Print

[HipHopHead]

So has anyone actually bought their key yet?

[saleem_hacks_360s]

QUOTE(ekruob @ Aug 4 2009, 11:54 PM)

What code? The keys are not copyrighted - numbers cannot ever be copyrighted. That fact that decryption was required makes no difference.

They are only providing keys - that in itself does not circumvent any copyright protection measures.

What MyFoundry do seems entirely legal - it is THX's copied firmware that is illegal.

your not allowed to modify or facilitate piracy,backups as most say are actualy pirates,nothing more and nothing less,in most if not all countries bar CANADA.he is exposing an hidden key (its hidden for a reason,security) you are not allowed to do that.ontop,its not his work,its owned by microsoft and its partners in this case.



liteon who are the supplier of the drives use microsoft code as they have to boot microsoft endorsed games.



this might come under supplying illegal material/code via email/internet.basicly smuggling the key/code into another country.let him go get legal advice and paperwork from a law expert and post the docs so we can see them,he cant,they will tell him,probably even in canada he aint got 2 legs to stand on and once he sends the email,the destination countries laws come into play,its not canadas business to tell us in the uk what to do.thats why even in his own country he is basicly in trouble,he never thought about it,he is preparing illegal material in canada to send to another country.if he was preparing hash if it waslegal there to send to uk would he be right?this has already been pointed out.



me i am small fish,my country dont give a damn about me.



microsoft wont be happy,1 person/group of persons making lots of money through this scheme he will be in big s**t when the law takes him into custody,they will extradite him to us most likely.but,if he refuses extradition order,he can still be detained,it might be 18 months he can avoid it but,he will get banged up in prison for that time,he gets rearrested in us off the plane,gos to court,gets trial,gos to prison.



its common fact that flooding the market is the best way to cover your tracks as there are too many footprints,even then they got a small chance to get someone but,now they isolated themselves and use bullshit laws from a country when noone gives two craps as we come from different countries.hence why i pointed out to someone,canada is not the start and finish,there is more than 1 country and set of laws in the world,so thats that.



so realy everyone should not buy this.noone should actualy say anything good or bad bar tell this person that the love of money that could have been spread and given others some more control will be his possible down fall.



we might not hear anything as he might just keep ducking under microsofts radar as well as the laws making us think that everything is fine when it realy isnt.

 

[f1geezer]

QUOTE(Iriez @ Aug 4 2009, 07:11 PM)

Because the security of the team and team members is the #1 priority. You want us to paint a huge red X saying "come arrest us" ? The team will NOT run its own server to offer decrypt services, even IF we have successfully decrypted the key data.

Iriez, whilst I have followed you and others like you for many years, and watched you all achieve many things that I could only dream of, I can't see why you would have to run a SERVER to offer decrypt services.  If you can decrypt ONE file, then you can decrypt them all.  If there is enough info in the .bin file to send it wherever and get the key sent back then there is enough info in the file for ANYONE, given the right algorithm, to decrypt it also and extract the key.

I would in no way wish to compromise the security of you or the rest of THX, however it is perfectly possible to release an app to do the decryption without compromising anyones security - you know this already.

You also know that your argument for NOT releasing is flawed......While I applaud your efforts to wait until the market is saturated with these drives, in the end this makes no discernible difference.  M$ will already be aware of foundmy's service.  Admittedly they will have to go back to Liteon and get a new firmware revision, but this is an expected process that has always being ongoing, and you know that.  I agree that by disclosing any "hacks" you are clearly showing the loopholes THX (or others) exploited, but is this not the "nature of the beast"?  It has always been this way.

It makes no difference to me anyway, my drive is not a liteon, nor is it flashed.  

There is a scenario I can easily think of whereby  it would be possible for someone to decrypt a dump and for M$ to easily identify where such an attack might have come from.  However, I cannot see how paying for it against releasing it into the wild can secure such an identity?

Its all a moot point anyway, it is the work of the hackers to do as they see fit with, kudos for working it out at all.

Just can't follow the logic of "we will get hit" but "foundmy won't".  Or if they do it won't lead back ??  Good luck with that.

