Changes

100 bytes added ,  02:42, 3 August 2021
Inverse use of DI bug β†’β€ŽIOS
Line 183: Line 183:  
| On [[Wiidisc|Wii discs]], the title ID is present several times; once in the header, once in the TMD, and once in the [[ticket]]. While the latter two are coverer by a signature and therefore cannot be changed, the instance in the disc header is not, and is instead used by the [[System Menu]] to determine things such as refusing to boot the [[Wii Startup Disc]]. Although it does not make sense for this to be signed, it is nonetheless a flaw because it could have been compared to the value in the TMD.
 
| On [[Wiidisc|Wii discs]], the title ID is present several times; once in the header, once in the TMD, and once in the [[ticket]]. While the latter two are coverer by a signature and therefore cannot be changed, the instance in the disc header is not, and is instead used by the [[System Menu]] to determine things such as refusing to boot the [[Wii Startup Disc]]. Although it does not make sense for this to be signed, it is nonetheless a flaw because it could have been compared to the value in the TMD.
   βˆ’
This could be used to load the Wii Startup Disc a second time by changing the title ID, but the more practical use is to change a game's ID to start with a 0 or 1, and therefore boot with a [[SaveMii Dongle]].
+
This could be used to load the Wii Startup Disc a second time by changing the title ID (or load a different disc on the [[Startup Disc Menu]], which is already possible with fakesigning), but the more practical use is to change a game's ID to start with a 0 or 1, and therefore boot with a [[SaveMii Dongle]].
 
| Autobooting of any disc without fakesigning
 
| Autobooting of any disc without fakesigning
 
| Unfixed
 
| Unfixed
5,579

edits