Slashdot Mirror

← Back to Stories (view on slashdot.org)

Xbox Linux Made Possible Without a Modchip

Posted by CowboyNeal on from the well-and-probably-software-piracy-too dept.

An anonymous reader writes "Free-X have released an exploit for the Xbox that will let you get Linux on the machine without any hardware mods at all... Microsoft is already threatening them with legal action. Here's the Free-X statement. Free-X say they had been trying to contact MS for a month but were ignored, which is why they've released the exploit. Should be interesting to watch this one."

57 of 996 comments (clear)

  1. Woops, too late by Iscariot_ · · Score: 5, Insightful

    Too late for Microsoft. It's been released. No way of stopping it. Just like Nintendo had no way of stopping UltraHLE.

    --

    Go here for teh [sic] funny.
    1. Re:Woops, too late by Anonymous Coward · · Score: 5, Funny

      Learning is not "illigal"?
      Perhaps you should exercise your "rite", then.

    2. Re:Woops, too late by EzInKy · · Score: 5, Interesting

      Though I agree with some of what you say the bottom line is the purchaser of an X-Box owns the machine, not Microsoft. He can do what ever he wants with the hardware once he has the sales receipt in his hand.

      --
      Time is what keeps everything from happening all at once.
    3. Re:Woops, too late by Dr.+Evil · · Score: 5, Interesting

      "Give us what we want that's not in your own best interests or we'll tell people how to break your machine and potentially lose more money by having people buy XBOXes for uses other than buying the games that make them money."

      It's a little more like:

      "You know that problem you wouldn't help us with? Well, we figured it out, but we don't think you'll like the solution. Can you help us with an alternative solution which is in your best interest? No? Ok, then we'll just do it our own way."

    4. Re:Woops, too late by Geek+of+Tech · · Score: 5, Insightful
      Did Parent actually read any of the articles? I believe in Free-X's statement said...

      /* Beginning of quote */

      Since our attempts to contact Microsoft have become public knowledge our team has been accused of attempting to extort or blackmail Microsoft, this is not true as we have made every attempt possible to make contact with Microsoft to offer the following:

      - A complete summary of all hacking technologies (many of these technologies have not been released).
      - Source Codes.
      - All attacks which have been developed but not yet released.
      - To sign a Non-disclosure Agreement regarding our discoveries.
      - Further research on exploits, which would be exclusive to Microsoft.
      - Full names of all hackers involved upon agreement of legal protection from Microsoft.
      - Assistance in the development of future security for the XBox by working with Microsoft.

      For the exchange, we were requesting but not demanding the following:

      - Complete access to all documentation (chipsets, video etc.) to assist in developing a better Linux for the XBox.
      - A signed Linux loader.
      - Protection from Microsoft or support if any organisation/government attempted to prosecute members of our team.
      - Refunding of the cost occured during the agreement period.

      /* End of Quote */

      I think the threat went more like You listen to us tell you about the security vulerability that would probably tick off content creators or we'll tell everyone else in hopes to get you to fix the code.

      Do you get mad when someone discovers a flaw in Internet Explorer? Oh, but this is different, they're blackmailing Microsoft...

      Once again quoting - "For the exchange, we were requesting but not demanding the following:... A signed Linux loader.

      From Parent - Frankly, I don't see how Free-X would have felt that they were approaching MS in a reasonable way. They offered to give microsoft all the code and to sign a non-disclosure agreement. They requested in exchange a linux boot loader. They asked. They didn't say "Give us what we want that's not in your own best interests or we'll tell people how to break your machine and potentially lose more money by having people buy XBOXes for uses other than buying the games that make them money." The bootloader was optional. They would give Microsoft the code either way. Microsoft wouldn't even listen. So what part was unreasonable? Disclosing the code, because Microsoft wouldn't listen? People do that all the time. Asking for something in exchange for work? Oh yeah, that unreasonable. Especially when you relize they were just asking.

      --
      Stop the Slashdot effect! Don't read the articles!
    5. Re:Woops, too late by Famatra · · Score: 5, Informative

      Up the Mod of the parent since it is entirely correct.

