xboxscene.org forums

Pages: 1 ... 10 11 [12] 13 14 ... 17

Author Topic: BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45  (Read 1755 times)

Mike Bowler

  • Archived User
  • Newbie
  • *
  • Posts: 33
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #165 on: February 28, 2007, 02:46:00 PM »

Chan if that was in response to my last post sorry lol but. I can't f*cking understand any language other than english lol (language as in english, french and so on not programming can understand quite a lot of that) smile.gif
Logged

tser360

  • Archived User
  • Newbie
  • *
  • Posts: 7
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #166 on: February 28, 2007, 02:57:00 PM »

I saw some people on this threading saying "If only the xbox 360 sdk was leaked". I would like to say to them : Look better. It's out there, for a long, long time already,  Really.
Logged

d-range

  • Archived User
  • Full Member
  • *
  • Posts: 151
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #167 on: February 28, 2007, 02:54:00 PM »

QUOTE(Chan163 @ Feb 28 2007, 07:36 PM) View Post

QUOTE(Highcutt- @ Feb 28 2007, 07:22 PM) View Post

Holy fuck people are retarded.

You mean I'm retarded because I want to save my X360 from being f#cked by M$? Ok, then. But I'll tell you what I think is retarded: Most of this thread! Because it's just a continous repetiton of "This exploit is useful" - "No, it's not" - "Yes, it is" and so on and so on. I think everything that needed to be said about the 'usefulness' of this esploit is already said, mainly by The Specialist, obviously one of the experts on X360 security.
Enough people, including me have asked about that resistor, including me. The answers to the question have yet to be done. There are people here who know the resistors whereabout and probably have information if the X360 will run flawless without it. Aren't they willing to share that little bit of knowledge to preserve some pre 4552 360s?
It's a start. But as 4doordrop said, I can't find the resistor too. I used a looking glass and still nothing. A picture with some marks or at least a description where it is would be really helpful, instead of having us tearing our boards apart.


Maybe he meant people are retarded because of all the stupid comments by people who don't understand how and why this hack might be useful? And/or are talking pseudo tech-talk about efuses, modchips and removing resistors etc?

I'm not saying I know much more than what I'm able to get from the summary, but all I know this is very exciting. It's most likely not the hack that will bring homebrew to the 360 but it shows there are ways around the security. A first dent in the armor, and in the hands of the right people a perfect tool to get inside the hardware and learn about other possible exploits. It doesn't matter much that it's already fixed and the guy reported it to MS, at least the details to reproduce it are out in the wild now, without legal problems to discuss them.

If it is really possible with this hack to have full control over the CPU/RAM/HD/etc it will not take long until someone manages to get a custom linux kernel running on it (it it isn't already). From there someone might learn stuff about the hypervisor and find a way to disable it in other ways; or hit a hardware bug/debug call/shader exploit; or find out something about the efuses, a way to blow one of them that overides all other efuses, whatever. Time will tell...

Anyway if I were you I wouldn't rush out to find that resistor and remove it. You can count the days until a mandatory update will lock up the console if it cannot blow the efuses and brick your console. Also, if you're not skilled enought to find all the info and details about the hack/resistor/whatever without asking for them here, the best thing for you would probably be to wait and see what happens. A 360 without homebrew is still better than a $399 paperweight.

Edit: what's up with all the german crap in this thread btw? Isn't this topic moderated??
Logged

No_Name

  • Archived User
  • Hero Member
  • *
  • Posts: 562
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #168 on: February 28, 2007, 03:02:00 PM »

Some people like to dig in to the systems to find the holes and thats all, they dont care about money or homebrew they do it because they want to see if they can and nothing else.

Crying because the hole has already been plugged is pointless, and talking about you would do is even worse. Tell you what stop crying and you find the hole and produce this mythical mod chip.

Talk of people getting paid millions is stupid too. If you knew anything about big business you do pay out millions to random people even a company with as much cash as MS does could not sustain profitabality for long that way.

This post has been edited by No_Name: Feb 28 2007, 11:05 PM
Logged

syntaxerror329

  • Archived User
  • Hero Member
  • *
  • Posts: 1138
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #169 on: February 28, 2007, 03:05:00 PM »

QUOTE(tser360 @ Feb 28 2007, 10:57 PM) View Post

I saw some people on this threading saying "If only the xbox 360 sdk was leaked". I would like to say to them : Look better. It's out there, for a long, long time already,  Really.


Hmmm its your first post. Sorry i don't think your right.

Does anyone else here think the 360 SDK is floating around the net somewhere or is this guy BS ?



Logged

4doordrop

  • Archived User
  • Newbie
  • *
  • Posts: 7
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #170 on: February 28, 2007, 03:16:00 PM »

QUOTE(d-range @ Feb 28 2007, 04:01 PM) *

Also, if you're not skilled enought to find all the info and details about the hack/resistor/whatever without asking for them here, the best thing for you would probably be to wait and see what happens.


