Linux Running on Xbox Without Modchip!
NiteStar writes "It looks like people on xbox-scene.com and xboxhacker.net managed to run Xbox-Linux on a non-modded Xbox console.
It requires no soldering at all - you don't even have to open up the Xbox. They are using an exploit in the saved game handling of the EA xbox game '007 Agent Under Fire'.
It requires the original version of the 007 game and a memorycard you can connect to PC like the mega-X-key or datel's action replay. Apparently you can even build this memorycard yourself using a standard USB memstick." Frankly it seems like just soldering in the modchip would be easy, but big points for being clever!
Nah sounds good but not chance of flashing tsop without soldering, getting full linux to work. Backup games wont work either... yet
Who gets the big dollars for figuring it out? Technically they solved Lindows-boy's proposal.
Amazing. I am stunning that anyone even thought of pulling something so bad ass like this off.
So, does this qualify for the rest of the price money from that lindows founder?
Anyway, i think they should award a price to the person that finds a good reason to run linux on a x-box.
Fleur de Sel
Here's the announcement in a forum...
http://developers.slashdot.org/developers/03/01/04 /1522202.shtml?tid=156 .....
Looks like they are getting a lot of money
And no breaking the RSA too...
.ACMD setaloiv siht gnidaeR
Wait until they hear from EA & MS's lawyers.
Sorry all, although this is a great showing of skill, Linux's battlefield isn't the XBox, it's the Desktop. IMHO we would be better served to pour those energies into making a Desktop/Gaming/Application worthy OS.
Work on Transgaming, work on a driver interface that doesn't require a kernel rebuild each time you need to update your NIC, work on user experience, maybe you've noticed but we've got a lot of dumb users out there, and a Windows -> Migration path would be excellent. Hell, and NT server -> Linux migration path would be excellent too.
Sorry if this is too much of a rant, and my hat really is off the enginuity of the XBox-Linux developers, but I wholly feel it's a bit misplaced. *clink, clink*
3000 dead over past 2 years, still no free Palestinians, still
Im buying an EA game, even if it does cure cancer.
Are the evil pirates making a comeback?
.ACMD setaloiv siht gnidaeR
...I like real video game consoles better. Why should I buy that XBox? It is just another pathetic attempt by Microsoft to gain a monopoly in a promising market. But with time ppl will understand and another M$ INVENTION will be gone like so many before.
And why bothering getting things to work w/o modchip? Is there any XBox which doesn't have one, yet? Are un-modded Xbox are still available?
you'd think they had already created every type of bug. Well, in colaboration with EA they've just developed a new type of bug: THE USEFUL BUG. Now where are all those bashers that say that Microsoft never invented anything new?
-- Repeat with me: "There is no right to profits".
You mean they are still in business? I can remember having an action replay cartridge for my C64...
The owls are not what they seem
Free as in '007 Agent Under Fire'!
Its a real victory for everyone who feels that when you pay for something you own it, it doesn't own you.
Great news! This puts us that much closer to being able to run Linux on anything such as a PC! Oh, wait...
Cover your eyes and click this link!
ok all this is, is a buffer overflow exploit.
a link to the code is:
http://www.xbox-scene.com/007linux.txt
it is uuencoded
enjoy!
where a bug in a program
Ceci n'est pas une sig
It is too much of a rant. Doing some trickery with a 007 game and an Xbox to get Linux running on it is not grounds to talk about getting Linux on the desktop or an NT to Linux migration path. -1, off-fucking-topic *and* you're fired. Tough day for you, but at least I get to sleep with Shirley from accounting tonight. Yowza.
u r-bidding' rant to the end of this text on your way out the door. Thanks.
Also, please apply the usual 'people-who-work-on-software-for-free-don't-do-yo
And illegal. Don't be stupid, taco. The whole point of the non-mod xbox linux is that any other way is illegal in many places.
Question
http://www.ironfroggy.com/
Timing seems right for an April Fools joke...
This time everyone will agree when they announce that this bug should be thought of a feature.
Could you imagine a Soviet Beowulf cluster of these, all running Ninnle Linux? Truly a Ninnle icon!
Here is the website which has the 007 saved games, a movie file, and instructions. http://kotisivu.mtv3.fi/vilz/unmod/
What I'm wondering is how exactly it works? I'm sure the bootable save is probably altered to boot linux as opposed to the game, but how'd they do it?
Anyone have any _solid_ info?
It would be much better if they found a magazine coverdisk to exploit. If EA's unintentional bug isn't against some rule it could be used to sell at least one magazine per X-box converted to linux...
