boot1 is the second stage of the Wii’s bootloader. It lives at the beginning of flash; it is encrypted by AES, using a fixed key. It is hashed using SHA1, and verified against a hash that is burned into OTP memory inside the Hollywood during manufacturing. Therefore, boot1 can be changed in a Wii before […]
Entries Tagged as 'Wii'
boot1
June 15th, 2008 · 13 Comments
Tags: Wii
factory
June 14th, 2008 · 36 Comments
Something that has caught my obsession has been the question — How are Wiis made? Specifically, after the parts are soldered down, how are they programmed? There do not seem to be any data ports which could be used to upload data, nor download output. (My motivation here, of course, is that we might be […]
Tags: Wii
boot0 / skyeye
June 12th, 2008 · 8 Comments
(This is a continuation of boot0) One of the medium-to-long-term projects that Marcan and I have been working is hacking Skyeye to get it to emulate the Starlet. I don’t think will ever be useful as more than a tool for debugging the lowest-level hacks to boot2 that we plan to attempt, but it’s neat to […]
Tags: Wii