tbh you just have to swap two values on the OTP. do this in redNAND (bad things can happen in sysnand :wink:), create a new NNID with a 3DS and link it
there's a guide somewhere in the "Wii U - Tutorials" section
You didn't really understand that system.xml brick, it isn't like "it doesn't overwrite the xml", the problem is that the sector of the system.xml gets corrupted and without a system.xml you can't boot at all. We don't know if the bug is before or after the xml parser (it's not in the xml parser...
q8
But as far as I remember he actually said at 33c3 "... maybe we found a bug ...". Probably he thought that Wii U scene is pretty shitty and he didn't tried to exploit it (he says this too ".. but we haven't really tried to exploit it"). IMO it is a bit shitty, it's actually 8% developers 90%...
as far as i remember it patches the function that checks the signature
P.S.:https://github.com/dimok789/mocha/blob/master/ios_acp/source/main.c#L32-L39