Topic: Liteon 83850-v2 and Liteon 93450 DVD Key Can Now Be Dumped? (Read 1195 times)

Xbox-Scene · « **on:** November 29, 2009, 09:51:00 PM »

Liteon 83850-v2 and Liteon 93450 DVD Key Can Now Be Dumped?
Posted by XanTium | November 29 23:51 EST | News Category: Xbox360

(IMG:http://www.burstnet.com/cgi-bin/ads/ad9520b.cgi/ns/v=2.1S/sz=300x250A/

From team-xecuter.com:

Quote

There have been several news reports on Xboxhacker.net of users having success in dumping the keys of the newest un-moddable Liteon DVD drives. The methods posted so far are not for the beginner so do so at your own risk. The method seem crude at the moment, no doubt some easier methods will surface shortly. Remember with that DVD key you can install any flash-able DVD drive to that once un-moddable Xbox 360. Good job to all involved !

-Lift pin 101 and 122 (The MT Chip)
-solder a cable to pin 100, pin 101 and one to 3,3V
-use a 2-way switch which either connects 101 to 3,3V or to 100
-put the switch into the position so that it connects 100 to 101
-power drive
-start Dosflash, it will recognise the SPI with Status x72
-if you read it out now, it will just give you a .bin full of FFFFFFFF, but thats OK, this is how we tricked the Flash Controller to think the SPI is empty
-put the switch in the other position (so that 101 is connected to 3,3V)
-now read the flash

News-Source: team-xecuter.com | xboxhacker.net

Ree1981 · « **Reply #1 on:** November 29, 2009, 09:57:00 PM »

Well I'm not doing that, ever. Sounds about as safe and reliable as removing a TSOP.

iateshaggy · « **Reply #2 on:** November 29, 2009, 09:57:00 PM »

i'm so mad. i was told it would be after christmas before we would have a method.

nice work all involved.

damonnomad · « **Reply #3 on:** November 29, 2009, 10:04:00 PM »

This isn't to dump the key, but to dump the entire lite-on firmware.

The key is then derived from that of course.

It's likely a different (better?) method will be released soon.

Asskick · « **Reply #4 on:** November 29, 2009, 10:04:00 PM »

And now these method dump the whole firmware? Or just the keys? Would be nice to now have a way to revert back to stock fw.

Thanks for everyone involved on doing all these possible

Grim187 · « **Reply #5 on:** November 29, 2009, 10:10:00 PM »

QUOTE(Ree1981 @ Nov 29 2009, 08:57 PM)

Well I'm not doing that, ever. Sounds about as safe and reliable as removing a TSOP.

which is %100 safe and easy...?

nice works, gonna go read up on it and try it later tonight, thanks!

Rickets06 · « **Reply #6 on:** November 29, 2009, 10:15:00 PM »

Right on!

Good job men. Cheers

HipHopHead · « **Reply #7 on:** November 29, 2009, 10:19:00 PM »

ccfman2004 · « **Reply #8 on:** November 29, 2009, 10:21:00 PM »

It would be nice to have a way to flash back to stock.

On the other site, you apparently can simply put the dump into the source of Jungle Flasher and get the key.

alwaysonjohn · « **Reply #9 on:** November 29, 2009, 10:22:00 PM »

well you still need another drive till firmware gets released for this drive.
n/m folks on xboxhacker say that the 83850c firmware works.

This post has been edited by alwaysonjohn: Nov 30 2009, 06:23 AM

Aldanga · « **Reply #10 on:** November 29, 2009, 10:30:00 PM »

Nice. Thanks to all involved and people willing to potentially botch their DVD-ROMs. The thread on XBH is a bit too technical for me, but I'm reading it all and picking up what I can. I love to be around when these kind of advancements are made.

I'm going to keep my eye on this. It's all quite exciting.

dharrison · « **Reply #11 on:** November 29, 2009, 10:36:00 PM »

Nice work! Just wish that I had a new Lite-On drive to try this out on... So, if the method of reading the flash is the same for both drive revisions, what are the differences between decrypting the key from the 83850C V2 and the 93450C? Are we talking about a different algorithm or different key location?

Edit: Just trying to understand what pins 100 and 101 do, since I don't have a datasheet on the chip. I assume maybe one is a GND? I have to get a hold of one of these drives now.. It's killing me.

This post has been edited by dharrison: Nov 30 2009, 06:44 AM

d4rk5ky · « **Reply #12 on:** November 29, 2009, 10:43:00 PM »

Nice work indeed!
Now we just need to wait for some kind of tool to simplify this more and we're all set

thugnasty101 · « **Reply #13 on:** November 29, 2009, 10:44:00 PM »

M$ bans where good. but now we got something even better....

Aldanga · « **Reply #14 on:** November 29, 2009, 10:51:00 PM »

QUOTE(dharrison @ Nov 29 2009, 11:36 PM)

Nice work! Just wish that I had a new Lite-On drive to try this out on... So, if the method of reading the flash is the same for both drive revisions, what are the differences between decrypting the key from the 83850C V2 and the 93450C? Are we talking about a different algorithm or different key location?

Edit: Just trying to understand what pins 100 and 101 do, since I don't have a datasheet on the chip. I assume maybe one is a GND? I have to get a hold of one of these drives now.. It's killing me.

From what I've read the firmware isn't actually encrypted, so there's no decryption needed. You only need to find the location of the key.

100 is 1.8V, 101 is 3.3V and 102 is a GND according to fail's post in the thread on XBH.

Author Topic: Liteon 83850-v2 and Liteon 93450 DVD Key Can Now Be Dumped? (Read 1195 times)