xboxscene.org forums

Pages: 1 ... 12 13 [14] 15 16 17

Author Topic: BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45  (Read 1755 times)

andi_06

  • Archived User
  • Jr. Member
  • *
  • Posts: 78
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #195 on: March 01, 2007, 12:03:00 AM »

I was looking at overall sales of the 360 and its heavily slowing down, yes it will pick back up for halo, but all in all less people are buying them..... I personally wish there was never a dvd hack, lets face it the majority just use it for illegal purposes and thats not right.. The original xbox would never have got anywhere if it wasnt for the buffer overflow hack, sure some people use it for the wrong wreasons... but most just use it for xbmc to play dvd or what not, I dont see a problem with that...

MS isnt loosing money from people running xbmc infact the popularity of the app probably helped xbox sales figures, I say fix the darn dvd firmware rubbish and let us run our own apps without xna.
Logged

Grim187

  • Archived User
  • Hero Member
  • *
  • Posts: 2036
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #196 on: March 01, 2007, 01:17:00 AM »

i cant seem to find a picture of where the R6T3 is so i circled it in this one

http://i12.photobuck...rim187/R6T3.jpg

just a theory but couldn't we use the non updated DK in a retail unit and the update in games to are advantage?

I.E. Take a Brand New Console and a game with the Right DK Update and get the Correct DK that Way

i admit its not the best solution but if it works then it works
Logged

openxdkman

  • Archived User
  • Hero Member
  • *
  • Posts: 550
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #197 on: March 01, 2007, 01:50:00 AM »

Grim187, Caster420, thanks a lots for your links. They are great!

With that "fall update" .xex what kernel version shall we obtain?
Logged

ashlar42

  • Archived User
  • Newbie
  • *
  • Posts: 20
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #198 on: March 01, 2007, 04:05:00 AM »

QUOTE(openxdkman @ Feb 28 2007, 10:43 AM) View Post
People with kernel>4548 : Gather people in class action suit in order to know if you can obtain back the blown efuse. It's very interesting to know if it's legal to blow an efuse inside someone's harware remotely without warning customer. If efuse threat is always active every future breach will end the same way for online gamers : too late.

I didn't actually think about it this way, but I think you're on to something with this.

I strongly doubt that Microsoft has the right to permanently alter the hardware inside a console I bought and paid, without letting me know. Even more so considering that I did not do anything even remotely illegal with it. I just used it to play games and go online for a service I was and still am paying for.
This makes my machine modifiable by them exactly how?!?  grr.gif
Logged

Chamrock

  • Archived User
  • Full Member
  • *
  • Posts: 157
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #199 on: March 01, 2007, 04:16:00 AM »

This is exactly what I mentioned before about the legality of blowing the fuse! Group-sue MS for doing this! No asshole should ever hack into my hardware without my permission! I hope EU will sue MS and demand billion of dollars and give it to the 360 owners. MS need some serious threat so they could stop this shit! I think we have the fully right to blow their property if they blow ours!  grr.gif  muhaha.gif
Logged

caster420

  • Archived User
  • Hero Member
  • *
  • Posts: 938
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #200 on: March 01, 2007, 04:40:00 AM »

QUOTE(openxdkman @ Mar 1 2007, 03:50 AM) *
Grim187, Caster420, thanks a lots for your links. They are great!

With that "fall update" .xex what kernel version shall we obtain?


Your kernel will be updated to 2.0.4532.0.  I checked this last night using that source and a virgin console (just to make sure they hadn't messed with the download).

Caster.
Logged

Ceres

  • Archived User
  • Newbie
  • *
  • Posts: 2
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #201 on: March 01, 2007, 04:41:00 AM »

QUOTE
The fall update can be downloaded from here. It is the original upgrade disc for the hd dvd-rom.

Caster.


i just burn this on onto an ordinary CD? which kernel is it?
Logged

caster420

  • Archived User
  • Hero Member
  • *
  • Posts: 938
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #202 on: March 01, 2007, 04:42:00 AM »

QUOTE(Ceres @ Mar 1 2007, 06:41 AM) *


i just burn this on onto an ordinary CD? which kernel is it?


Kernel is above.  You can burn it to cd or dvd as a data disc.  I used a cd last night, as it is only 12.4mb or something like that.