Me thinks Cmdr-Taco has never tried to solder wires onto surface mount components with carpel tunnel or a triple latte without a good iron, magnifing glass, camera and robotic arms.
It isn't easy... just hope those components are caps or resistors that aren't important. I would much rather use software than hardware... Now if only we could crack a key?
Karma Clown
I couldn't find any references to Ninnle Linux anywhere but Slashdot. URL?
Will I retire or break 10K?
1. Eat breakfast at Kiev
2. Walk down Second Avenue towards St. Mark's Place
3. Look for those people selling used books and other junk on the street
4. Look for the broken toaster oven on the blanket
5. ???
6. Penis!
I prefer using the CD only system... ..mostly cause the Gestapo won't come after me for ordering a microchip.
I'm guessing that it's just a "troll" (in quotes, as it isn't really a troll...). I've seen these a few times before they get modded down *shrug*.
Is it a cheaper way to have a better Linux-driven PC at home? How much cheaper? Or how exactly better?
Is there any functionality I need for my personal Linux box that I can find in Xbox hardware, but not in any commoditiy PC? If so, does that xbox-specific functionality has a driver? If so, are there any Linux applications supporting it?
I know why Linux came from the first place, why it came popular in the server room, and why it's getting more and more popular on home and corporate desktops. I even know why Linux on IBM mainframe, RISC-based server and workstations, as well as many embedded devices. It saves money, it brings features. But all that is supported by applications. Are there any xbox-specific Linux applications?
So, why? Why anyone (besides xbox hackers) need Linux on Xbox?
----- Right tool for the right job. But not vice versa.
Less is more !
You know, we've always been able to run linux on a game console. It's called the PS2 Linux Kit. Is it not cool enough for you that it's not some backwards hack? I find it very interesting that the XBox community is so huge and diverse yet the PS2 community is composed of a very small group of serious individuals (mostly people who really want to make games bad).
Think if we had half of those people reinventing the wheel on Xbox hammering away at the PS2 instead.
I guess I should take comfort in knowing I don't have to deal with 1337 h4>0rs and their demands for inane software. The Xbox "hacker" community is all about piracy afterall.
And to think...I bought my copy for GC....::slap::
I was pretty skeptical at first, considering when I first saw the forum post, there was only like 6 replies, and all were negative. But, apparently it's real. Overall tho, it may be a cool trick, but it's not going to eclipse the major uses of modchips. Backups, flashing BIOS, addon BIOS, etc..
/me surfs on over to ebay and orders up a $100 xbox =)
-------
"In times of universal deceit, telling the truth becomes a revolutionary act."
-- George Orwell
** Also, Gentoo would be optimized for the rest of the hardware. Most applications, for example, would be compiled without floppy support because the X Box doesn't have a floppy: likewise, binaries like 'rm', 'grep', and 'mozilla-bin' wouldn't need to be bloated with PS/2 support as the X-Box is an exclusively legacy free technology and does not support PS/2, using USB instead.**
now that sounds intresting but is totally stupid way of thinking just asking for flames, and dear mr. clueless/troll, if you really are fan of gentoo why don't you just shut up about things you don't know about? your way of thinking and presenting it just would keep any more experienced people away from gentoo. you really think rm, grep and mozilla-bin need to access the input hw themselfs, or that most applications even need to know that they might be talking to a floppy? and that you 'compile ps/2 support' into _them_?
you can compile stuff on other distros too, on _ANY_ distro, and set the optimzation flags to whatever you fancy, most that matters is the kernel anyways.
as a sidenote there is a gentoo-for-xbox project going on(well, on such system i guess they would have brains and have _all_ the stuff pre-compiled since the hw-set doesn't change, and it would take ages to compile everything with that pesky 64mbyte memory it has).
world was created 5 seconds before this post as it is.
The next big advance will be somebody doing power consumption or timing analysis while the xbox is checking (bad) signatures, and teasing out the key a bit at a time. Then you will be able to sign anything you like. (Look up Markus Kuhn's papers.)
Any need to read further than the subject line, and I wonder just what you're doing here in the first place.
Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
it DOES boot from cd
As far as I know, "Agent Under Fire" is a DVD, not a CD.
Will I retire or break 10K?
Video 'proof' of the exploits can be viewed here and here.
You can also download the 007 save games that are required to run this exploit and view additional instructions on how to get it running.
