Hacking Wii nand boot C

[stefanox]

dont get your hopes up.

if you brick on a fixed boot1, then you probably deserve it.

a answer from a sick person,
go play outside and do not mess if big people a talking..

Posts merged

QUOTE(xzxero @ Sep 27 2010, 07:39 AM) dont get your hopes up.

if you brick on a fixed boot1, then you probably deserve it.

a answer from a sick person,
go play outside and do not mess if big people a talking..

 

[wes11ph]

TT means Team Twizzers

bootmii on boot2 is a replacement of official boot2 installed on the nand.

after all the things that they have done on wii (investigating the HW parts and software, many keys have been dump to decrypt nand parts)

they can make a bootmii/boot2 signed like the official boot2 installed on the wii.
(it will load with out the boot1 bug)

the case is, they will be using the wii keys to sign bootmii/boot2 to make it run like the official boot2.

but that would be illegal.

and they don't like it?!.

 

[xzxero]

a answer from a sick person,
go play outside and do not mess if big people a talking..

lol you're the "big people"?
go do some research before starting a hopeless thread.

next you'll be asking about gamecube usb loading and bannerbomb for 4.3

 

[tueidj]

Even if they did have nintendo's private key, how would that be piracy and why would they be against it? The hackmii blog has keys listed all over the place, not to mention various members retweeting the recently discovered HDCP master key.

 

[stefanox]

a answer from a sick person,
go play outside and do not mess if big people a talking..

lol you're the "big people"?
go do some research before starting a hopeless thread.

next you'll be asking about gamecube usb loading and bannerbomb for 4.3

then what are you doing here in the tread,
go play smart to a another topic, here a normal people talking.
sjees

 

[wes11ph]

yes they have listed wii keys in their blog, but.
did they say that "we use ninty keys to make our app run like official"

don't you wonder why they always run application under an exploit?
what do you think? "cboot2"
does it have a ninty's code on it?

 

[tueidj]

Because they don't have the private key, duh.

 

[wes11ph]

Because they don't have the private key, duh.

sure duh?!

 

[stefanox]

Because they don't have the private key, duh.

sure duh?!

haha wes,
its seems that you know where you talking about lol

 

[tueidj]

Wait, let me get this straight: you guys think Team Twiizers knows Nintendo's private key, and your evidence for this is the fact that they have never used it?

That's some awesome logic there.

 

[wes11ph]

Because they don't have the private key, duh.

sure duh?!

haha wes,
its seems that you know where you talking about lol

yes i know

cause "they" have a secret..

 

[stefanox]

Because they don't have the private key, duh.

sure duh?!

haha wes,
its seems that you know where you talking about lol

yes i know

cause "they" have a secret..

haha wes,
lets hope they will share there secret with us, and release a solution to the new boot

 

[giantpune]

what is this boot c? did i miss something?

 

[smf]

TT can make the installation of bootmii on boot2 even if it has a fixed boot1.
if they want to?!
but
they will violate the "TT No to "PIRACY""

They can't, really.

 

[kamins]

Bushing wrote some interesting stuff about the startup disc:
http://hackmii.com/2010/09/insert-startup-disc/
There's a possibility that we don't have to find a new boot1 exploit (if it even exists).
Um, what? What is written there only applies is a specific, very old, never publicly released System Menu is installed on the Wii. And even then, boot1, boot2, the System Menu and the System Menu IOS ALL need to be present and correct. It will not help in any way.


QUOTE

The driving reason is that if we can figure out how Wiis with blank flash chip are programmed at the factory, we could possibly wipe bricked Wiis and fix them.

First paragraph. It is possible that nintendo had a special version of boot2 which loaded an unencrypted nand dump to your console.

 

[Slimmmmmm]

what is this boot c? did i miss something?

Nope

a= pre retail boot1
b= vun boot1
c= not vun boot1

 

[overlord00]

Nope

a= pre retail boot1
b= vun boot1
c= not vun boot1

by "vun" i assume you mean 'vuln'... as in vulnerable...
i only write this to help others try to understand.... not to be a dick or anything.


also, i dont believe TT has the master keys, however, they do mention they dont have it somewhere on their blog, so conspiracy-theorise away...

 

[stefanox]

lets hope bushing or other from TT see this topic and give us a reaction.

 

[lulwut]

this topic makes me want to punch you all in the faces for being complete idiots.

seriously, there is no way for any costum boot2 code to run without a boot1 exploit and i hate to pop your bubble but thats not going to happen again...ever.
good luck finding a bug in software that is only 17184 bytes (or 16,78125KB) and only init nand & hash checking functions.

and changing boot1 is also out of the question since its hash is saved inside the hardware in the OTP (and NO there isn't -ANY- way to change it. lookup the meaning of OTP)

The driving reason is that if we can figure out how Wiis with blank flash chip are programmed at the factory, we could possibly wipe bricked Wiis and fix them.

First paragraph. It is possible that nintendo had a special version of boot2 which loaded an unencrypted nand dump to your console.

no
no
no
and again, no

with blank flash chips he means the stub system menu & ios's that give the "insert update disk" shit since those basicly have NOTHING on them
even less then a brand spanking new wii back in 2006.
in the end they already had the keys written to them and everything so not even a you-fail-for-installing-a-stub-ios brick can be fixed with that.

 

[stefanox]

hmmm to bad, lets hope they found a solution