backtop


Print 20 comment(s) - last by porkster.. on Mar 24 at 2:12 AM

Microsoft had a few things to say about the ever popular 360 hackers

John Porcaro, official Microsoft spokesman for all things unofficial about the XBOX 360, published a rebuttal to the XBOX 360 firmware hack announcements:

The core security system has not been broken. However, it is reported that the authentication protocol between the optical disc drive and the console may be attacked, which if accurate could allow people to play illegally copied games.  Our security team is aware of this and we are investigating potential solutions to this issue. The Xbox 360 platform was designed to be updated, and we are prepared to respond appropriately should any unauthorized activity be identified.

Everyone should keep in mind that Microsoft invests a great deal of time and effort to ensure that Xbox gamers enjoy the most powerful and exhilarating game experience available today. Genuine and unmodified Microsoft Xbox products provide gamers with the reliability, security, support and dynamic gaming experience that they expect.  Microsoft works with a large group of legitimate business partners to sell and service genuine Microsoft Xbox products. Microsoft does not authorize or support any products or companies that modify or change the Xbox console in any way.  

It's clear that Porcaro believes the hacks so far can be corrected with online updates via the XBOX's internet connection. Several weeks ago Microsoft initiated the first XBOX 360 online update.  Currently, as stated by many XBOX hacking groups, if the DVD-ROM firmware is modified, the system can run burned 1:1 copies of game titles.  Microsoft insiders tell DailyTech that the most logical way to counter this hack will be to simply checksum the firmware before trusting it, although there are certainly more robust methods of trust in the works as well. 




Comments     Threshold


This article is over a month old, voting and posting comments is disabled

INternet update's can't solve any hacking.
By mircea on 3/23/2006 10:28:45 AM , Rating: 2
How can Microsoft even think that online updates can fix the hacking problem? If I want to hack the Xbox360 I will never update. How can they force me?

Plus I hate the ideea Microsoft is pushing of an upgradable gaming console. It just let's in the ideea of get it out we'll fix it later. Something I should never worry on a gaming console. The system and the games should be as is forever. If they do it write praise them, if they do it wrong and still release it make them aware that you won't buy their games next time so they better not do shortcuts. I want to buy the console and put it under my TV and never worry about it needing upgrades or anything. Just plug and play any game until I get tired of it or is replaced by the next console (put aside to be playable when nostalgia hits)




By johnsaw on 3/23/2006 10:57:42 AM , Rating: 2
How can they force you? Well, you won't be able to play online (Live) games :(



RE: INternet update's can't solve any hacking.
By LanceM on 3/23/2006 11:15:05 AM , Rating: 2
Many games will include the online updates on the discs as well, and will not let you play until you update.


RE: INternet update's can't solve any hacking.
By BigLan on 3/23/2006 11:56:53 AM , Rating: 2
The newer games won't even tell you they're updating, it will be done the first time you put the disc in, much like the psp does.


By Scabies on 3/23/2006 12:31:47 PM , Rating: 2
Thats true, they can just add the anti-hack rollup into the start sequence of new releases.


Updating...........Updating.....
By judasmachine on 3/23/2006 10:26:59 AM , Rating: 1
So they designed another security hole ridden product, who'd of thunk? Excuse me I have to run Windows Update. :) (not actually a MS hater, just making an observation.)




RE: Updating...........Updating.....
By mpeny on 3/23/2006 11:01:58 AM , Rating: 2
Huh?

I don't understadn your comments. The hack is on the optical drive's firmware.


RE: Updating...........Updating.....
By Motley on 3/23/2006 12:04:39 PM , Rating: 2
Don't be an idiot. It's not a security "hole", as any piece of hardware is susceptable to reprogramming, which is what these guys did. It's all a matter of how much effort you have to do in order to get it to do what you want.

