News
Wii Firmware Update Disassembling Galore (Wii misc)

News directly from Bushing, one of the guys behind the Twillight Hack:

Several pieces of Nintendo system software have been updated:

====== Titles Changed ======

SystemMenu
Title ID: 00000001-00000002
Version: 0x 161
Size: 23511040
Contents: 9 (of which 6 are shared)

IOS30
Title ID: 00000001-0000001e
Version: 0x a10
Size: 1933312
Contents: 15 (of which 14 are shared)

IOS31
Title ID: 00000001-0000001f
Version: 0x a10
Size: 1933312
Contents: 15 (of which 14 are shared)

bc
Title ID: 00000001-00000100
Version: 0x 4
Size: 98304
Contents: 2 (of which 0 are shared)

mios
Title ID: 00000001-00000101
Version: 0x 8
Size: 262144
Contents: 2 (of which 0 are shared)

Channel ‘HACA’
Title ID: 00010002-48414341
Version: 0x 5
Size: 8290304
Contents: 7 (of which 3 are shared)I’m currently disassembling these to see what has changed. Please do not pester me about this or ask what our response will be; this isn’t exactly easy or quick. Comments will be enabled once i’ve completed my analysis.

Update 1: IOS30 and IOS31 have been changed – specifically, the kernel. The old timestamps read:

$IOSVersion: FFS: 06/08/07 18:10:10 64M $
$IOSVersion: ES: 07/10/07 18:11:26 64M $
$IOSVersion: IOSP: 06/25/07 14:17:16 64M $The new timestamps read

$IOSVersion: FFS: 06/08/07 18:10:10 64M $
$IOSVersion: ES: 07/10/07 18:11:26 64M $
$IOSVersion: IOSP: 04/03/08 19:37:33 64M $It’s interesting that Nintendo bothered to update the IOSP timestamp, because the only change I see in IOSP is that the version reported changed (there’s a variable that stores the value “040308?). They’re trying to be clever; the actual bug fix was in ES, where the encryption code lives.

The strncmp signing bug has been fixed in IOS30, which is what the system menu uses. (The new signature-checking code is identical to that in IOS37.) This probably means that it will no longer boot Trucha-signed discs, but I have not yet tried it. Early reports on IRC indicate that the Homebrew Channel still works; this is consistent with my understanding that the system menu does not verify the content of already-installed content.

I don’t know why IOS31 was patched.

Update 2:
Okay, now this is just silly. Three functions have been added to the system menu. Guess what they do:

ipl::utility::ESMisc::DeleteSavedata((unsigned long long, EGG::Heap*))
ipl::utility::ESMisc::VerifySavedataZD((unsigned long long, EGG::Heap*))
WADCheckSavedataZD
We Are Not Impressed.

Update 3:
They wrote a special-purpose function to try to check for the exact exploit we used – specifically, if a savegame is for Zelda, it checks the length of 6 strings inside the savefile (two of which are the player name and horse name). It repeats this check for all 3 saveslots, and then another three times for all 3 backup slots.

No, we do not have a response to this yet; we will probably take a few days to formulate one. I predicted Nintendo would *not* do this; I’m disappointed. This was the first bug we found, in the first game we tried. We’ll find others, and they’ll have to try to catch up to each.

I’ll open up comments, but please only post if you have something constructive to say.

Update 4:
It’s interesting to look at the timestamps here. The System Menu has a build marker of “systemmenu.rvl.0803060727? – yes, that’s March 6, 2008, 07:27. This update to the menu only accomplished one thing, as far as I can tell – the blocking of the TP hack. (I guess we can count the IOS30 patch together with it.) They spent 3 months testing it – this isn’t actually that surprising, when you consider the potential financial damage if they roll an update out that bricks Wiis.

Congrats to tmbinc and tehpola for finding a combination of two bugs in the code that Nintendo added that — when combined – allow us to fool their check into ignoring the TP hack. More info will be forthcoming – I still wouldn’t rush to update my system, anyway.

This still leaves the issue of how to deal with IOS30; there are several different ways to deal with this — some of which have already been released by people – and we’ll need to take some time to decide on the best one to use and test it thoroughly. There’s no urgency here, no need to rush into something.

http://hackmii.com/2008/06/june-16-wii-update/

By with 0 comments
Xump DS (NDS Game)

Psilocybindev’s puzzle game Xump has been ported over to the Nintendo DS by a bunch of french guys. It features all 32 levels of the orginal version plus 32 news ones, but comes with modified graphics.

Original Version by: Kedo (Code), Kojote (Levels, Graphics), NE7 (Music)

NDS Version: Kukulcan (Code), Lobo (GFX), Additional Levels (Kukulcan, Lobo, Cid2Mizard)

Thanks to http://www.nintendomax.com for the news.

PS: Kukulcan please change the MUSIC CREDITS to NE7 😉

http://kukulcan.palib.info/index.php?page=detail&num=72

By with 0 comments
Kakuro Nichiyou PSP v1.2 (PSP Game)

With Kakuro Nichiyou PSP 1.2 you can play and let the solver solve Kakuro Puzzles on your PSP.