      They did not "blackmail", as the last Slashdot article ad-libbed in its summary, Microsoft but gave them every opportunity to cooperate in creating a signed Linux loader.

      As well the released code by X-Free does not allow you to pirate games. (Although by modifying their release and using their same technique it could be.)

      As well it must be remembered that there is no EULA for hardware, we are freely able to use hardware we bought anyway we choose to. As well, people are legally able to reverse engineer the hardware, much the same way that other game consoles (NES, SNES, N64, PSX) were reverse engineered to create emulators like BLEEM.

      P.S. Remember that it is likely the computer you are using now (IBM-CLONE) would not be here without the work of people reverse engineering the original IBM desktop computers.

    6. Re:Woops, too late by EvilAlien · · Score: 5, Insightful
      As far as I'm concerned, the XBox is a "cheapy PC".

      What are the odds of the courts saying the following to Microsoft?

      "You sell your systems at a loss... that is a bad business decision, and it is not the court's responsibility to protect you from the consequences of your mistakes. Its a business gamble to rely on sale of an accessory to a product to make that business unit profitable. The consumer owns the product when purchased and has the right to decide how they use it, you are infringing on their rights but limiting that choice. We will not protect your poor business model."

      In other words, "suck it up, princess".

      --
      perl -e 'print $i=pack(c5, (41*2), sqrt(7056), (unpack(c,H)-2), oct(115), 10)'
  2. After reading the articles... by RobPiano · · Score: 5, Interesting

    It seems we've had a lot of false and misinterpreted information about this team and their exploit. I don't have an x-box and only somewhat understand why their exploit would work (integer underflow..?), but it atleast sounds interesting. Anyone on slashdot who gets it working please post a verification.

    As far as the team... I think they should have submitted their findings to a legal firm of some kind instead of this not-so-holy covert behavior. Their behavior will only lead to troubles in court.

    Atleast they'll have $100,000 to help them out, I think they'll need it.

    Rob

    1. Re:After reading the articles... by Eyston · · Score: 5, Informative

      why their exploit would work (integer underflow..?)

      It looks at the file. The first four bytes are how big the file is, including its own size. So if the file is 16 bytes long, that is 4 bytes of the header and 12 bytes of data. That first four bytes reads 16.

      So the XBox reads in the first four bytes (16), takes 4 away and then knows to look for 12 more bytes (16-4).

      Apparently it uses those first four bytes (16) to allocate the memory. It then takes 4 away from that value (4 from 16 is 12) and reads those bytes (next 12) into memory.

      Well, if you feed it 0..3 instead of 16 in that example, you get an underflow. It sees those first 0..3, takes away 4, and gets a very large number (whatever the maximum is, assume 8^4). So it then writes large amounts of YOUR data to memory even when only 0..3 bytes are allocated (or it is smart and will only do 4). So now you have YOUR own code/data in memory that isn't for that file.

      I think. Fuck if I really know.

      -Eyston

    2. Re:After reading the articles... by smashr · · Score: 5, Informative


      It's too bad they probably won't get the 100k. In order to get the files onto the xbox, you need to use a prior exploit that DOES require something(007 save, swapping HDD etc)

      Not at all. You do not need to make any modifications to the hardware to use the 007 hack. If you have a memory card with the savegame on it, then you can simply copy that to the HD and load the game. This boots linux with an ftp server. You do NOT need to open the box or solder the pins; you only need to do that if you want to flash the TSOP and effectively mod the bios. Once you use the 007 trick you have temporary ftp access to the box - you can ftp over and replace the font files. Now the box is as good as modded and no one will know the difference. In addition this is safer than flashing the TSOP because the BIOS is simply intercepted in hardware.

      So in short - you can have a completley modded xbox without ever opening the cover.

    3. Re:After reading the articles... by BiggerIsBetter · · Score: 5, Insightful

      "You should never challenge a powerful company like this."

      Nope. I gotta disagree with that.

