]

I did, I was there, and I can tell that FW signing is NOT exploiting the bootrom

It isn't

fine then you proved my whole thread a lie so I´ll shut my mouth then................

 

[metroid maniac]

Uh, no it isn't? A patch for FW signing isn't a bootrom exploit, a bootrom exploit is exploiting the bootrom.

It *is* exploiting the bootrom. The bootrom's signature checking code contains bugs and these bugs allow you to create a fake signature that the bootrom (and only the bootrom) will accept.

 

[DarkGabbz]

fine then you proved my whole thread a lie so I´ll shut my mouth then................

finally...

 

[KevinX8]

No, it isn't... SigHax is a bug exploiting the bad RSA encryptions made by Nintendo allowing us to sign our own firms. This COULD be used to dump bootroms though.

it's an exploit, it TAKES ADVANTAGE OF THE VERY VULNERABILITY YOU DESCRIBED this makes it an exploit!

 

[Kingy]

fine then you proved my whole thread a lie so I´ll shut my mouth then................

Calm down, I was just saying a few words are wrong, this thread could be useful.

 

[zoogie]

I did, I was there, and I can tell that FW signing is NOT exploiting the bootrom

It isn't

It's the bootrom's job to read the RSA sig so it exploits a flaw in how the bootrom reads sigs.

The fact that the exploit is unpatchable points to the fact it's a bootROM exploit.

 

[Kingy]

it's an exploit, it TAKES ADVANTAGE OF THE VERY VULNERABILITY YOU DESCRIBED this makes it an exploit!

But it isn't a bootROM exploit

 

[cheuble]

Hoo boi, I'm going to like this thread! *grabs popcorn*

 

[metroid maniac]

No, it isn't... SigHax is a bug exploiting the bad RSA encryptions made by Nintendo allowing us to sign our own firms. This COULD be used to dump bootroms though.

The bad signature parsing code is contained in the bootrom.

Also, no you can't. SYSCON9 locks the bootrom in rom and it clears itself from ram before jumping to NFIRM.

 

[KevinX8]

But it isn't a bootROM exploit

It takes advantage of a vulnerability in the bootrom, what would you decribe it as an exploit of then?

 

[Kingy]

It takes advantage of a vulnerability in the bootrom, what would you decribe it as an exploit of then?

It's possible with the bootrom, but it does not exploit the bootrom itself.

 

[adrifcastr]

Calm down, I was just saying a few words are wrong, this thread could be useful.

thanks, well then just tell me what I have to correct and I´ll do

 

[xtheman]

So arm9loaderhax is obsolete then?
Basically Yes. But you will probably need it to install SigHax when it is released.

Your not going to need a9lh. Only a way to right to nand. You could directly install sighax on any firmware with a hardmod or dsiware.

 

[adrifcastr]

Your not going to need a9lh. Only a way to right to nand. You could directly install sighax on any firmware with a hardmod or dsiware.

and the next one okay I´m gonna really shut my mouth now..

 

[zoogie]

No, it isn't... SigHax is a bug exploiting the bad RSA encryptions made by Nintendo allowing us to sign our own firms. This COULD be used to dump bootroms though.

THAT RSA CODE IS IN THE PROTECTED BOOTROM

Good. God.

 

[BL4Z3D247]

overclocking the dual core 268mhz arm11 cpu isn't confirmed to be stable, it may only be able to handle a few mhz above its stock speed and it will only have meager returns, it wouldn't make any difference in games that run like crap.

Ah, gotcha. I didn't know it was unstable, just thought it wasn't limited due to restrictions. Thanks for response(s).

 

[adrifcastr]

THAT RSA CODE IS IN THE PROTECTED BOOTROM

Good. God.

SO AM I RIGHT NOW OR NOT?

 

[KevinX8]

SO AM I RIGHT NOW OR NOT?

SIGHAX is a bootrom exploit but you don't need a9lh to install it just full NAND access

 

[metroid maniac]

SO AM I RIGHT NOW OR NOT?

You're at least correct about it being a bootrom exploit.

 

[adrifcastr]

SIGHAX is a bootrom exploit but you don't need a9lh to install it just full NAND access

updated the op and thanks