Post AWNHvej6nSFV20RJ2G by siguza@mastodon.social
 (DIR) More posts by siguza@mastodon.social
 (DIR) Post #AWMeLO1bWGGOavnyZE by zhuowei@notnow.dev
       2023-06-05T00:25:41.914652Z
       
       0 likes, 0 repeats
       
       Install the beta on your daily driver
       
 (DIR) Post #AWN4zahcOvY8IzHwjg by saagar@federated.saagarjha.com
       2023-06-05T05:22:57.123635Z
       
       0 likes, 0 repeats
       
       @zhuowei Always.
       
 (DIR) Post #AWN4zbdOw5lpCCK5nk by zhuowei@notnow.dev
       2023-06-05T05:24:17.666360Z
       
       0 likes, 0 repeats
       
       @saagar (extremely "You're up to something" voice)
       
 (DIR) Post #AWN54MXwSbgfqh2OkS by zhuowei@notnow.dev
       2023-06-05T05:25:10.392791Z
       
       0 likes, 0 repeats
       
       @saagar Didn't you lose an iPhone SE from that?
       
 (DIR) Post #AWNHvej6nSFV20RJ2G by siguza@mastodon.social
       2023-06-05T07:47:08Z
       
       1 likes, 0 repeats
       
       @zhuowei ...so I don't have to.
       
 (DIR) Post #AWNHvfUbwqFLPKfF4q by zhuowei@notnow.dev
       2023-06-05T07:49:14.225726Z
       
       0 likes, 0 repeats
       
       @siguza But we need you to install the new build and look for Psychic Paper 2: 2 Psychic 2 Paper
       
 (DIR) Post #AWNu6XFcjAABI2GMAS by Rairii@haqueers.com
       2023-06-05T08:34:24Z
       
       0 likes, 0 repeats
       
       @zhuowei @siguza the mac/ios psychic paper was already the second use of the name for a fakesigning bug, i used it for a fakesigning bug in the ique player first, although i never did implement it
       
 (DIR) Post #AWNu6XxE732dTGfB8C by zhuowei@notnow.dev
       2023-06-05T14:57:00.665857Z
       
       0 likes, 0 repeats
       
       @Rairii @siguza ... did the iQue use strncmp as well?(If it did, don't tell me: please don't drop 0day for a 20-year old console)
       
 (DIR) Post #AWNuMN7QAP5aUxyfia by Rairii@haqueers.com
       2023-06-05T14:59:02Z
       
       1 likes, 0 repeats
       
       @zhuowei @siguza no, it used memcmp actuallyat some point during the development of the Wii, the person at broadon who wrote their "secure coding guidelines" changed it to strncmp for some reason lolit's not a 0day, it's publicly disclosed. http://www.iquebrew.org/index.php?title=IQue_Player_System_Flaws
       
 (DIR) Post #AWNuWlVoKNFh36LF8y by zhuowei@notnow.dev
       2023-06-05T15:01:45.085200Z
       
       0 likes, 0 repeats
       
       @Rairii @siguza ... this is the exact same bug as the Fugu15 CoreTrust Fast Path fakesign
       
 (DIR) Post #AWNuj4hYo70o2UhttA by zhuowei@notnow.dev
       2023-06-05T15:03:58.703451Z
       
       0 likes, 0 repeats
       
       @Rairii @siguza (All right; maybe not exactly the same: CoreTrust _never_ checked the certificate root; iQue at least tried)
       
 (DIR) Post #AWNvfpmpu6q4roC3O4 by Rairii@haqueers.com
       2023-06-05T15:05:06Z
       
       0 likes, 0 repeats
       
       @zhuowei @siguza it was broadon's first attempt at a "secure" console, and their second attempt at providing console security (the Wii) wasn't much better
       
 (DIR) Post #AWNvfqVVE2ZH6L5j0a by zhuowei@notnow.dev
       2023-06-05T15:14:35.217188Z
       
       0 likes, 0 repeats
       
       @Rairii I feel like the Xbox 360 was the first console with actually competent security.(Atari 7800: "am I a joke to you?")
       
 (DIR) Post #AWNw5jUbvYW8sM1Awq by Rairii@haqueers.com
       2023-06-05T15:17:04Z
       
       1 likes, 0 repeats
       
       @zhuowei to be fair the iQue Player lasted 15 years but that's mainly because nobody cared
       
 (DIR) Post #AWNwWxpYjAFpA8njxA by Rairii@haqueers.com
       2023-06-05T15:24:00Z
       
       1 likes, 0 repeats
       
       @charlotte @zhuowei yeah, and the bootloader bug that finally broke it was also in broadon's code lol