Props & kudos to all that worked on this, you deserve it guys.

[FrostyTheSnowman]

QUOTE(xbox360sexual @ Aug 4 2009, 05:01 PM)

I've flashed 83850c f/w to an old Liteon and it works. The only thing you can't do successfully is enter your own DVD key, it doesn't work. I guess a new JF is required to alter the key algo or whatever.

I can also confirm that the 83850c firmware works on 74850c hardware.

However, I also found out (as did xbox360sexual) that the firmware does not work when keys are injected with the current version of JungleFlasher.

The 360 won't even fully boot to the dashboard with the spoofed 83850c firmware.

Hopefully the new JungleFlasher will be released soon...

[Neog2]

I dont have a problem with them charging. I understand it takes alot of time and man hours to do
what they are doing. But this is so so risky. For everybody that buys from them espcially the people
who buy more than once (bulk orders).

So lets just say in the perfect situation you buy from this company with a prepaid credit card that you paid with cash and you buy it on internet connection stolen using wifi - and a throw away wifi adapter so the mac address isnt tied to you<--- LOL.  So your techinally in the clear.

Lets say they get busted and whoever seizes all there documentation or whatever the gov does.
Nobody knows with 100% certainity what microsoft can and cant see.
Well I know they can see your console ID, and the dvd keys are unique they arent dumb.
Wouldnt take much to start tracing back console ID's to user accounts.
Wouldnt take much to check to see if the information linked to that live account is real.
Wouldnt take much to run the IP address that connects to live with that console ID.

And it definately NOW wouldnt be a stretch to assume microsoft logs all console ID's with dvd key
information as well. (Maybe not when 360 first came out but atleast since the 78 and 79 hitachi era.)

And if you dont know your console ID and want to see some interesting stats.
Check out this link  http://www.xbox.com/en-US/support/systemus...censemigration/
Then click the link Start the license transfer process now. (Of course you need to sign into your account.)

Just saying buying from that site is just way to risky. Hell I dont care that they are making a profit. Im just worried about them getting busted and bringing down everyone else with them. NOW THAT WOULD SUCK.

[shai12]

QUOTE(FrostyTheSnowman @ Aug 5 2009, 02:39 AM)

I can also confirm that the 83850c firmware works on 74850c hardware.

However, I also found out (as did xbox360sexual) that the firmware does not work when keys are injected with the current version of JungleFlasher.

The 360 won't even fully boot to the dashboard with the spoofed 83850c firmware.

Hopefully the new JungleFlasher will be released soon...

New version released JungleFlasher.0.1.65.Beta

[HipHopHead]

QUOTE(halleluia @ Aug 4 2009, 10:19 PM)

Hey can anybody tell me this

WHy the hell that the team cant get the decrypting software into a torrent site.....or any other

how are they supposed to get paid that way?  

[Iriez]

QUOTE(BoNg420 @ Aug 4 2009, 02:33 PM)

So Iriez what happens when this person pays for bulk keys and the foundmy.com doesn't come through or they only get you a couple of keys then ignore you.  What if foundmy.com gets shut down.  What if foundmy.com sells you a bulk of 100 keys and say you only get 30, and then there's a way released later on that people can do it on their own for free?

I'm just saying this site has so many bad reviews and I had a few problems with them in the past, how can people trust them with their money.  Sure people that pay with credit card can file charge backs but the people who pay with W.U. are SOL.  Also whats to stop me from ordering 100 keys from him and then go file a charge back and get my money back.  He has no proof of shipment and also he isn't gonna be able to explain well what he was selling.

I see about 3 million "what if's". Sorry, I am not here to philosophize with you on something that has not happened yet.

QUOTE(saleem_hacks_360s @ Aug 4 2009, 02:48 PM)

your logic defies every known logic.
microsoft just introduce a new piece of hardware ie:new dvdrom and thats the key operation outta the window.
they got more money than everyone in your city or town.
so them releasing it rather than grabbing as much money as they can before new drive comes out dont make sense bar they just want to make money by manipulating the market.
you think microsft dont know whats going on?
now explain that then?
thanks.
cos your explanation there is contradictory to itself.

