WiiLi.org

[cboomf]

but if the encryption key is hardware encoded then it wouldn't be possible for ninty to update it and there for the homebrew can continue

[harpo]

The encryption key can't possibly be managed ONLY by hardware, because then it wouldn't be necessary to store it into the console's memory (and therefore it wouldn't have been possible to get a hold of it with a memory dump).

The good part is, nintendo can't possibly drop the leaked keys out of the console with an update, because all games encoded with this key (meaning all games already sold) would become unusable. Anyway, just as a precaution, it would be a good idea not to upgrade the wii's firmware until we know more about how the exploit works and what nintendo may be doing to prevent it from being used.
Anyway, any homebrew software created with these keys would still need a modchipped console in order to boot the cd.

Nintendo's bet would probably be in offuscating and isolating some parts of the hardware, so as to make it harder to place a modchip in newer consoles (just as they've been doing for now, just harder).

On second thought, they could patch the exploit, issue new encryption keys and make a list of the games which have been officialy released until now, and mark them as the only titles that can use the old encryption. Then use another method (p.e. md5 of a certain region of the disc, maybe regions of code) to identify the game as one of the old ones. This way, only games passing the code check would be allowed to use the currenly leaked keys.

By the way, the exploitability of the console, if the community writes proper software and turns the console into a full-blown computer, will only make the console all the more popular. Taking aside the legal consequences of their console being exploitable, which could bring trouble with nintendo's business customers, having a console which, aside from gaming, can be used for so many things would boost nintendo's sales.
They wiin, we wiin, and (almost) everyone has something to celebrate for new year.

[Tysoe_J]

Wii users;
here's the deal as far as I know:

In pressed Wii games, there are two values that are put together to make the on-the-fly decryption key with which the Wii can actually execute the game.
One in on the security ring of the manufactured disc, and one is stored by every Wii to decrypt data (the static key). What's happened here is they've got the "Lego Star Wars" game key simply from the disc, and they've got the FULL ("master") key used to decrypt ONLY Lego Star Wars game through dumping Wii memory (this was done by disabling some of the ATi bridge that locks out the RAM during Gamecube mode).

Now, this resulted in the "master" key for Lego Star Wars, and the "disc auth" key for it too. Reverse engineering this resulted in the generic Wii data key, thus allowing them to burn their own data under the disguise of LSW. Then, of course, a drive modchip was needed cos they can't press their own discs...

STILL, that's what's going on... Nintendo wouldn't be able to patch this with a firmware update. They'd have to change hardware keys and most DEFINITELY fix up the ATi lockout bridge too.

Treat this as speculation for now, but this is everything I've gathered from the horse's horses' mouths

[HolyGrail]

Did anybody of you guys watch the lightning talk of bushing and friends @ 24c3?

[tuxido]

[fortunzfavor]

teksheen

[thethirdmoose]

why didn't he use DVD-RW?