Post by: theurn15 on September 16, 2008, 01:45:00 AM
Some news from Geremia over at XBOXHacker.
Got a drive as gift for testing (thanks Raiden)
Some small update:
it's an embedded spi flash, exactly an MX25L2005 and dosflash1.6 can write it.
The bad is that you can access it only if it's completely erased, this seems to be the "check module" mentioned into the patent
About reading the fw, i can just get 3-4 256bytes chunks in a tricky way, but can't have a complete dump this way.
reading dvdkey: ok
reading unique drive data: ok
erasing flash: ok
writing flash: ok
reading flash: missing
Post by: darkshadow2k8 on September 16, 2008, 02:40:00 AM
Post by: m3kal on September 16, 2008, 12:46:00 PM
*** ok found it!***
This post has been edited by chorizo1: Sep 17 2008, 02:26 AM
Post by: sha on September 16, 2008, 02:31:00 PM
Post by: moreniu on September 16, 2008, 05:13:00 PM
Post by: vcs1988 on September 16, 2008, 05:55:00 PM
i'm new at this... but i have been reading and this is really big..
now we just need a firmware.
no rush.. take your time.. i would like to have it already... but its not like that, so.. take your time.
Post by: Bazdoctor on September 17, 2008, 10:37:00 AM
Post by: Antman1 on September 17, 2008, 10:52:00 AM
Post by: devz3ro on September 17, 2008, 02:01:00 PM
Take Johnny's dumped firmware, hack it, replace Johnny's key & drive serial information with Bob's, and then erase and flash the newly created firmware to Bob's box. I don't see why this wouldn't work but I've been away from the scene for quite some time...
-devz3ro
Post by: Antman1 on September 17, 2008, 02:02:00 PM
QUOTE(devz3ro @ Sep 17 2008, 03:01 PM) 
To make this work right now you should only need one dump of the same version firmware via an external programmer. If this drive is anything like the benq & you are able to grab the key and drive serial information, you are already golden.
Take Johnny's dumped firmware, hack it, replace Johnny's key & drive serial information with Bob's, and then erase and flash the newly created firmware to Bob's box. I don't see why this wouldn't work but I've been away from the scene for quite some time...
-devz3ro
problem is what we get for spoof info and key dumps is not the full firmware. it is only snips. Only key and spoof info. No one has been able to dump the drive yet.
Post by: ghost_recon88 on September 17, 2008, 03:28:00 PM
QUOTE(Antman1 @ Sep 17 2008, 04:38 PM) 
problem is what we get for spoof info and key dumps is not the full firmware. it is only snips. Only key and spoof info. No one has been able to dump the drive yet.
Right but what he's saying is we only need 1 valid bump, then everyone else is set. Everyone can download that copy of the dump, insert their own key and spoof info, then flash their drive.
Post by: XmodsUK on September 17, 2008, 04:33:00 PM
Post by: ghost_recon88 on September 17, 2008, 06:16:00 PM
QUOTE(XmodsUK @ Sep 17 2008, 06:33 PM)
That only works till Lite_on tweak the FW, then everyone will erase their FW v1.2 and flash over it with V1.1...dead drive.
Well then they'll dump that the same way they dump v1.1 (IMG:style_emoticons/default/wink.gif) Only time a whole new dump method has to be developed is when its a completely different model drive, and even sometimes then old methods work. It all depends on where the flash ROM is stored and how it is accessed.
Post by: mondoman22 on September 17, 2008, 07:48:00 PM
Hey all,
I am new to this forum but i am not new to computers and security...
I have read about this Liteon drive.. watched all the posts and you know
it went from being unhackable to dumping the key and now being able to write
to the rom. A bunch of people said it is not flashable well looks like it is..
My point is that There are no levels of security only levels of Insecurity.
It just takes time... There are alot of talented people here that are working on this
it seems and believe me if it is engineered it can be reverse engineered if not
why would they cut the soldered traces for the tx and rx why would they put epoxy around the
chip.. to all the people that said it can't be done I think you need to re evaluate what you have said...
They would not have gone to all that trouble if there wasn't a weakness... I applaud the guys doing this
i wish them luck and if wasn't for the few working on this we would not be we were are with this system
I am off my soapbox now...
Have a good one
Mondo
Post by: theurn15 on September 18, 2008, 12:20:00 AM
QUOTE(Bazdoctor @ Sep 17 2008, 05:37 PM)
Liteon Drive Is Flashable Update = Very misleading topic name
(Liteon Drive Is Flashable Update = Very misleading topic name)=you didn't read about the hackabillity
of liteon drive in the internet.
if you enter the following line in google: "liteon xbox masked rom"
the results will be many essays written by experts who say that the liteon drive is not flashable because it's not writable at all, thats because it has a masked rom that cannot be accessed or written at all.
so when geremia says he can write,erase and partially read the flash I think it's agreat progress
Post by: ThomasQ on September 18, 2008, 08:17:00 AM
This post has been edited by ThomasQ: Sep 18 2008, 03:17 PM
Post by: calloused labia on September 18, 2008, 09:14:00 AM
QUOTE(ThomasQ @ Sep 18 2008, 10:17 AM)
This is some good news ( for us n00bs who just flash the drives 
)!!!. Lets just hope the combined effort of Geremia, C4eva, and Team Xecuter will provide us that firmware and flash-method. At the rate these developments come pouring in', I hope to be flashing LiteOns for christmas 
)!!!. Lets just hope the combined effort of Geremia, C4eva, and Team Xecuter will provide us that firmware and flash-method. At the rate these developments come pouring in', I hope to be flashing LiteOns for christmas Agreed!
Post by: 360repair on September 18, 2008, 12:59:00 PM
go Geremia!
hope the fite on gets hacked soon
Post by: Juvenal1228 on September 18, 2008, 02:56:00 PM
Post by: ILikeMeat on February 02, 2020, 04:17:00 PM
QUOTE(Juvenal1228 @ Sep 18 2008, 04:56 PM)
this is my inner noob speaking here but would it be possible to take the bios chip out of the DVD drive and dump it with another drive or "special" device?
No not possible. The firmware chip is inside the controller chip, and the controller chip decides how and if to read it out to you, so you can't just dump it, it has to trigger a dump and give you the data. The controller chip is the middle man...
Post by: 360repair on September 18, 2008, 04:58:00 PM
QUOTE(ILikeMeat @ Sep 19 2008, 12:17 AM)
No not possible. The firmware chip is inside the controller chip, and the controller chip decides how and if to read it out to you, so you can't just dump it, it has to trigger a dump and give you the data. The controller chip is the middle man...
hopefully the middleman will get pushed out the way soon
Post by: theurn15 on February 03, 2020, 11:06:00 AM
Post by: Juvenal1228 on February 03, 2020, 05:23:00 PM
Post by: DaShiZNiT on February 03, 2020, 05:38:00 PM