 

You have the audacity to dispute my logic, and then put that crap on the plate? I dont even have a blue's clue as to what point you are trying to get across. Maybe its your grasp of the english language...if so I apologize. If not, then you need to clarify your rationalization skills and focus. rinse and repeat.

QUOTE(Sean87 @ Aug 4 2009, 03:04 PM)

When you submit your order to get the key, how long will it take to receive the key?
Will it be almost instantaneous?

Thank You

From reports, it has been almost instantaneous. Though I imagine it depends if foundmy's workers are awake/working/processing keys.

QUOTE(out4it @ Aug 4 2009, 03:08 PM)

Well, let me run this buy you, what if foundmy gets busted? Don't think for a split second that he won't snitch on whoever he can or tell as much as he knows to save his ass. you know the more people that know about something the more likely to get caught. Also,I really don't think its a bad idea to sell the key if you're the only one that can do it. The problems are:
1) foundmy.com is a piece of shit site. Had to many problems over the years with them. And anyone that even remotely folows the scene knows Terry's rep sucks. Not to many people trust him.

2)The price. I don't think people would bitch as much if the price were lower.

 I personally don't mind paying, only if it were handled in a more reliable way and done with someone with a rep. I think 42 is high, but it is what it is.

A valid question, but more what if's ? I dont understand how am I supposed to help you guys resolve these issues? What if I hit someone while drinking and driving and go to jail? What will happen to xbins? Likely it will either go away, or be carried on by another member. There are only two choices. Let us hope that whatever method he has achieved that he has atleast held a business partner in his inner circle so that the method may be distributed to someone else should that occour.

QUOTE(Ranger72 @ Aug 4 2009, 03:14 PM)

I will add a few more questions.

This guy has already proven to be unreliable at best. What happens when I send this dump info and get the wrong key back? Will they pay to replace the console that they killed with providing a bad or wrong key? If this scam is allowed to continue it is not out of the question that this issue may pop up at some point?

Also when this guy gets busted (only a matter of time) how can I know that this data wont fall into the wrong hands?

There is far better ways to make money from this than to go this rout. This whole thing is going to end badly for everyone.

If you get the wrong key back, I recommend emailing him and telling him so. Since you have the original .bin you have nothing to worry about. He can always reprocess the bin and if the md5's match but the keys are different then it proves that he made a mistake and can distribute the correct key to you. If you flash the drive with the wrong key, it does not brick the drive...you know that, i know that....everyone knows that. So i dont understand your question. It appears that you are trying to make a issue out of nothing if you ask me.

It has always been recommended to save your key data incase your drive dies. It is common practice.

However, this did not really take me to answer. The logic could have easily been figured out by anyone else.

[Iriez]

QUOTE(fatc2k3 @ Aug 4 2009, 04:28 PM)

"So in this instance WE have a alternative solution that is viable. Yes, it costs money....but whats more important is this: YOU CAN MOD IT."

so by that statement you are admitting you are part of the org that are charging for keys???

You are reading into it too much. By "we" I mean the public. You, me, anyone who wishes to mod their xbox. I've already made my statement regarding associations. Please do not make me delete your posts by antagonizing me.

I have cleaned up this thread a little. You are welcome to your opinion, but you need to express it in a constructive manner. The past is the past and the future is yet to be told. Those of you who keep saying "well foundmy this and foundmy that" .....I think foundmy probably understands the severity of the situation. Likely this is his top priority (I would hope). I think he will be very proactive and fair considering this. Until he proves us all wrong with this liteon key service, I think we should give the guy a break.

Even murders get let out of jail. If we can forgive murderers, i THINK we can give the guy a chance to do this right. Ok?

[prozac4312]

Is THX the new name for C4E? Or is this a different group?

[zyo]

QUOTE(Iriez @ Aug 5 2009, 05:01 AM)

You are reading into it too much. By "we" I mean the public. You, me, anyone who wishes to mod their xbox. I've already made my statement regarding associations. Please do not make me delete your posts by antagonizing me.