      I for one do NOT believe "powerful" aka rich companies shoudn't be challenged. Having money should not mean carte-blanch authority to steamroll customers over trivialities and the greater business community should be wary of any organisation that grows unchecked. It may be difficult (especially if the court is swayed by financial contributions) but powerful companies should ALWAYS be challenged.

      --
      Forget thrust, drag, lift and weight. Airplanes fly because of money.
    4. Re:After reading the articles... by sheimers · · Score: 5, Insightful

      Who cares about the DMCA. Most of the six billion world population lives outside the USA.

    5. Re:After reading the articles... by s0meguy · · Score: 5, Insightful

      The DMCA? Last time I checked American law wasn't a global thing.

    6. Re:After reading the articles... by wiggles · · Score: 5, Informative

      Also from the DMCA:

      (f) Reverse Engineering. -

      (1)

      Notwithstanding the provisions of subsection (a)(1)(A), a person who has lawfully obtained the right to use a copy of a computer program may circumvent a technological measure that effectively controls access to a particular portion of that program for the sole purpose of identifying and analyzing those elements of the program that are necessary to achieve interoperability of an independently created computer program with other programs, and that have not previously been readily available to the person engaging in the circumvention, to the extent any such acts of identification and analysis do not constitute infringement under this title.

    7. Re:After reading the articles... by staticdragon · · Score: 5, Funny

      reread the article.
      Austria != Australia
      One is in Europe the others somwhere way the hell on the other side of the globe.
      One has kangaroos, the other has... what the hell does Austria have, except apparently good hackers?

    8. Re:After reading the articles... by darien · · Score: 5, Interesting

      Actually, the EU seems to be heading in the opposite direction - while the US passes laws that make it easier for companies to get rich off individuals, the EU keeps issuing "statutory instruments" that make it progressively harder for businesses to enforce anything at all. And even if you are convicted of some sort of made up IP crime, you can always take the matter to the European Court of Human Rights, which pretty much always finds for the individual, because the EU Convention on Human Rights is a very broad and generous document.

    9. Re:After reading the articles... by KAMiKAZOW · · Score: 5, Informative

      Sadly this is not funny, it's true. There's the new Copyright Directive in the European Union and the USA is ''exporting'' the DMCA to other countries like Singapore.

  3. Watch out for the secret weapon. by Roosey · · Score: 5, Funny

    Trust me, these guys will go down for the count if Microsoft hires a female lawyer.

  4. Mr. Bush Announces .... by Snoopy77 · · Score: 5, Funny

    "From now on today will be known as XBox Independence Day!"

    --
    "She's a West Texas girl, just like me" - G.W Bush Iraqis
  5. What the.. ? by rampant+mac · · Score: 5, Funny
    From the article:

    Dear Public,

    Today is a very said day for Microsoft.

    Especially if you're using their spelling / grammar software.

    --
    I like big butts and I cannot lie.
  6. honestly... by mrscorpio · · Score: 5, Insightful

    ...did they really think Microsoft would give in to their "demands" AND legitimize X-Box hacking at the same time? Give me a break. Why would it make sense for Microsoft to encourage Linux installs on a product solely meant to play games and movies, when it doesn't even port it's cash cow software for the real desktop OS? I hate to make this comparison (because of the can of worms it's sure to open), but it's like terrorists who try to bargain hostages for freeing their buddies. You CAN'T bargain with them, because it simply encourages others to follow in their path.

    Congrats to the guys for the hard hacking work, but get a little business sense and in the meantime, better get a lawyer. This ain't gonna make the boyz in Redmond none too happy.

    Chris

    1. Re:honestly... by CrowScape · · Score: 5, Insightful

      But the idea isn't to make money off of selling the hardware, it's to make money off of selling the software. By hacking the X-Box so that you can run software that Microsoft isn't getting a royalty on kinda defeats the purpose. As consoles become more and more expensive to manufacture you'll see more emphasis placed on the profits produced by games while the manufacturers become willing to almost give the thing they spent $200 building away. This kind of hacking, if it ever begins to saturate the market, only serves to undermine consoles in general.