"I filter at +6, and have yet to miss out on an important comment." (#822545)
so there IS a use for that game! seriously, agent under fire is quite possibly the very worst FPS-style game EVER made, so i actually feel kind of bad that people (albeit a small group) actually has a reason to support such a piece of crap.
but on the bright side, i think march's issue of computer gaming monthly has a nice guide for what you can do with your worthless game disc once you realize it is NOT to be placed in your console (or PC) ever, EVER again!
Gentlemen...BEHOLD!
-Dr. Weird
Doesn't this make it illegal to sell "007: Agent Under Fire" since that is effectively the circumvention device?
I'm trying to teach myself to set people on fire with my mind... Is it hot in here?
**Have you even read the Mozilla source code? Around 75% of it is dealing with issues like PS/2 vs USB keyboards and mice, floppy support, etc. Do you think that an average app is going to deal with /dev/psaux and /dev/input/mouse0 when the two use entirely different protocols?**
average app is definetely not going to deal with them directly, so why would mozilla, i would rather say that around less than 1% of it is the part that even talks to the host os?
** This is why we need a Gentoo approach to everything. When one compiles a binary for everybody, the binary has to support what everybody has. When one compiles a binary for one person, that binary only has to support that one person's hardware. No redundancy, no cruft, no bloat.*
in the world of xbox everybody has the same hardware.
and no, i don't have read the mozilla source code(fully, but then again, who has?), but i would guess most of the bloat in the source comes supporting a wide range of architechtures to compile for and from having the user interface in xul(and generally, being a big hunking pile of programs and capable of rendering the pages correctly). and i except it to talk to the operating system(/ windowing system) rather than to talk straight to the hardware to not break everything when hardware changes and to generally keep it in good check.
i don't run plain mozilla, i prefer phoenix(because it's faster, more lightweight, without the things that _really_ bloat mozilla, no extra crap).
besides, the systems where running gentoo for the sake of optimizations would be really worth it are too slow to compile on, otherwise it's just tinkering above general optimazation flags..
world was created 5 seconds before this post as it is.
geez! all you gotta do is turn on the x-box, pull the memcard in and out 5 times, do 10 jumping jacks, slap your ass, and chug a beer. seriously, it amazes me that anyone would mess with an x-box that long to uncover something THAT obscure, and then use it to run linux. why are they so obsessed with running linux on the x-box? i know that hacking stuff is fun, but think about it: slow processor, good video card but you'll never have a driver for it, bastardized USB, small HD, shared RAM (and not very much of it)...the list goes on. just build a little budget PC! you can easily and cheaply build a mini-ATX that can smoke the x-box.
I've been taking note of when a system does something unexpected and putting it to "good use" since the 60's. It's a primary form of hacking. Many bugs, like this one, are useful, just not useful in a way the author intended or may have wanted.
I'm an American. I love this country and the freedoms that we used to have.
I haven't followed the X-Box hacking projects out there, but if this is the first person to try a buffer-overflow on an existing certified game then I'll bet we're onto something here. With the plethora of games coming out that are coded under tight deadlines I'd imagine there's going to be a rather large number of buffer overflows found in stuff like this. The reading of a saved-game from the memory chip is a great one. I'd imagine you could do something similiar when games need to pull data from the hard drive too. On top of that, with things going online there's a high probability (in my mind) that buffer overflows will exist within the networking code.
Now, there are two ways MS can entirely prevent this. One is to re-structure the X-box OS so that buffer overflows just cannot occur. There are theoritical techniques for this if I'm not mistaken; but nobody's got a horribly good reason to do this. MS does now I guess.
Or, MS could do a security audit on all the code for a game before it comes out and verify that it's free of buffer overflows. Baahahaha!
http://www.xbox-saves.com/ is where you can find more info on the Mega X-Key mentioned in the article, and they also have the save needed to get linux going in their saves archive.
The only way to protect against it is to provide an API for writing to the memory card/hard drive that closes off all possibilities for buffer overflows, and then lock out people from "programming the metal" directly.
...sales of the 007 game skyrocket. EA has no explanation. "I guess we just made a really great game," a spokesperson announces.
People are asking "Why Xbox Linux?" and others are responding with "Why not?", well I have a legitimate reason for wanting Linux on an unmodded Xbox.
My Xbox is going back to MS as they have attempted to fix a problem several times and have so far been unsuccessful. This time, they're considering swapping systems for a new one, which I'm fine with except for one thing: Loss of saved games.
They will not just swap drives as it would save them at least 5 minutes of work, so I will lose all of my info on the HD.
With Linux running on my unmodded Xbox, I could possibly FTP the data elsewhere and restore it on the new system. This makes so much sense to me that I wonder why there is no way of doing it by default.
