Xbox Security Keys Changed

anth writes: "A couple a months ago we discussed some reverse engineering of the Xbox which discovered the security code. The last paragraph of this letter from Nvidia says MS changed the code, and that they had to write off chips with old code as a result."

Comments

Guess Nvidia didn't read the EULA

[SmallFurryCreature]

MS has the right to update and fix any software bit automaticcaly. :P

blamed

[mmThe1]

We never blamed Xbox.

Yes, Microsoft is the one. I never blame Windows or Visual Studio.

I doubt the key has changed

[Anonymous Coward]

I doubt they changed the key as it would be hacked just as easily as the last one. What they've probably done is changed the encryption method to make it harder to do so.. I mean if you're going to scrap a whole lot of chips, you better do it right.

Re:I doubt the key has changed

[martissimo]

that would be pointless, the MIT guy didn't even attempt to break MS's 128 bit RC4 encryption in the first place.

their weakness was that the data actually travels un-encrypted along a high speed bus on the mainboard for a very short run, and is checked after that run for a 32 bit "magic number" at the end of their plaintext stream... that is the spot he watched, he made a lil device that plugged into that bus and read the data as it streamed unencrypted.

unless they encrypted traffic on that bus it would be totally pointless, and the MIT guy who did the research also points out all the complications that doing so would cause (latency, power consumption, reliability)

his research (pdf warning) really is a good read if you havent gone through it yet.

geek girl

[t_allardyce]

"My girlfriend and I spent friday night in the lab together"

Oh man :( i wish i had a girlfriend like that. actually... i wish i had a girlfriend lol.

Re:geek girl

[Raul654]

It's time like these there should be a "+1, Pitiful" as a moderator option. Or, -1 maybe?

When will they start blaming Microsoft?

[Restil]

The next time they have to write off inventory because of a needed security change. Sure, hackers might not be the best friends to that contractual agreemnt NVidia has going, but at some point, they're going to get tired of writing off inventory and flushing money down the toilet just because Microsoft doesn't want people using the Xbox for ANYTHING but an XBox.

-Restil

Re:News for Felons. Stuff that's illegal.

[Anonymous Coward]

There is a huge threat of terrorism in America, the land of the free, right now and you folks are not helping by spreading this illegal material around.

First off, Lets get a "few" things straight.

1. I go out and work my ass off everyday to get money to buy things like CDs, Video Game Consoles, DVDs, DVD Players, etc....

2. I now OWN these items that I have purchased. I am told I can't copy my CDs, rip my DVD's to make a "backup" copy and burn it to a CDR media. Also, I am not allowed to modify any hardware that I own.. (Which by the way it sounds like to me.. That since I bought a computer that runs at a clock speed of 1.4GHz I am not able to overclock it to 1.6Ghz if I want to because it was sold to me as running at 1.4GHz, I dont like that.)

3. Soon if all of this DRM crap goes through I will not beable to install anything that is not approved by certain companies (i.e. Microsoft). Meaning I can't install Linux on a computer that I purchased with Microsoft Windows on it. Even though I OWN the damn thing. I won't beable to add new hardware as I want to, I will have to call Microsoft to let them know I changed my hardware configuration (Windows XP does this now).

When I BUY something, I like to know that I own it and can do anything to it I want. If I want to take it out back and beat it to a pile of junk (Office space senario with copy machine). I should be able to, If I want to change a few settings in the hardware, I should be able to. It is MINE. I PAID for it. I am NOT renting it. If I want to rent something I will go to Blockbuster, or go look for an apartment.

You dont rent your car do you? Atleast with a lease you have an option to BUY it after the lease is up. This is like "insert favorate car manufacturer here" saying you CAN'T change your exhaust on your car that you bought from us, even though you own it now, Oh yea BTW that factory radio you have, you are NOT allowed to put that in either. When you get a flat tire, YOU will put on said brand of tires or we will sue the crap out of you. Do you like being told that crap? I know I do not like it.

So please explain to me how this is "illegal", or any part of "terrorism"? Please also feel free to explain how this is "the land of the free", if I am not able to do any of the above.

- br0ken

Isn't it obvious?

[BandwidthHog]

Everybody's commenting about how all the parts of this story don't add up, that these megacorps wouldn't make such obvious blunders, or handle them so crudely. Hmm. While the old "follow the money" trick may not directly apply in this case, it's close enough.

What is the upshot of this incident, once you filter out all the distractions?

1) Hacker bypasses DRM-type security
2) Company "forced" to retool/change security
3) Direct, demonstrable monetary losses

They need to set precedents that exposing obvious security gaffes (unencrypted signal on the bus in this case) leads directly to major financial losses. Makes future prosecutions much easier.