Microsoft Update Thwarts Xbox 360 Hacks

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
Microsoft quietly released a system update for the Xbox 360 that prevents hackers from running homebrew apps on the console. The method of inserting data into non-privileged memory areas has been closed by the update, squashing current hopes to run homebrew apps.

The update was unleashed on Xbox Live, can be burned to a DVD or CD from the website, and ships with all games released after February 20. Unsuspecting hax0rz who fall victim to Microsoft's furtive "booyah" will be sent back to the drawing board -- and if they manage to find another loophole, they'd best think twice before installing a patch in update's clothing.
Click to expand...
 
The bug was fixed on 1/9/07 (kernel 4552). Isn't this news a little late?
 
No, but I would like current news from [H]. It's not like it was hidden, they even published this information with the hack.

http://www.xbox-scene.com/xbox1data/sep/EEZkykVkkFmojzapEq.php
Timeline:
* Oct 31, 2006 - release of 4532 kernel, which is the first version
containing the bug
* Nov 16, 2006 - proof of concept completed; unsigned code running in
hypervisor context
* Nov 30, 2006 - release of 4548 kernel, bug still not fixed
* Dec 15, 2006 - first attempt to contact vendor to report bug
* Dec 30, 2006 - public demonstration
* Jan 03, 2007 - vendor contact established, full details disclosed
* Jan 09, 2007 - vendor releases patch
* Feb 28, 2007 - full public release
Patch Development Time (In Days): 6

Severity: Critical (Unsigned Code Execution in Hypervisor Mode)

Vendor: Microsoft

Systems Affected: All Xbox 360 systems with a kernel version of 4532 (released Oct 31, 2006) and 4548 (released Nov 30, 2006). Versions prior to 4532 are not affected. Bug was fixed in version 4552 (released Jan 09, 2007 - not a Patch Tuesday).
Click to expand...
 
I don't see what the big deal is stopping homebrew stuff on the console. This update does nothing to stop piracy, just homebrew apps, and yeah this is old news.
 
The whole unsigned code thing is a catch-22 situation. There are so many benefits of being able to run unsigned code, but there is the chance of getting screwed from malicious code. Imagine having to subscribe to an antivirus service for your console. Sooner or later it's coming.
 
You must log in or register to reply here.
Back
Top