Features:

254 hand-picked/created Puzzles (20 new since version 1.1) from Puzzlemakers all over the world.
Permission granted by Otto Janko, a great Puzzle collector visit his website
Play Kakuros by setting numbers in the free fields, you can even make “notes” in each field (small numbers from 1..9)
save your current progress to one of 20 different save slots
The current state of the built-in solver is the ability to solve 223 out of the 254 Puzzles completely. It cannot find a solution for the other puzzles but gives you the found notes of the remaining fields (or maybe just a good laugh =D)
4 graphics themes for you to select (thanks to Dargo)

Thanks to MK2k, the author himself, for the news.

http://mk2k.net/serendipity/index.php?/archives/18-Kakuro-Nichiyou-PSP-1.2.html

By with 0 comments
PSP Hardware Alarm Interface I v1.3.359 (PSP Application)

This is an Alarm application which utilizes the PSP’s Hardware Capabilities to set an Alarm that will wake up the PSP from either Sleep Mode or Powered Off (standby) mode. It is compatible with ALL PSP’s including Slim & Light. Comes with an Easy to Use and Intuitive GUI design.

Main features:

+ Runs on both 1.xx & 3.xx Kernels – Compatible with both PSP 2000(Slim & Light) & PSP 1000(Classic)
(No need for 1.5 Kernel addon or 1.5 Fw (but also works in that)(The main purpose this was coded in 1 week)
+ Sleep Mode Alarm with support for custom MP3 Audio file.
+ Power Off Mode Alarm that plays sound in XMB. (Plugin Required – Seperate Package)
+ Uses 12 Hour Time system (AM/PM), no more Confusing time conversions
+ Display’s Hour’s and Minutes remaining as the Alarm time is being set; updated in real time.
+ Alarm can be set up to 23 hours 59 minutes in future, Check for (Invalid – Readjust message).
+ Alarm Accurate to the Second.

http://forums.qj.net/showthread.php?t=141478

By with 0 comments
Modo (16-06-2008) (PSP Application)

Modo is a ultra simple mod player for PSP. It does not only support .mod but also other tracked formats.

Changes:

Upgraded to libmpg123 1.4.3. Fixes crash because of invalid ID3 tags
Fixed volume boost. First boost level did nothing.
Improved MED playback. Instrument transpose value taken into account.
Added option to enable shuffle at startup. See included file modo.cfg.example.

http://forums.qj.net/showthread.php?t=115671

By with 0 comments
Weather Wallpaper v0.3 (PPC Application)

Weather Wallpaper is a mortscript that changes S2U2 wallpaper based on current weather condition. Now there is support for Weatherpanel, HTC Weather, and the original Yahoo feed (based on notiweather script).

http://forum.xda-developers.com/showthread.php?t=390841

By with 0 comments
Slide2Unlock2 v1.05 (PPC Application)

S2U2 (Slide2Unlock2) is a simple lock/unlock application which has the iPhone style slide unlocking. It can be used as a screensaver while you don’t use your device. And it’s has a CallerID function (but some devices may not work, so please try it first); and S2P control plugin.

Although S2U2 is now called v1.03, it doesn’t mean it can be run perfectly on your device. Thanks to different devices produced by different vendors. So, please test it before use it everyday, especially the CallerID function.

Changes:

– fixed the bug introduced in v1.02 that the clock did not update occasionally on device wake up;the idle time out occasionally malfunction; and the wallpaper did not change occasionally.
– the total unread count for FlexMail now reads to a maximum of 10 storages.
– fixed the bug that displayed night icon for Spb Weather.
– fixed the bug that some devices could not run probably on landscape mode.
– added support to RealVGA.
– added support to WVGA & WQVGA.
– some minor bugs fixed.

http://forum.xda-developers.com/showthread.php?t=381588

By with 0 comments
SmallBall in Changeland v1.0 (GP2x Game)

One day when Smallball woke up he discovered that Nasties had stolen all of his friends happyspirits! Without the HPs all of Smallballs friends was as braindead as zombies! Gather all of the HPs before the Nasties gets you too! But beware, you are in changeland where natural laws change constantly!

Try to gain as much points as possible while navigating around enemies. Controls will change now and then making it much harder than it seems. Ultra-fast gameplay, some neat graphic effects and catchy music is the premise of SmallBall in Changeland.

http://archive.gp2x.de/cgi-bin/cfiles.cgi?0,0,0,0,27,2626

By with 0 comments
Tetris 3DS v1.2 (NDS Game)

Antonio Nino Diaz has updated his 3D Tetris game “Tetris 3DS”.

http://www.elotrolado.net/hilo_homebrew-tetris-3ds_1021145

By with 0 comments
DSMCU (NDS Application)

DSMCU implements the most important parts of the MCU mix protocol. It talks to audio workstation software (mainly tested with Reaper PC + allegedly Mac, may possibly work with other apps) over WIFI via DSMI. (i.e. mix + record arm from your couch.)

Video in action: https://www.youtube.com/watch?v=eAvvl1U9K5E

http://forum.gbadev.org/viewtopic.php?t=15687

By with 0 comments