Hmm...I thought this was a Hacking Disscusion Forum, not a bitch everyone out for not being able to find all the info and details about hacking forum. (IMG:style_emoticons/default/dry.gif)

This post has been edited by 4doordrop: Feb 28 2007, 11:19 PM
Logged

d-range

  • Archived User
  • Full Member
  • *
  • Posts: 151
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #171 on: February 28, 2007, 03:18:00 PM »

QUOTE(4doordrop @ Feb 28 2007, 11:16 PM) View Post

Hmm...I thought this was a Hacking Disscusion Forum, not a bitch everyone out for not being able to find all the info and details about hacking forum. dry.gif


It's not really constructive for the 'Hacking Discussion' to keep asking the same thing over and over, especially not when it is easy enough to find the resistor yourself or just keep your box off the net until someone else finds it and posts details about it  sleeping.gif
Logged

i800phyco

  • Archived User
  • Full Member
  • *
  • Posts: 132
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #172 on: February 28, 2007, 03:19:00 PM »

QUOTE(Chamrock @ Feb 28 2007, 09:38 PM) View Post

I suppose this guy got plenty $$$$$$$$$$$ from M$ for telling them this, so much so he become about 50 million USD richer for this discovery. If he did I kind of understand him if he did. I believe most people would accept a generous offer from MS in order to help them to let the console remain unhacked. This is just a speculation, but I would be surprised if he has not become a USD multi-millionaire of this finding. If MS just offered me like 1 million USD I would tell them to go fuck themselves.


Yea but first you would have to do somthing worthwhile. rolleyes.gif
Logged

caster420

  • Archived User
  • Hero Member
  • *
  • Posts: 938
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #173 on: February 28, 2007, 03:33:00 PM »

QUOTE(4doordrop @ Feb 28 2007, 05:16 PM) *


Hmm...I thought this was a Hacking Disscusion Forum, not a bitch everyone out for not being able to find all the info and details about hacking forum. (IMG:style_emoticons/default/dry.gif)


The resistor is on the bottom of the mobo, near the center of the cpu heatsink retainer (the big 'X') when you have the front of the motherboard facing you.

Caster.

This post has been edited by caster420: Feb 28 2007, 11:35 PM
Logged

JimmyGoon

  • Archived User
  • Full Member
  • *
  • Posts: 210
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #174 on: February 28, 2007, 03:35:00 PM »

1. What is the legality of M$ doing this? Without warning or pushing "I accept" somewhere?

2. The X360SDK has not been leaked to the best of my knowledge but I'm assuming that if there was an exploit like this live the the same thing would happen as last time.

3. To people that are confused: This doesn't mean anything to you right now. What until people like "The Specialist" have a chance to work with it. Some Xbox360's haven't gotten this update and blown the efuse so MAYBE the hackers over at xboxhacker.net will have a chance to dump the kernel/hypervisor to find us some (more) usable tasty exploits.

4. What happens if you pull off the resistor? I understand that the efuses then can't blow, but does the new kernel work fine until you use the programmer to downgrade or what?

(my) recommendation: Stop updating until we hear more. (Or better yet, just don't touch anything inside your xbox unless you are willing to have paid $400 for a doorstop)

This post has been edited by JimmyGoon: Feb 28 2007, 11:40 PM
Logged

infamous_Q

  • Archived User
  • Full Member
  • *
  • Posts: 101
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #175 on: February 28, 2007, 04:02:00 PM »

QUOTE(Chamrock @ Feb 28 2007, 04:50 PM) *

Well, I would rather establish a modchip business and earn more than 1 million dollars, but if MS would offer quite a bit more than that I could reconsider. If I could told the 360 owners about the removal of the resistor MS could be out of power to control our 360s while the modchip business contiued to grow.



how many 360's have sold? ~10 million right. even at $100 (of PURE PROFIT per chip) you'd have to sell to 100k people. that's assuming no competition, and you're ridiculously price chip is actually bought into by some people. you'd be dumb not to take your million and establish a legit business.

To JimmyGoon on your first question: "1. What is the legality of M$ doing this? Without warning or pushing "I accept" somewhere?"
it's probably in the EULA somewhere, or in the Live user agreement. so you've already hit the "accept" button a long time ago. plus it's a moot point since no one (who doesn't get bricked) bitches when they upgrade to add features (like video streaming).
Logged

4doordrop

  • Archived User
  • Newbie
  • *
  • Posts: 7
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #176 on: February 28, 2007, 04:04:00 PM »

QUOTE(JimmyGoon @ Feb 28 2007, 04:35 PM) View Post

4. What happens if you pull off the resistor? I understand that the efuses then can't blow, but does the new kernel work fine until you use the programmer to downgrade or what?

From what I understand:
If you take out the resistor and update to v4552 and then dump the flash to corrupt the patch it will throw E71 errors. If reverted back to 2.0.1888 it will boot.
Logged

jcdenton2003

  • Archived User
  • Full Member
  • *
  • Posts: 156
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #177 on: February 28, 2007, 04:25:00 PM »

I think this could be the big thing everyones been waiting for!
Logged

JimmyGoon

  • Archived User
  • Full Member
  • *
  • Posts: 210
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #178 on: February 28, 2007, 04:45:00 PM »

Correction to my post above, I was incorrect about the Xbox360 XDK being unavailable. Please don't PM me for details because I don't have anything except for the word of a trusted person. Yes you may flame me and call me stupid, fine. I'm just saying for the factual representation for my post above.
Logged

Heet

  • Archived User
  • Hero Member
  • *
  • Posts: 2809
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #179 on: February 28, 2007, 05:25:00 PM »

QUOTE(jcdenton2003 @ Feb 28 2007, 06:25 PM) View Post

I think this could be the big thing everyones been waiting for!



It is the door everyone was waiting for.  Gonna be a rollercoaster of a year!   smile.gif
Logged
Pages: 1 ... 10 11 [12] 13 14 ... 17