{
  "url": "https://fahrplan.events.ccc.de/rc3/2020/Fahrplan/events/11527.html",
  "id": 11527,
  "guid": "b011ec21-f612-4e9c-a193-8b53ca229cd8",
  "logo": "/system/events/logos/000/011/527/large/hackedmariobrothers.png?1605908195",
  "date": "2020-12-27T18:00:00+01:00",
  "start": "18:00",
  "duration": "00:40",
  "room": "rC2",
  "slug": "rc3-11527-hacking_the_nintendo_game_watch",
  "title": "Hacking the Nintendo Game & Watch ",
  "subtitle": "Your princess is AES encrypted in another castle",
  "track": "IT-Security",
  "type": "Talk",
  "language": "en",
  "abstract": "On November 13., Nintendo launched its newest retro console, the Nintendo Game and Watch - but by then it was already hacked!\r\n\r\n In contrast to the other Nintendo classic consoles (NES & SNES), Nintendo upped their game this time: A locked processor, AES-CTR encrypted flash & co. made it significantly harder to hack it, but in the end it was still hacked - one day before release.\r\n\r\nThis talk walks through the whole process of opening it up, exploiting the firmware up to bringing homebrew to a new console - in a fun, beginner friendly way.",
  "description": "The Nintendo Game & Watch was anticipated by a lot of retro-interested folks, and the clear expectation was: We wan't to get more games onto this device!\r\n\r\nBut Nintendo made the life of hackers harder: The CPU is locked, the external flash AES encrypted, and the USB-C connector does not have its data-lines connected.\r\n\r\nBut not so fast! In this talk we learn how to exploit the firmware, get code-execution via a NOP-slide, dump the ROMs & RAMs of the device and achieve what everyone has been asking for: DOOM running on the Nintendo Game & Watch.\r\n\r\nIf you are interested in the full flow from opening up a device, exploiting it, to writing custom drivers for homebrew, this is your talk! And all you need to follow along are a Game & Watch and about $4 of equipment!",
  "recording_license": "",
  "do_not_record": false,
  "persons": [
    {
      "id": 7775,
      "public_name": "Thomas Roth"
    }
  ],
  "links": [
    {
      "url": "https://www.youtube.com/watch?v=Rsi8p5gbaps",
      "title": "Video: Part 1: Hacking the Nintendo Game & Watch"
    },
    {
      "url": "https://twitter.com/ghidraninja/status/1326855097083686917",
      "title": "Twitter thread on my initial analysis"
    },
    {
      "url": "https://twitter.com/ghidraninja/status/1329191402731868163",
      "title": "Successful homebrew running"
    },
    {
      "url": "https://www.youtube.com/watch?v=sNg_S9UM5ps",
      "title": "DOOM running on the Game & Watch"
    },
    {
      "url": "https://www.youtube.com/watch?v=-MzmoEFs0bQ",
      "title": "Homebrew on the Game & Watch"
    }
  ],
  "attachments": [],
  "room_id": "32b5ad05-ab7d-44eb-a6e6-7ca616eed34a",
  "origin": null
}