Microsoft's idea is to purchase their Memory Units and backup this way. Problem is, since each Xbox comes with a hard drive, no developer tries to make the smallest possible size save file. I would need several MUs to backup my data. Plus, some files cannot even be copied to a MU which means they cannot be backed up at all.
Some form of backup should exist to relieve this problem. I think that this could be it.
So, lets say I'm running linux on the xbox this way - all fine and dandy, I can run emus, and play around with linux..... But, once I've done so, can I still play normal games? I mean, I still think there are SOME xbox games worth playing!:-)
Am I jumping the gun here or does this opens up the beautifully ironic possiblity of using untold numbers of un-modded X-Boxen to find the Private Key that is used to sign X-box code ? I don't know about you but I'm off to get the hardware and the game to give this a try...
1. Release a game with buffer overrun
2. Leak information to XBox-Linux community
3. Profit!!!!
They could even get the lindows.com award money if they did it right.
I can understand the coolness factor - the need to hack something. It just seems...ironic, I guess, that a community so vehemently opposed to Microsoft feels the need to acknowledge Microsoft at every turn. I would think that every little step independant (i.e. NOT directly opposed to Microsoft but, rather, truly original, unique, groundbreaking, etc.) would be much more impressive. As long as Microsoft is the "leader", in that the Linux community feels the need to mimick Microsoft, then Microsoft has a legitimate claim that they innovate (ignoring the obvious parts that were embraced and extended) - if the Free Software groups feel the need to mimick and follow Microsoft at every turn, then obviously Microsoft is doing something right.
So I guess that kind of answers the question I asked in this post on whether Palladium will be as secure as they think or not.
... and is that not "illegal?"
..." However, this is America. :/
The proper phrase should be "should not be illegal to modify equipment
Not likely that MS would care. MS wants control over 2 things:
1. Are you able to pirate games?
2. Are publishers able to sell Xbox games without paying license fees?
This is a cool tech hack, but I don't think it easily enables either of the above. Hence, I don't think MS is going to whip out the lawyers (at their own expense, and incurring negative publicity) to fight this.
EA Games. Challenge DMCA !
The popular game "007: Agent under fire" was pulled from store shelves today, under threat of legal action from microsoft.
The software was found to be illegal by the standards of the Digital Millenium Copyright Act, in that it allowed users to potentially run bootleg computer games.
Microsoft's decision was backed firmly by the RIAA, MPAA..
What? Me? Worry?
a) you should start worrying about the heat death of the universe before you worry about breaking that key unless there are some SERIOUS fucking leaps in number theory sometime soon
b) who the fuck cares now? this is the end to that means
This depends on whether or not you are actually good at soldering. I for one have destroyed many PSX's in the past due to my clumsiness. Regardless, CT forgot one important fact: if you mod your XboX, you will _permanently_ (well, without some creative hacking and another Xbox, which, in having one already defeats the purpose) lose the ability to use Xbox Live, as the Xbox's unique,internal serial number will become banned.
You've missed the point of using a public-key signature checking algorithm. The Xbox doesn't have any secrets you can "tease out" by this or any other means - AIUI the key the Xbox uses to check signatures is already well known. You might as well do the signature checking on your own PC and do the timing analysis on that for all the good it'll do you.
Xenu loves you!
I'm paraphrasing one of his lines in the FAQ:
Q: What if Microsoft removes Agent Under Fire from the shelves?
A: Don't worry, AUF is one of many games to have this bug.
What I don't understand is why he would pick AUF as the main game if he had multiple choices, and give EA a software sales boost? That's not "screwing MS" (which I'm sure is half the reason for this whole project), that's screwing the entire Xbox gaming community who have to endure horrible ports of horrible EA games with horrible graphics.
Why not a Sega game? Why not a Tecmo game? Why not a game from any other REAL developer who properly support the Xbox with games they work hard on, instead of the videogaming equivalent of pop music that EA is?
I'm paraphrasing one of his lines in the FAQ:
Q: What if Microsoft removes Agent Under Fire from the shelves?
A: Don't worry, AUF is one of many games to have this bug..
What I don't understand is why he would pick AUF as the main game if he had multiple choices, and give EA a software sales boost? That's not "screwing MS" (which I'm sure is half the reason for this whole project), that's screwing the entire Xbox gaming community who have to endure horrible ports of horrible EA games with horrible graphics.