      --
      common sense: noun
      What those who are ignorant of the subject matter think; usually wrong.
    2. Re:honestly... by sweatyboatman · · Score: 5, Insightful

      and the argument is that this is a flawed business model. purchasing the XBOX should allow me to run whatever I want on it. I'm not leasing it. It's my property. I don't own the software or firmware, but I definately do own the hardware.

      If I can make the firmware do what I want, then how could that be illegal? Once I pay for it, MS no longer has a say in how I use it.

      If I hollow out the case and use it as a planter, is that an illegal modification? Can Microsoft sue me because they're not making their royalty money on the plants I'm growing in my XBOX?

      --
      It breaks my pluginses, my precious!
    3. Re:honestly... by rpresser · · Score: 5, Insightful

      The hardware is mine . There was no license governing my use of the hardware. There was, instead, a license governing the use of the software associated with that hardware.

      Suppose I decided that I really, really liked using Xboxes as boat anchors. Is it your belief that such use would be against some license and that I would be technically in violation of it? Wrongo.

  7. And the floodgates open.. by freeweed · · Score: 5, Insightful

    Looks like it's open season on the Xbox now, but I'm a bit confused. The ZDnet article mentions the $100,000 no hardware mod prize, yet right in the exploit description it states:

    Q1: How do I get the files onto the harddisk?

    A1: There are several ways. You could f.e. install the files with the Mechassault or 007 hacks. This requires one of the games and the files on a memorycard. The other way is to open the box and do the harddisk swap trick which is described all over the net.

    So if you need to use an existing hack to do this, and those hacks didn't qualify for the prize, how could this one? Any Xbox experts care to comment?

    Additionally, isn't it nice to see that companies are now suing on a regular basis for exploit publication. Good that they only want black hats posessing this sort of information.

    --
    Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
  8. Blackmail by Anonymous Coward · · Score: 5, Insightful

    our team has been accused of attempting to extort or blackmail Microsoft

    From the article, seems that is exactly what they tried to do:

    For the exchange, we were requesting but not demanding the following:

    - Complete access to all documentation (chipsets, video etc.) to assist in developing a better Linux for the XBox.
    - A signed Linux loader.
    - Protection from Microsoft or support if any organisation/government attempted to prosecute members of our team.
    - Refunding of the cost occured during the agreement period.

    Not demanding? Why would Microsoft politely offer any of those things?

    1. Re:Blackmail by BurritoWarrior · · Score: 5, Funny

      I like how the Free-X (box) team thinks. Let me try this out:

      I am requesting that my post be moderated up to +5 or I will release pictures of Slashdot moderators in compromising positions with various farm animals.

      Please note this is just a request, not a demand.

    2. Re:Blackmail by WanChan · · Score: 5, Funny

      ...well, it's at +4 now, so somebody has something to hide :)

  9. Too Late for Microsoft by aerojad · · Score: 5, Interesting

    Microsoft is already threatening them with legal action.

    Too late. Just ask AOL at trying to stop WASTE when it came out. Up for a day, and mirrored more times then they will ever be able to count.

    Microsoft lost right at the point they decided to not talk to them beforehand. They can shut these people down, but it's out there now, game over.

    --

    SecondPageMedia - Wha
  10. Re:what a "habibi exploit"? by Michael+Hunt · · Score: 5, Informative

    007 Agent Under Fire contains an exploit in the save-game loading routine which can lead to a local-root compromise on your X-box with a specially corrupted save game file.

    This can be used, for example, to boot Linux, or flash the BIOS.

    The reason that this didn't win Mike Robertson's 100 large is because you still need to rip the lid off the box and solder a pair of jumpers (or use conductive pen) in order to enable 'write' on the flash rom.

    --
    You're doing it wrong.
  11. Re:Just wondering... by randyest · · Score: 5, Informative

    It's a base-64 encoded proof-of-concept font and loader program. Base-64 is sort of like uuencode -- it's just a reversible way to represent a binary file as ascii code. The line "begin-base64 644 dayX.tgz" is the header that includes the encoded filename (dayX.tgz). Ask google about it for more info. Google knows all.