I have cleaned up this thread a little. You are welcome to your opinion, but you need to express it in a constructive manner. The past is the past and the future is yet to be told. Those of you who keep saying "well foundmy this and foundmy that" .....I think foundmy probably understands the severity of the situation. Likely this is his top priority (I would hope). I think he will be very proactive and fair considering this. Until he proves us all wrong with this liteon key service, I think we should give the guy a break.

Even murders get let out of jail. If we can forgive murderers, i THINK we can give the guy a chance to do this right. Ok?

Im sorry but
It looks too much of a coincidence when THX releases a hacked firmware the next day those foundmy guys released a key retrieval service. Not to mention the free ads they are getting now from the readme.txt in the firmware release. I am not really against charging for that service, its their "invention" and ppl who complain probably are making thousands from modding 360s (which makes them equally guilty as those foundmy ppl).


but I do hope THX gets less invloved in this kind of businesses (I know you are not assossiated, but why releasing the firmware when they are the only one BENEFITING from it?).

This post has been edited by zyo: Aug 5 2009, 05:19 AM

[xboxer360]

seriously people, they have the right to charge whatever they like for it, if you don't like it don't buy it. Yes I would love if it was free and I won't be paying $42 for a key however they are well within their rights to do such a thing, you're welcome to write your own program in your spare time and release it for free if you like..
Also $42 isn't that outrageous considering it's required for you to mod your xbox. We've just all been spoilt by the nice people at THX, keep giving them shit and they may just stop doing things for OUR gain without asking anything in return.
We're still better off now than we were a week ago. We have the CHOICE to get the key.

This post has been edited by xboxer360: Aug 5 2009, 05:26 AM

[Geen Rommel]

Not to mention Iriez confirmed the "foundmy method" worked, 6 minutes after the news was posted.

[Iriez]

QUOTE(f1geezer @ Aug 4 2009, 08:11 PM)

Iriez, whilst I have followed you and others like you for many years, and watched you all achieve many things that I could only dream of, I can't see why you would have to run a SERVER to offer decrypt services.  If you can decrypt ONE file, then you can decrypt them all.  If there is enough info in the .bin file to send it wherever and get the key sent back then there is enough info in the file for ANYONE, given the right algorithm, to decrypt it also and extract the key.

I would in no way wish to compromise the security of you or the rest of THX, however it is perfectly possible to release an app to do the decryption without compromising anyones security - you know this already.

You also know that your argument for NOT releasing is flawed......While I applaud your efforts to wait until the market is saturated with these drives, in the end this makes no discernible difference.  M$ will already be aware of foundmy's service.  Admittedly they will have to go back to Liteon and get a new firmware revision, but this is an expected process that has always being ongoing, and you know that.  I agree that by disclosing any "hacks" you are clearly showing the loopholes THX (or others) exploited, but is this not the "nature of the beast"?  It has always been this way.

It makes no difference to me anyway, my drive is not a liteon, nor is it flashed.  

There is a scenario I can easily think of whereby  it would be possible for someone to decrypt a dump and for M$ to easily identify where such an attack might have come from.  However, I cannot see how paying for it against releasing it into the wild can secure such an identity?

Its all a moot point anyway, it is the work of the hackers to do as they see fit with, kudos for working it out at all.

Just can't follow the logic of "we will get hit" but "foundmy won't".  Or if they do it won't lead back ??  Good luck with that.

Props & kudos to all that worked on this, you deserve it guys.

Who said foundmy is not at risk? Not me. Anyone who run's any type of console modfiication service is at risk under the DMCA. There are multiple reasons that it would be unethical and illegal to release the crypto involved with the liteon. We are not considering it as a option at this point and time. "The team becomes a target" is definitely not the only reason. Its one of many.

[antz1970]

well i would like to thank THX  for releasing this new firmware , personally if it had been me on the team and i had seen all the ungrateful comments over the last couple of days , i wouldnt have released anything!!

 what a lot of people seem to forget is that when a "free" method of getting the key eventually becomes available who's hacked firmware is it thats gonna be getting put onto the new drives? , yep , the same team a lot of people have been dissing lately , its sad that all the great work in the past gets forgotten about just coz of one incident