Why not a Sega game? Why not a Tecmo game? Why not a game from any other REAL developer who properly support the Xbox with games they work hard on, instead of the videogaming equivalent of Nsync music that EA is?
If you took every Xbox that ever has existed or will exist and set them working 24/7, it would take trillions of years to find the key.
It's hard to be religious when certain people are never incinerated by bolts of lightning.
THIS IS MODDED UP? holy fuck, I'm not even reading to harass anymore
So do these guys get the prize? Wasn't there a cash prize for Linux without a modchip?
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
OK, you're right that it would take an inordinate amount of time to search the "entire" key space, but statistically speaking it's still possible to get "lucky" and find the key before you've exausted the key space. I know it's optimistic, but stranger things have happend IRL. I beleive the EFF's DES cracker found the correct key after seaching through about half of the DES keyspace... Sure 2048-bit RSA is a *MUCH* harder problem, but it doesn't mean we shouldn't try : )
Im my day we had to walk to work in the snow and up hill both ways. We didn't have any fancy USB data keys or buffer overflows to use and had to enter boot loaders through the computers key pad by hand in Octal!
Go back and read the post more closely:
"...Basically there is a bug in the save handling, which has been found in several games, I just took 007 because only one save is needed for both US and PAL game version - for other games you usually need two (or even more)."
I hope this guys aren't from/don't have plans to go to the "Country of Freedom", or they could be arrested for exploiting and releasing this.
(Not that anyone's likely to read this by now..)
The original hacks to run assembly programs on TI-85 calculators was to mess with the pointers used in the custom menu. They only got set with a backup, so that's why ZShell et al. had to be sent as a full backup.
"'Tis great confidence in a friend to tell him your faults, greater to tell him his." --Poor Richard's Almanac
The odds of coming up with the right key during your lifetime are significantly less than the odds of gaining psychic powers after being struck by a lightning bolt thrown by a flying pig playing Duke Nukem Forever while winning every current lottery similtaneously. It would be a waste of CPU and electrical power to even begin to try. Use cycles on something at least remotely useful, like Seti@Home, Folding@Home, or even distributed.net.
It's hard to be religious when certain people are never incinerated by bolts of lightning.
Look at the Microsoft.. atleast EA will sell alot of there crapy game
You're not being very optimistic : ( I'm amused that you've included seti@home as an alternative... Many of the arguments that you posit against trying to crack the signing keys have been arguments against SETI too. It seems that you're making a value judgement here and that's fine with me, but I think I'll be doing both for a while. Thanks for the encouragement : )
btw, whereis .iso image?
# I want to buy 007 to run Linux ?
# teach me how to run this on japanese xbox? :)
a) No one knows if there's life out there or whether we can detect it, but the chances are a helluva lot better than the infinitesimal probability of cracking the xbox
b) If Seti ever succeeds, not neccessarily within your lifetime but within the lifetime of the human race, it would probably completely change the lives of every living person. For the xbox key to make any difference at all, it would have to be cracked within the next ten years or so.
Now, don't let me tell you what to do with your CPU, but Seti's improbability/benefit ratio looks a lot better than the Xbox's.
It's hard to be religious when certain people are never incinerated by bolts of lightning.
I want to run Linux on a hacked xbox with the sole purpose in life is to spam M$ with "F*CK YOU BILL" emails on a relentless schedule.
Let the games begin!
HA HA!!!!!!!!!!
Parent-parent mentions the single-most annoying XBox misconception: that you can somehow get a secret key from the XBox.
Yes, it maybe can, but only if a system is bug free (without bugs, which can be exploitable). But if you have bug free system, then you do not need Paladium to protect you from viruses/trojans/crackers/... .
hany
BHahahahahaha.....surely you jest?
This kind of reminds me of Super 3d Noah's Ark for the Super Nintendo. On that game, you had to have an existing SNES game (I think any one would do) and plug it into the top of the Super 3d Noah's Ark cartridge, sort of like the Game Genie. I imagine this had something to do with the fact that S3DNA was the only unlicensed SNES game, so it needed another game connected to make use of its licensed hardware. You could look at Agent Under Fire as the licensed game which is needed to run the unlicensed program, Linux.
Are you trying to tell me there's no such thing as Ninnle Linux?
What's this on my desktop then?
25,000,000,000 ~= 25gigs not megs. If you're going to troll, at least get the basic shit right
I really don't wish to know :/.
Your loss then.
BOFH excuse #247:
Due to Federal Budget problems we have been forced to cut back on the number of users able to access the system at one time. (namely none allowed....)
- this post brought to you by the Automated Last Post Generator...