Print

[Lord-Icon]

Ok , an update for you ..

So far we have sussed out this

Step1:  your xbox only sends its MAC address to xbox live
Step2: live looks up a database and matches your MAC to its s/n and sends that information back to your ebox

Step 3: this is the one we are having some problems with . we have found some data in here which IMHO holds the key to the whole problem ...

Step 4: live sends data to your xbox about your friends list ..


Ok not much done today but we are now convinced that step 3 is the key , and this is where we will be spending most of our time ..

Thanks

Icon ..


Ps Computer God ?    Na , just a dude who h8's M$ and there Monopoly
Long Live Linux

[dbldown768]

if this guy gets this to work, there is by no means a way he's going to be able to control cheating.  if that is one thing i hate its people cheating.  about the only benifit to XBL is they dont like cheating.

its great and all, but MS is going to be putting the ban on a lot of people as stated above.  its just the same reason they've up there bans now, cuz people find a need to hack to cheat.  if you want to hack and cheat i say go somewhere else.  theres not more frustrating than someone thinging they are good at a game but they've cheated the whole time.

IMO i can careless about ranks and number, i just like a good place to play online with friends - i guess you get that attitude when your older - a 12yr old probably doesnt think that way

[Lord-Icon]

QUOTE

if this guy gets this to work,

Not just me working on this , now have 12 people working on the same problem .

Just for the record

I H'8 cheats ...  one reason for playing on live . And I really hope now that this program we are working on is not used for this ..

I must admit I didn’t really put much thought into the fact that some people would use it for cheating ..

Thanks .




On another note ,
Just had my first call from xbox help . I placed a call with them 4 days ago and this is them just getting back to me ..

I had a well laid out script of questions I was going to ask ...

All he kept asking about was "Do you have a mod chip installed"

He didn’t seem to bother about the fact the HDD was replaced by a local game shop ( not really true   was replaced by me )He kept going back to mod chips .

I found this interesting , 90% of the conversation was about mod chips .

[g0tr3wt23]

QUOTE (Penfoldian @ Nov 16 2004, 08:30 PM)

if u have not already realised! we have two of those already......(xlink, xbconnect)

Uh bro, the xboxes know they're not connecting to xbl; it's a system link game so there is no authentication...

To Icon:
Someone already pointed out the obvious.... yeah the idea is novel and possibly a reality in some pseudo kafka-esque universe however, simple logic would imply that as these are PUBLIC forums if you had any TRUE intent of developing a utility to bypass MS's xbl authentication and security techniques that you would take this thread and its content to a more private venue. Posting your attempts and thoughts here, should they prove correct, amount to little more than frivolity. You're informing your nemesis of your exact plan of attack. Good thinking Napoleon ;-)  

And if you got your nic form the movie hackers the dood's name was Nikon not Icon.

[Lord-Icon]

QUOTE

Nikon not Icon

And that is why I use Icon .........


I also watched that film .. Loved it  , But Hackers 2 , way much better .



Look lets be cleare here ,  Im only telling the forum of work ongoing , and not any code or progam tools used .

More Information about this project is on the net , and very secure .....

[dbldown768]

the net is not as secure as you might think.

[Lord-Icon]

revengeismyfury   at least Im trying to get a solution ... and am willing to share .


Ok I see this is going to cause bother on here ..

I have no intension to cause bother , Just want to help get us poor modders back online without buying another xbox and giving more $ to Bill Gates ..
No more Posts will be made here on this topic .
Just search the web and you will find our project .

Topic CLOSED !!!

[dbldown768]

you can post... just people giving your opinions... im sure people would like to hear the progress.  its up to you.  its your a$$ thats on the line thats all.

i for one dont like the fact that MS can charge money for service and then on top asks us to pay for the downloaded content that comes out once every 7months.

[Lord-Icon]

QUOTE (dbldown768 @ Nov 16 2004, 10:26 PM)

you can post... just people giving your opinions... im sure people would like to hear the progress.  its up to you.  its your a$$ thats on the line thats all. i for one dont like the fact that MS can charge money for service and then on top asks us to pay for the downloaded content that comes out once every 7months.

Na . what pisses me off the most is Micro$oft saying that only they can repair xboxes ..   I mean c'mon . do we call M$ and get them to replace a HDD in our PC ?  

Think not .