    --
    everything in moderation
  12. Re:Full text of article in case of /. effect by jeffkjo1 · · Score: 5, Funny

    There's definitely a big risk of zdnet going down, as it's hosted by a 14 year old with a 333 running Apache in console mode (Win98sr2) on a dsl connection and all...

  13. Integer Underflow: by Kelmenson · · Score: 5, Informative
    You understand overflow, right? There is a maximum integer that can be stored in a variable, and if you "overflow" this maximum amount, the number wraps around. So 0xffff + 0x0003 = 0x0002.

    Underflow is the same, but opposite, making it so you wrap from near zero to a very big number... You say the font size is 0x0003, and the X-Box subtracts 0x0004, and ends up thinking it needs to read in 0xffff more data from the font file...

    Both just involved wrapping around the maximum/minimum values a variable can hold.

  14. Looks like they weren't bluffing by gibbo2 · · Score: 5, Interesting

    A popular opinion when they threatened to release this was "they're just blackmailing Microsoft, but they've got nothing".

    Looks like a different situation now that they've laid their cards on the table.

    Good work guys.

  15. Re:Same as this exploit? by Daetrin · · Score: 5, Insightful

    I think you meant http://archives.neohapsis.com/archives/vulnwatch/2 003-q3/0008.html (ie without the extraneous space) but yeah, given that they're 100% identical to each other, including the name of the author, i'm guessing that they just _might_ be the same exploit.

    --
    This Space Intentionally Left Blank
  16. Re:Full text of article in case of /. effect by Angry+Pixie · · Score: 5, Interesting

    Actually, it is blackmail. Several of the things they request do have a quantifiable monetary value to them, and to others in similar situations. This includes the creation of an authorized product, refund of costs incurred, legal indemnification, and access to product designs and specs. It doesn't matter if they're willing to sign an NDA. Blackmail isn't limited to just the "give me X dollars or I will do something nasty you won't like." Any argument that Microsoft won't be harmed financially due to the release of this exploit is weak because Microsoft doesn't have to show actual financial damages from this. But that's just the civil suit. These guys will have more to worry about from the Justice Department in the criminal case.

    This is not a step forward for the Linux community. It is an embarassing set back that could further strengthen arguments against using Linux and supporting the Linux community. It's just damn irresponsible of them.

  17. Please stop trying to use common sense by Anonymous Coward · · Score: 5, Funny

    This is the law were talking about here. There is no room for such concepts..

  18. Download this while you can. by Anonymous Coward · · Score: 5, Informative
    Select and copy the uuencoded bit of the message in your browser, then pop open an xterm.
    $ uudecode
    (shift-insert or third mouse button)
    (return)
    ^D
    This will give you dayX.tgz

    You don't know when someone will laywer their way into taking this thing offline. Make it as available as you can.
  19. No DMCA in Austria by janolder · · Score: 5, Informative
    Fortunately, the DMCA has no teeth in Austria where these guys seem to live. Note the reference to a Mr Kritsch working for MS Austria and the somewhat awkward choice of words, mediocre grammar and poor spelling.

    If the DMCA continues to be used to shut down what used to be considered fair use, we'll see more and more open source endeavors moving out of the US. Here's to fervently hoping the MPAA/RIAA doesn't manage to implement DMCA clones in all countries on this planet. They seem to be doing a pretty good job at it in Europe.

    1. Re:No DMCA in Austria by breon.halling · · Score: 5, Funny
      ... the somewhat awkward choice of words, mediocre grammar and poor spelling.

      So you're saying they post on Slashdot? ;)

      --
      "Yeah, well, Dracula called and he's coming over tonight for you and I said okay."
    2. Re:No DMCA in Austria by infolib · · Score: 5, Insightful

      the DMCA has no teeth in Austria where these guys seem to live

      The european version of the DMCA, the EUCD came into force in Austria on July 1st. (I even think the directive could be used against them before that, though it hasn't been transcribed into austrian law). The mailing list message was sent on July 4th. (quite symbolically...)