Throw out all the firmware, and ROMs on the XBOX, and replace them with EEPROMs, and you can get it to run linux. That's because it's not all one piece of hardware that was specifically designed to just "BE" an XBOX. It's multi-purpose hardware thrown together. Until all the hardware is completely replaced by a single chip, every hardware platform will be "vulnerable" to such things. And by the time that happens (in a device that makes it worthwhile), who knows. It's possible home users might be able to modify even single chips by that time with the $19.95 chip re-etcher from Radio Shack.


By peternelson on 3/23/2006 2:48:51 PM , Rating: 2

Important to distinguish between xbox and xbox360.

Xbox was built on commodity hardware and processor.

X360 IS a totally custom cpu using powerpc cores AND some drm technology. That is the reason it cannot (easily?) be "hacked" simply by changing any eproms. If you put your linux in an eprom or disk, the processor may refuse to run that code because it is "unsigned code".

Remember the security features of x360 are more advanced than the original.


Way to go
By Scabies on 3/23/2006 9:36:51 AM , Rating: 2
So, by posting the video, and a brief description of what he did, TheSpecialist is working for both sides? Hey Microsoft, here's the flaw, fix it. Hey hackers (and hack beneficiaries) here's the flaw, use it.




RE: Way to go
By Scabies on 3/23/2006 9:42:11 AM , Rating: 2
Though, the MS response is an inadvertant lead into future hacks.
quote:
The core security system has not been broken. However, it is reported that the authentication protocol between the optical disc drive and the console may be attacked, which if accurate could allow people to play illegally copied games.

SO the optical drive firmware is potentially vulerable, yes, but so far nothing really concerning has happened.


RE: Way to go
By peternelson on 3/23/2006 2:45:49 PM , Rating: 2

Not "potentially" or FUTURE hacks. That is what the CURRENT WORKING hack does.

Microsoft were not bothered to close this loophole initially as there are easy countermeasures such as checksumming the drive firmware before game execution.


Hackers could interface
By porkster on 3/23/2006 2:31:23 PM , Rating: 1
Hackers could simply interface the optical drive's firmware.

So address/data reading commands return the the original bios, but reading and writing and other drive specific commands use the pirates code.

Any live update would simply update the original mapping of the stored bios making it totally future proof.

In Theory...

Maybe it's important to purchase a series one X360 if you want to mod it?




RE: Hackers could interface
By peternelson on 3/23/2006 2:52:48 PM , Rating: 3
Yes the thought had occured to me.

I think you would need to mod your optical drive to add extra firmware flash memory.

One memory would contain the original firmware (or any MS updates to it) and the other would be running the ACTUAL "hacker" firmware which lies about the disk type BUT ALSO looks up any reads to the firmware memory into the OTHER flash. The hack firmware would return all bytes the console is expecting to see and checksum therefore console is oblivious to the fact the drive was hacked.


RE: Hackers could interface
By porkster on 3/24/2006 2:12:44 AM , Rating: 1
Just a device that plugs in between the cable for the drive and the mobo. The device interfaces/interprets the commands issued.


Lord, here we go again...
By jskirwin on 3/23/2006 9:14:02 AM , Rating: 2
The arms race between MS and the hacker community begins on the Xbox 360...




Firmware vs. hackers
By threEchelon on 3/23/2006 12:57:02 PM , Rating: 2
I wonder if this might turn into a battle of firmware updates versus hackers, kinda like the situation with the PSP.




idea
By Wwhat on 3/23/2006 5:59:14 PM , Rating: 1
hackers should hack the M$ xbox360 updateserver (I assume they use microsoft servers so it can't be hard) and hack all xbox360's at the same time :]




lol!
By astrodemoniac on 3/23/06, Rating: -1
PWNED
By DangerIsGo on 3/23/06, Rating: -1
"So, I think the same thing of the music industry. They can't say that they're losing money, you know what I'm saying. They just probably don't have the same surplus that they had." -- Wu-Tang Clan founder RZA














botimage
Copyright 2012 DailyTech LLC. - RSS Feed | Advertise | About Us | Ethics | FAQ | Terms, Conditions & Privacy Information | Kristopher Kubicki