Line 183:
Line 183:
| On [[Wiidisc|Wii discs]], the title ID is present several times; once in the header, once in the TMD, and once in the [[ticket]]. While the latter two are coverer by a signature and therefore cannot be changed, the instance in the disc header is not, and is instead used by the [[System Menu]] to determine things such as refusing to boot the [[Wii Startup Disc]]. Although it does not make sense for this to be signed, it is nonetheless a flaw because it could have been compared to the value in the TMD.
| On [[Wiidisc|Wii discs]], the title ID is present several times; once in the header, once in the TMD, and once in the [[ticket]]. While the latter two are coverer by a signature and therefore cannot be changed, the instance in the disc header is not, and is instead used by the [[System Menu]] to determine things such as refusing to boot the [[Wii Startup Disc]]. Although it does not make sense for this to be signed, it is nonetheless a flaw because it could have been compared to the value in the TMD.
β
This could be used to load the Wii Startup Disc a second time by changing the title ID, but the more practical use is to change a game's ID to start with a 0 or 1, and therefore boot with a [[SaveMii Dongle]].
+
This could be used to load the Wii Startup Disc a second time by changing the title ID (or load a different disc on the [[Startup Disc Menu]], which is already possible with fakesigning), but the more practical use is to change a game's ID to start with a 0 or 1, and therefore boot with a [[SaveMii Dongle]].
| Autobooting of any disc without fakesigning
| Autobooting of any disc without fakesigning
| Unfixed
| Unfixed