6 ms·
Since it's HTTP, you shouldn't need to patch the Wii News Channel: you can do all of this in DNS.
by wizzwizz4 9mo ago
Since it's HTTP, you shouldn't need to patch the Wii News Channel: you can do all of this in DNS.
- czk 9mo agoi thought the article was going to go there, just redirecting the host to a self-hosted ip address serving the bin, but i was pleasantly surprised it didn’t! interesting to learn about the patching process and tooling used
- ipython 9mo agoI was just about to say the same thing - why go through all the effort to patch the binaries when you can just redirect the DNS to your own server? Then I saw something about signing with RSA - btw OP, the link doesn't work in your blog - there's some markup issues. But there's no discussion of where the RSA key comes from (just that you create one with OpenSSL). Does the Wii just accept any "signed" content? If so, wow, 2007 was a crazy time...
- CursedSilicon 9mo agoThere was notoriously a bug with the Wii's RSA implementation https://wiibrew.org/wiki/Signing_bug https://wiibrew.org/wiki/Signing_bug
- hn92726819 9mo agoUnrelated, but in that link: > Interestingly, the code continues to check the entire hash after a mismatch. This is a standard practice in cryptography, but maybe not at the time.
- rucury 9mo ago"btw OP, the link doesn't work in your blog - there's some markup issues" Whoops, thanks for catching that! Just fixed it, here is the link just in case: https://github.com/rnegron/WiiNewsPR/blob/11df0e242bb1f4134e61ff0b35587372a5fd0564/utils.go#L20 https://github.com/rnegron/WiiNewsPR/blob/11df0e242bb1f4134e... "Does the Wii just accept any "signed" content? If so, wow, 2007 was a crazy time..." Yup! I suppose they assumed that hard-coding the URL was enough of a safeguard!