Pues bueno el T.Twiizers ha conseguido crear un parcheador de IOS totalmente legal.
Estas son sus caracteristicas:
Download the ticket and TMD for IOS37 from the Nintendo Update Server
Use the built-in key-management functions of IOS to decode the title key (no common key required!)
Using the TMD, download all of the encrypted contents from NUS
Verify the integrity of each content against the hashes contained in the TMD
Decrypt each content individually, look for versioning tags inside the binaries and display them
Look for the signature check, and patch it out. (I have included code that will handle all versions of IOS.)
Re-encrypt the contents. If necessary, recompute the hashes, modify the TMD.
Modify the title ID in the TMD and ticket to IOS5.
Fakesign the TMD and ticket.
Install this patched IOS37 as IOS5.
Fuente:
http://hackmii.com/2008/07/patchmii/Un saludo y gracias al T.Twiizers por su impresionante trabajo