Post by: micksims on May 25, 2007, 02:05:00 PM
There was a post last week from a guy that had been running Ethereal on his network looking at the traffic going between his xbox and the M$ servers.
While it would be hard to actually spoof inline data going between xbox and servers, what about a proxy server running on a pc?
Basically you have a proxy service running on your pc that acts as a live server, your xbox then talks to the proxy thinking its talking to a live server. Meanwhile the proxy service is logged into the REAL live servers with a working console ID, then its a case of the proxy relaying information between the xbox and the live servers with the "modified/working" console ID information.
By ristricting access to the xbox from the actual internet, stops it talking directly to the live servers then all data has to get routed via the pc running the proxy service.
Now all we have to do is find some good programmers out there?
I personally am no programmer but I beleive the concept isn't impossible.
Hopefully this is a seed planted!! (IMG:style_emoticons/default/biggrin.gif)
Post by: J0YCIE on May 25, 2007, 03:16:00 PM
Post by: Durrik on May 25, 2007, 03:31:00 PM
QUOTE(J0YCIE @ May 25 2007, 10:52 PM) 
Call me a tard if you like, but what would this do? I mean, what can you learn or do by looking at the info being passed around and replicating live servers? - Just curious, not taking the piss.
Umm.. If you did this with a working console ID that was not banned from Xbox Live you could go on Live with your banned console as it would be a non-banned ID that was going through the Live service and hiding your actual banned console ID.
Post by: J0YCIE on May 25, 2007, 04:25:00 PM
Post by: telo{+} on May 25, 2007, 04:30:00 PM
You could log and log and log, then analyze and never understand half the packets being transfered. I'm sure its possible (of course it is)
But don't see it as very likely. Besides, I'd be stunned if there were no security challenges the console would have to answer based on its serial number or secret key.
Its very very unlikely.
Post by: micksims on May 26, 2007, 11:15:00 AM
There's bound to be some hackers out there with the brains the size of planets that can figure it out and I'm sure there's always the odd insider around.
I have mates in EMC that can give me insider info, I'm willing to bet my left nut theres a few hackers that know people in M$.
Post by: telo{+} on May 26, 2007, 04:34:00 PM
QUOTE
how the hell did they figure out the firmware hack?
DVD firmware isn't server side for starters. Its right in front of you with chips that have datasheets, and assembly that you can monitor, change, debug, etc.
QUOTE
I wouldn't know where to start.
Yea, fairly apparent.
Its not impossible, but its extremely unlikely. Oh, not to mention almost all of the Live data that gets transfered is encrypted. If you want to start, I would start with bank networks, probably just as hard but there are more people working on it (IMG:style_emoticons/default/smile.gif)
This post has been edited by telo{+}: May 26 2007, 11:35 PM
Post by: Heykrop on May 27, 2007, 01:10:00 PM
A verry smart member researched it and pointed out that unless you know how to spoof a KERBEROS challenge ammong others as well as do it within the required time then it could not happen.