Print

[NS360]

QUOTE

>> In response to the conclusions formed by Nate Lawson ...
Repairing the hole:

* "Attackers only have tenuous hold on drive"
Commodore4Eva - Complete control of drive, any command or code sent to drive from host can be analysed and appropriate response given to host

* "Defence: check that responses vary appropriately"
Commodore4Eva - Code already written to vary responses and will be implemented when required, current responses satisfy host code

* "Defence: use same debug commands to load disc-specific hashing code into drive, check for patched firmware"
Commodore4Eva - As we have complete control of firmware, we can analyse each debug command sent from host and again formulate the appropriate response to host

* "Defence: look for ss.bin?? file via host or code loading into drive"
Commodore4Eva - Xtreme firmware already locks host from reading illegal ranges of LBA once drive is unlocked, so host cannot read Xtreme Security Sector (not a SS.bin file). Again if debug command or code sent to drive, we can analyse and formulate the appropriate response to host

Conclusion:
Drive is completely compromised and can be programmed to give the correct response to any query. If host changes the rules, so do we.
With any recorded media, the data is static, in content and position, so always hackable.


Coming soon for Xtreme firmware
_______________________________
* DVD movie region free!!!
* 360 games using file iso/raw data hybrid - much smaller iso size
* New Xtreme V5 for Hitachi and Benq drives

Thanks
Commodore4Eva

There is of course no ETA on any of the features listed above, so please dont ask (IMG:style_emoticons/default/smile.gif)

 

Sounds great cant wait for new firmware (IMG:style_emoticons/default/smile.gif) The hard work of hackers allways pays off. Thanks Commodora4Eva.

[infamous_Q]

yeah i can't wait to see waht the new firmwares have in store either

[brywalker]

Sounds pretty sweet.

My only concern is when adding all of these cool features, how long before it can be detected?

[HoRnEyDvL]

Hitachi Fw cool cant wait.

[jas0nuk]

Can't wait for the Hitachi Xtreme 5 (IMG:style_emoticons/default/wink.gif)

[jabroniekilla]

Great! thanks for the update C4E

[t_mac_ca]

QUOTE(brywalker @ Feb 11 2007, 10:37 PM)

Sounds pretty sweet.

My only concern is when adding all of these cool features, how long before it can be detected?

I think the whole point of the article is that they have complete controll of the firmware and its undetectable

QUOTE(jas0nuk @ Feb 12 2007, 09:58 AM)

Can't wait for the Hitachi Xtreme 5

Same