[g0tr3wt23]

QUOTE (Lord-Icon @ Nov 16 2004, 10:16 PM)

And that is why I use Icon ......... I also watched that film .. Loved it  , But Hackers 2 , way much better . Look lets be cleare here ,  Im only telling the forum of work ongoing , and not any code or progam tools used . More Information about this project is on the net , and very secure .....

tou che ;-)

[g0tr3wt23]

(The following is NOT directed at any particular person)



one other thing i was thinking about...  A computer used in this scenario would be a one way router and should mainly concern verifying kerberos authentication.  The problems I've already seen named... it does appear that the box's serial # is transmitted and if this truly is the case then the program would have to include thousands upon thousands of valid serialz in order to be valid. And if the marriage theory holds true then the program MUST keep whichever serial it used when first connecting to or accepting traffic from xbl. Spoofing a kerberos authentication service though. Screw the pk encryption... spoofing a kerberos session ticket? Also, xbl communication uses a non-standard encryption format similar to ipsec. Remember, this company expects credit card, address, and other personal information to be transmitted over these lines.
Ergo, this system while most certainly not hack-proof is best left alone. If someone were to figure out this encryption it would be a short while unitl someone effected an effective session hijack and was able to start stealing user info.  

I hate to be a killjoy but MS went to a lot of hard work to make the xbl service an accessible privilege to those who agree to their TOS which we all did when we signed up for xbl accounts. I have been lucky enough not to get banned but I wouldn't complain if i did. I never rambled on a message board when my hand was caught in the cookie jar.  If I give you a remote access account on my box as a privilege or even for small fee then hell yeah I would yank it at the first sign of tampering. MS spends god knows how much money maintaining xbl servers. $50 a year? Thats it?! On top of that $200 worth of computer parts in a nifty $100 package? Its a service we want and therefore pay for. So respect it and leave it alone. I will not support any attempt whatsoever to break MS's encryption or spoof a real kerberos session with their servers because if someone does succeed...you are going to see an amazing increase of identity theft among 20-35 year olds. Leave the shit alone. Hack the hardware, respect the service or use a tunnel. If you hate MS so fucking much you shouldn't have bought their shit, signed up for xbl, given them your personal information, agreed to their terms of service, and bought their games  in the first place. Bill Gates didn't invent the xbox.  A group of engineers did.... and those are the people you are fucking over... those are the people you are forcing to work overtime. Use an unmodded xbox, pay the measly $50 a year for the endless hours of gaming and fun with your friends that MS is willing to provide.  But don't punish other people because of the company they work for...


And why does everyone hate Bill Gates so much? Because he succeeded in accomplishing the american dream? Because's he's marketing an inferior product (which it isn't). For the thousands of programmers, technicians, and testers that help to bring about the various evolutions of MS software,  the measly $200 I spend on a copy of XP Pro is well worth every penny.  If my box is banned and my tag flagged ultimately I WILL buy another xbox specifically for xbl.  For what they provide at the price they ask, it's truly an awesome deal.

[/rant]

[Lord-Icon]

I posted here last night UK time that I will not be posting any more information to what is getting done with this project ,.


Look the bottom line is , even if we dont sucseed here some others might ,
Im just letting this great forum know of what type of work is going on out there , and please note that this project has been going on long before this ban was put into place ,

I have a second box which I use only for live , and yes I agree that this is a great service , but I feel that a ban just because you changed your hdd or installed linux on your xbox is most unfare ,

People that do this just want to get that bit more out of there xbox .

Not wanting to piss anyone off so no more about this will be talked about on this forum .

SORRY to anyone I have upset.

Icon...    

[g0tr3wt23]

I most certainly ain't upset brother. I do network security as a career! I don't question your motives... but other katz who read this board? 14 and 15 year old script kiddies itching for a reason to prove themselves as hackers?

The VX nerve agent was originally intended as a pesticide and proved effective to that extent. Since however it now has the capability to be the most biologically destructive substance on the planet. It all depends on who has access to the final result. Good luck in your efforts my friend. Should your venture prove successful keep it dl. ;-)

[Lord-Icon]

 ..

Good to meet someone elso who is a computer IT eng ..

[g0tr3wt23]

hit me up on aim sometime.... it'd be kewl to compare notes and I'll give you my GT so we can beat the shit out of each other in a game if we ever disagree on something