{"guid":"b011ec21-f612-4e9c-a193-8b53ca229cd8","title":"Hacking the Nintendo Game \u0026 Watch ","subtitle":"Your princess is AES encrypted in another castle","slug":"rc3-11527-hacking_the_nintendo_game_watch","link":"https://fahrplan.events.ccc.de/rc3/2020/Fahrplan/events/11527.html","description":"On November 13., Nintendo launched its newest retro console, the Nintendo Game and Watch - but by then it was already hacked!\n\n In contrast to the other Nintendo classic consoles (NES \u0026 SNES), Nintendo upped their game this time: A locked processor, AES-CTR encrypted flash \u0026 co. made it significantly harder to hack it, but in the end it was still hacked - one day before release.\n\nThis talk walks through the whole process of opening it up, exploiting the firmware up to bringing homebrew to a new console - in a fun, beginner friendly way.\n\nThe Nintendo Game \u0026 Watch was anticipated by a lot of retro-interested folks, and the clear expectation was: We wan't to get more games onto this device!\n\nBut Nintendo made the life of hackers harder: The CPU is locked, the external flash AES encrypted, and the USB-C connector does not have its data-lines connected.\n\nBut not so fast! In this talk we learn how to exploit the firmware, get code-execution via a NOP-slide, dump the ROMs \u0026 RAMs of the device and achieve what everyone has been asking for: DOOM running on the Nintendo Game \u0026 Watch.\n\nIf you are interested in the full flow from opening up a device, exploiting it, to writing custom drivers for homebrew, this is your talk! And all you need to follow along are a Game \u0026 Watch and about $4 of equipment!","original_language":"eng","persons":["Thomas Roth"],"tags":["rc3-mcr","11527","2020","IT-Security","main"],"view_count":7901,"promoted":false,"date":"2020-12-27T18:00:00.000+01:00","release_date":"2021-01-04T00:00:00.000+01:00","updated_at":"2026-04-11T12:45:04.781+02:00","length":2575,"duration":2575,"thumb_url":"https://static.media.ccc.de/media/events/rc3/11527-b011ec21-f612-4e9c-a193-8b53ca229cd8.jpg","poster_url":"https://static.media.ccc.de/media/events/rc3/11527-b011ec21-f612-4e9c-a193-8b53ca229cd8_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/rc3/11527-b011ec21-f612-4e9c-a193-8b53ca229cd8.timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/rc3/11527-b011ec21-f612-4e9c-a193-8b53ca229cd8.thumbnails.vtt","frontend_link":"https://media.ccc.de/v/rc3-11527-hacking_the_nintendo_game_watch","url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_title":"Remote Chaos Experience","conference_url":"https://api.media.ccc.de/public/conferences/rc3","related":[],"recordings":[{"size":null,"length":null,"mime_type":"application/x-subrip","language":"fin","filename":"rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch.fi.srt","state":"translated","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2023-09-02T02:39:24.497+02:00","recording_url":"https://cdn.media.ccc.de/events/rc3/rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch.fi.srt","url":"https://api.media.ccc.de/public/recordings/69679","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch.en.srt","state":"complete","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2023-09-02T01:58:41.255+02:00","recording_url":"https://cdn.media.ccc.de/events/rc3/rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch.en.srt","url":"https://api.media.ccc.de/public/recordings/69662","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch.en.srt","state":"complete","folder":"2020","high_quality":true,"width":null,"height":null,"updated_at":"2021-02-21T20:01:50.161+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/2020/rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch.en.srt","url":"https://api.media.ccc.de/public/recordings/50365","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":277,"length":2575,"mime_type":"video/mp4","language":"eng-deu","filename":"rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2021-01-04T14:21:15.028+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/h264-hd/rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch_hd.mp4","url":"https://api.media.ccc.de/public/recordings/49257","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":39,"length":2575,"mime_type":"audio/mpeg","language":"eng","filename":"rc3-mcr-11527-eng-Hacking_the_Nintendo_Game_Watch_mp3.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2021-01-04T14:26:56.462+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/mp3/rc3-mcr-11527-eng-Hacking_the_Nintendo_Game_Watch_mp3.mp3","url":"https://api.media.ccc.de/public/recordings/49295","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":142,"length":2575,"mime_type":"video/webm","language":"eng-deu","filename":"rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2021-01-04T15:09:16.913+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/webm-sd/rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/49293","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":129,"length":2575,"mime_type":"video/mp4","language":"eng-deu","filename":"rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2021-01-04T14:28:36.697+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/h264-sd/rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch_sd.mp4","url":"https://api.media.ccc.de/public/recordings/49291","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":27,"length":2575,"mime_type":"audio/opus","language":"eng","filename":"rc3-mcr-11527-eng-Hacking_the_Nintendo_Game_Watch_opus.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2021-01-04T14:25:21.449+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/opus/rc3-mcr-11527-eng-Hacking_the_Nintendo_Game_Watch_opus.opus","url":"https://api.media.ccc.de/public/recordings/49290","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":290,"length":2575,"mime_type":"video/webm","language":"eng-deu","filename":"rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2021-01-04T15:51:36.380+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/webm-hd/rc3-mcr-11527-eng-deu-Hacking_the_Nintendo_Game_Watch_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/49286","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":236,"length":2575,"mime_type":"video/mp4","language":"deu","filename":"rc3-mcr-11527-deu-Hacking_the_Nintendo_Game_Watch.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2021-01-04T14:20:45.561+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/h264-hd/rc3-mcr-11527-deu-Hacking_the_Nintendo_Game_Watch.mp4","url":"https://api.media.ccc.de/public/recordings/49256","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"},{"size":237,"length":2575,"mime_type":"video/mp4","language":"eng","filename":"rc3-mcr-11527-eng-Hacking_the_Nintendo_Game_Watch.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2021-01-04T14:20:08.948+01:00","recording_url":"https://cdn.media.ccc.de/events/rc3/h264-hd/rc3-mcr-11527-eng-Hacking_the_Nintendo_Game_Watch.mp4","url":"https://api.media.ccc.de/public/recordings/49255","event_url":"https://api.media.ccc.de/public/events/b011ec21-f612-4e9c-a193-8b53ca229cd8","conference_url":"https://api.media.ccc.de/public/conferences/rc3"}]}