Wii Internet Connection Reverse Engineered
AlexTheBeast writes "By packet sniffing his Wi-Fi connection, this hacker has already begun to dig into the internet interactions of the new Nintendo Wii. Basically, by using Firefox and after setting the user agent correctly, anybody can easily browse many WiiShop pages including the WiiShop main page and startup manual. More advanced connections including binary and virtual console downloads are currently in the works. Come join the project."
..when developers play with their Wii.
(Sorry, couldn't resist YAWJ (Yet Another Wii Joke))
biopowered.co.uk - catalytically cracking triglycerides for home automotive use since 2008. Just say no to big oil!
I don't want to sniff out my wii. ;)
-- Rastignac was here.
A decade and a half since I've been sucked into the virtual world, ten years of the Web for everyone and "Zero-day warez" are still the rage.
Not much changes.
So ... what's next?
Will we be getting a news story about a Hacker who had installed the Wiis web-browser on his PC by going to http://www.opera.com/ ?
Apparently Nintendo has caught wind of this and has already set up redirects to the Wii root website from these links.
[End of Line]
It seems that it redirects with links referred from other websites. After putting in the URL manually, I was able to view the pages. Pretty cool stuff.
[End of Line]
Pirates! You are killing our livelyhood! Shame on you! etc etc tec ad nauseum
Once the Virtual Arcade system has been worked out, someone will put up a custom server where you can download the games for 0 points. All you'll have to do is point wii.com (or whichever A/AAA records are needed) to their server.
:/
It seems like this system will be hacked rather easily.
Registered Linux user #421033
Slashdotting the official Wii shopchannel, while people were already complaining about a slow performance? Damn thee in hell!
...Still four weeks till we get Wii's in Australia. :(
:P
You can hardly wait to get some Wii downunder.. I knew that you guys were suckers for wii...
If it uses Bluetooth as it is supposed to, what is to stop the Wii remote being used on a PC or even a PS3 if you wanted to? What's the point you may ask - well it would make for useful mouse replacement for presentations, or just for couch surfing.
Good news everyone!
:)
By setting-up a squid proxy one could be able to make homebrews appear as games requiring 0 wii points before being sent to the wii, which will gladly accept it as a runnable executable!
Now we just have to reverse engineer the 'Virtual Game Console'. 100 say it will turn-out to be a Mame clone.
Can't wait till the Wii gets released in Europe. Oh my
Besides, we may even be able to stream a divx player using this technique.
..... the fact that this doesn't look like some sort of custom solution that would be forever tied to the hardware. Instead it seems to be very "off the shelf" in nature from what I can see. I'm impressed that Nintendo would go that route. Many companies wouldn't.
This is my opinion. To make sure you don't steal it, it's covered by the DMCA.
I assume the phrase "signed code" has never entered your mind?
Something tells me they learned a few lessons from the DS and WiFiMe.
I really think the Wii and/or the PS3 are going to be hacked to death. They have browsers, neither are experienced here and with Sony in particular, the whole thing seems kinda....rushed(?). I mean, with the media they are fine - people won't be burning blu-ray cheap enough soon enough. One click pirated downloads would be even worse though...it would be much easier. Given the cost & market for the PS3, a hack like this would be instant death for developer support.
Using DNS redirection you can get the Wii to any website you wish. Video
adventure-today.com
Isn't reverse engineering the Wii packets to figure out the proper browser user string a DMCA violation?
Wii was a very good name to choose, just because of how much it sounds like a pet name for the penis.
Here in Finland there used to be a brand of chocolate milk called Jukiuilla. That sounds very, very close to a word which translates best to English as "bloody assrape".
People remembered that brand of milk. It became a hit sensation among teens just because of its name. While other chocolate milks had more benign names, that chocolate milk had a name that stood out. I think Nintendo has managed, intentionally or not, to do the same thing.
I am very surprised we are not seeing them use public key encryption here. If the wii has microsoft's public key, it can send encrypted requests which cannot be reverse engineered unless you are able to guess microsoft's private key. The way around this would be to disasemble the code on the wii. Since they are merely using packet sniffing, the traffic must not be encrypted. If someone were to have bet me if this would have been encrypted, well, I guess I would be out some money about now. Not that it's a bad thing for us, but what is microsoft thinking?? They had to know this would happen, and I can't believe they would sit idle and let it occur.
Though I suppose in a couple months we'll see a "software update" (i.e. they drop the portcullis) and that'll be the end of the tinkering without a screwdriver.
I work for the Department of Redundancy Department.
Something I would like to see someone try is to redirect to a page that contains a movie file format which the Wii supports (like MOV); this could be the easiest way to convert your Wii to a media center extender (with crappy file support).
I assume the phrase "signed code" has never entered your mind?
;)
Well that has never been cracked before
Jumpstart the tartan drive.
Honestly, why would you encrypt this?
Encryption takes overhead. And since every console would have to have the same key (public not private by the way in order to sign a page with something Nintendo would recognize) the key would not remain secret for long - so it would be a bit of development trouble for zero gain.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
This is for FF 1.5 (yeah lame..haven't updated yet, I assume will work for 2.0)
type
about:config
in FF Address bar
right click in window. New->String
use
general.useragent.override
for preferemce name, click ok
use
Opera/9.00 (Nintendo Wii; U; ; 1038-58; Wii Shop Channel/1.0; en)
as string value. click OK. you should now be able to hit the site without a redirect to wii.com
!iiW
coralcdn copy at http://mozy.org.nyud.net:8080/wii/
www.tdobson.net #### Dare to Dream #### blog.tdobson.net
In case anyone here doesn't quite understand the fundamentals of DNS here is how you would do this:
1. On the wireless access point you use to connect your Wii to the internet modify the DHCP server to hand out an IP address on your network for a DNS server.