Caster.
Logged

Ceres

  • Archived User
  • Newbie
  • *
  • Posts: 2
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #203 on: March 01, 2007, 04:51:00 AM »

Great, this and a switch to the R6T3 could do the trick. now we have to wait to see the hack be reproduced...

eventually we would need the software that the hacker used to inject the code and the according hardware (USB/Serial) to do it...
Logged

aziztcf

  • Archived User
  • Newbie
  • *
  • Posts: 1
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #204 on: March 01, 2007, 04:52:00 AM »

QUOTE(Chamrock @ Mar 1 2007, 12:23 PM) *
No asshole should ever hack into my hardware without my permission!


Somehow I find this statement very ironic. Wait, what was this topic about?  dry.gif
Logged

ZakMcRofl

  • Archived User
  • Full Member
  • *
  • Posts: 167
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #205 on: March 01, 2007, 06:54:00 AM »

QUOTE(ashlar42 @ Mar 1 2007, 12:12 PM) View Post

I didn't actually think about it this way, but I think you're on to something with this.

I strongly doubt that Microsoft has the right to permanently alter the hardware inside a console I bought and paid, without letting me know. Even more so considering that I did not do anything even remotely illegal with it. I just used it to play games and go online for a service I was and still am paying for.
This makes my machine modifiable by them exactly how?!?  grr.gif

At first I thought you were joking but I guess you're being serious?
First of all they ask you before every update. Second of all, an efuse that is blown is more like a bit that is (permanently) flipped. Do you want to confirm it every time the Xbox writes a bit to a solit state memory?
I didn't think so.
Logged

SuRgEx360

  • Archived User
  • Newbie
  • *
  • Posts: 32
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #206 on: March 01, 2007, 07:09:00 AM »

so what happens when MS release the revised cooler running CPU, are those ownwers screwed?
Logged

PillHarris

  • Archived User
  • Newbie
  • *
  • Posts: 5
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #207 on: March 01, 2007, 07:03:00 AM »

QUOTE(Chan163 @ Feb 28 2007, 03:39 PM) View Post

I don't think we will get that much from this kind of exploit anymore (at least the ones already on 4552), because M$ now knows what to look for. The next exploit has to be something else. I hope the 'final solution' will be more like a 'crack' instead of an exploit running only on certain systems...
Now about that resistor: Will the 360 run normally when this resistor is removed permanently? Will a new kernel be able to check if that efuse is blown?
I have a 4532 sitting right next to me and I'm thinking of removing the resistor before going online again. Does anyone have a picture where to find that thing (I don't want to search the whole board for it)?



Maybe but buffer overflows are not always easy to spot. That's why windows you see numerous attacks on the same MS application, IE or whatever, Often based around buffer overflow.

The coders are very good, they're not morons, it's just incredibly hard to prevent mistakes like buffer overflow. This is why Microsoft invented the .NET framework and languages like C#, So the programmer doesn't have to worry about memory allocations and so on... No matter how good a programmer you are, doing level C/ASM and even C++ you will make some mistakes in complex code.

So we might find another exploit like this. However, the problem is that Microsoft have this defence against that with eFuse. Whatever hack is developed, it has to fool the update that it doesn't need to blow the eFuse, or it has to find some way of preventing that counter-move from MS.
Logged

Havok

  • Archived User
  • Hero Member
  • *
  • Posts: 1105
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #208 on: March 01, 2007, 07:36:00 AM »

Remember guys... as of right now you have a choice of homebrew OR newer games.

If that resistor is removed (thus saving the efuse) the newest 4552 kernel will not run on your box.

So you are locked out of live and most newer games because they will ask you to update.

Logged

caster420

  • Archived User
  • Hero Member
  • *
  • Posts: 938
BugTraq: Xbox360 Hypervisor Vulnerability - Unsigned Code on Kernel 45
« Reply #209 on: March 01, 2007, 08:05:00 AM »

QUOTE(Havok @ Mar 1 2007, 09:36 AM) View Post
Remember guys... as of right now you have a choice of homebrew OR newer games.

If that resistor is removed (thus saving the efuse) the newest 4552 kernel will not run on your box.

So you are locked out of live and most newer games because they will ask you to update.

 


This is not true.  The new kernel will run without the efuse being blown.  Robinsod has stated that the problem comes when trying to downgrade the kernel from 4552 to an older version by corrupting the patchs applied.  He speculates the the dash files contained in the NAND have been overwritten (not just a kernel patch) and will not work with lower kernels.  Thus, you can disable the eFuse power source, use the newest kernel (as of right now) but you will not be able to downgrade the way that he had been.  You will have to flash a pre-4552 image to your NAND to have it work with a lower kernel.  

Caster.
Logged
Pages: 1 ... 12 13 [14] 15 16 17