2. Setup a DNS server at that IP (BIND, Windows DNS, etc)
3. Manually create a DNS entry for the following domain: oss.shop.wii.com
4. Use: 64.233.187.99 (google.com) for the A record
Now when you fire up the Wii and go to the shop channel you should be sent to google.com instead
(Note: I have a Wii but have not tried this yet, I am at work, but I will as soon as I get out of here)
-- Please insert another quarter
Mirrordot Links:
n guage=en®ion=USA=US
u p.html
n guage=en®ion=USA=US&=init
t leId=000100014D414845
This Hacker How to view them
The wii uses a browser to communicate. By emulating this browser with firefox, you can surf the wii shop.
1. Open Firefox
2. Install the User Agent Switcher
The previous tech-recipes on the use of this tool is also killer.
3. Click Tools
4. Click User Agent Switcher
5. Click Options -> Options
6. Click User Agents
7. Click Add
8. Description: wii
9. User Agent: Opera/9.00 (Nintendo Wii; U; ; 1038-58; Wii Shop Channel/1.0; en)
10. Click OK X 2
11. Click Tools again
12. Select User Agent Switcher
13. Select wii
14. Copy and paste one of these links into firefox and visit it:
Main Channel:
http://oss.shop.wii.com/oss/common/vc/W_01.jsp?la
Surf the Manual!
http://209.67.106.203/en_US/html/manual/USA/start
My Nintendo Membership Link:
http://oss.shop.wii.com/oss/common/vc/S_02.jsp?la
Sonic The Hedgehog Page:
http://oss.shop.wii.com/oss/common/vc/B_05.jsp?ti
HTH, Monkeyboi (AC, I'm no karma whore...)
It seems like they have it sort of working. When will they release it? And does this mean we won't be able to use USB keyboards and mice with the browser?
PAT
SEO Test: TIGI und SEBASTIAN - Online Shop - V
Can you buy points directly from within the Wii, put in your credit card number and all? Or do you have to hit a store for the points cards and then redeem them on the Wii?
They'll just update the Wii hardware so that all this will be encrypted.
before I can squirt from my Wii too all the white/brown/black zunes on the block?
So why didn't this article get tagged for the games section? I can see that it's got enough technical detail to warrant being on the front page, but that doesn't mean it shouldn't be part of the games section as well.
This Space Intentionally Left Blank
Redirect to one of your boxes where your Wii downloads custom firmware and a Wii version of XBMC (WiiMC?). Sounds too good to be true. Given a year I might be replacing all my chipped Xboxen with stock Wii's to use as network media players. Got a better input device as standard too!
It hasn't for the DS, why do you think you need to flash your DS firmware before it will accept wireless download homebrew? Because the firmware is required to _skip_ the signature check. For the DS at least, it has never been figured out.
Mr. Period: Nine is the one that's right by ten!
Nine: One day I will kill him. Then, I will be Ten.
If you're sniffing Wii packets and they smell funny, do you take it to the doctor?
No sig for you!!
So what does that make the Piss-3?
Serious question, I always wondered about the MS network.
If that was hacking, then I must be 1337. But seriously, I'm not, and it isn't (though it may be kinda cool).
A new realm of man-in-the-middle attacks. Just redirect the Wii shopchannel to your viral executable, and then reforward the users to the actual wii page. Suddenly you have a rather large, network-connected install base. Now start spamming.
Best of all, can you imagine the pain of having to find a way to remove these viruses? Probably the only option would be wiping your Wii system and reinstalling, with or without your saved games.
IANAL, I have, however, read a copy of the DMCA (don't remember where now, it was a while ago) and was confronted by a rather verbose and byzantine document. By my reckoning, it seems that reverse engineering IS permissible, but under a VERY RESTRICTIVE set of conditions. Foremost being, that you must be doing so for the purpose of developing a UNIQUE, STANDALONE product. Highly suggested to do this under cleanroom techniques with detailed documentation so as to negate the possibility of inadvertently creating an IP infringing product. Reverse engineering packet info, however, if encrypted, is apparently a big no-no.
That said, there MAY be an issue as to HOW those packets are being obtained. If they are being intercepted "straight off the box", you may be looking at a violation not of the DMCA specifically, but of other US copyright and/ or patent laws. OTOH, if they are being broadcast over a wireless connection, (and you may want to check with the FCC handbook on this) it MIGHT be dealt with as any other radio broadcast, in which case, it could be treated as either public domain (very iffy), or fall under fair use provisions, depending on the equipment used to obtain that info. In any case, you're likely playing with fire. I reiterate, I Am Not A Lawyer, so understand that I could be WAY off base on this. Your best bet is to have a lawyer check this out.
I've been looking forward to Wii's release for some time, especially Virtual Console. Flicking through the linked manual, I have a couple of concerns. Check this out:
Typically, Nintendo has been pretty good about continuing support for legacy equipment, but can they really depended on to support and serve the Wii Shop Channel indefinitely? If I have to depend on them for archives of my games, I need a solid answer to this question: 10 years from now, when Wii is just a distant memory, will I still be able to re-download the copy of Goldeneye 007 I had to delete to make space for Star Fox?
The Wii shop uses Apache Tomcat/4.1, as see on it's 401 on page here:
http://oss.shop.wii.com/oss/common/vc/NaN
Now isn't this ironic? All this time Opera changes their user agent to look like IE in order to get in sites that would otherwise block it. now we see Opera used to block everything else on Nintendo. Now aren't you glad that it is Firefox and not the closed source Opera that is gaining ground on Microsoft?
Firefox Power http://firefoxpower.blogspot.com/
Do you get to hear that cool music when shopping via Firefox? =)