      On the other hand, the picture's pretty murky anyway. The EUCD doesn't change the status for computer programs, and that's what we're really talking about here. It's also important that this exploit has several effects. It may be used for playing pirated games, (nono) but it is also a tool for using the X-box for quite legitimate purposes, like building a home media system etc. Also, the exploit is not done on the programs themselves, but on the platform. Then there is the issue of changing the font files. I don't quite get whether they used changed MS font files or rolled their own. If they use changed MS files, MS might be able to go after them on their "artistic rights".

      I recommend finding an austrian lawyer. (And a sympathetic judge...)

      --
      Any sufficiently advanced libertarian utopia is indistinguishable from government.
  20. Opera gives blacked-out page by Empiric · · Score: 5, Interesting

    If any of you Opera users find the "Free-X Statement" link akin to a Spinal Tap album cover, the site hasn't been defaced or removed. Try another browser, Opera 7.0 appears not to render their page readably. Undoubtedly the site's fault, not Opera's, of course.

    (me.)

    --
    ~ Whence do you come, slayer of men, or where are you going, conqueror of space?
  21. Lindows on Xbox by HanzoSan · · Score: 5, Funny



    In a few days Michael Robertson will announce Lindows Xbox Edition.

    New features? The ability to completely hiijack a competitors hardware technology.

    --
    If you use Linux, please help development of Autopac
    1. Re:Lindows on Xbox by Rogerborg · · Score: 5, Insightful

      >The ability to completely hiijack a competitors hardware technology.

      Funny, I don't recall leasing an XBox from Microsoft. When I put that money down, as far as I'm aware, I bought it. It became my property.

      I wonder, what goods or services am I stealing from Microsoft by running lunix on my XBox?

      Their attitude seems to be that after you buy an XBox, you owe them more money in games sales.

      --
      If you were blocking sigs, you wouldn't have to read this.
  22. Dude, they're in AUSTRIA ..Where the hell is that? by Viewsonic · · Score: 5, Funny

    And that's exactly what the Microsoft chimps are thinking right now. How the hell are they going to be able to sue someone if they dont even know where the hell it is? I mean, come on, who REALLY knows where Austria is that hasn't been there already? (Looks around) My point exactly. Hell, half the posters on here think its AUSTRAILIA.

  23. Thoughts by knightPhlight · · Score: 5, Interesting
    New or old hat? :: This exploit, having been long awaited by linux hackers and warez kiddies both is different from both the 007 and MechWarrior hacks. It doesn't require the retail games making the hack free as in beer. Additionally, both require that the game is executed and a save is loaded to cause the overrun. To do this the disc must be in the DVD drive. Because the Xbox (without a third party BIOS) will reboot when the eject key is pressed, this severely limits what the DVD can contain (such as a bootable linux partition).

    Patchable? :: Furthermore, Microsoft cannot permanently patch this hack through an Xbox Live update. Version 1, v1.2, & v1.3 Xboxes will always execute the current vulnerable code. Should they remotely update the dash; one would simply open the Xbox, write an old image to the hard drive, and reboot. In the process it would be trivial to add bert and ernie (the modified fonts). Xbox Live BIOS updates are not possible due to M$ imposed hardware limitations. Of course, third party BIOS updates are not a problem for those willing to open the case and get crazy with a little solder.

    Availability? :: Legal or not, at this point it's not an issue for the end user. The base-64 posted by Mr. Esser isn't going away. Proof? Try this...

    X-Prize? :: Probably not. This cannot be executed or copied from a third party memory card ala 007. So opening the box is required. Partial payment maybe.

  24. Well, the damage is done.. by NanoGator · · Score: 5, Interesting

    .. I would *strongly* recommend that the Slashdot Community who's been all over this 'Linux on the XBOX' bs start doing something interesting with it, and I mean fast. It would look plenty embarrasing for MS if they went after them for releasing the exploit and then people started making good (and legitimate) use of it. If everybody just wants to play MAME on it with questionably legal ROMs, that won't help Free-X.

    Might I suggest a DivX based media server that can rip DVDs? I know that seems to fly in the face of what I just said about MAME, however, its a good use for the XBOX, plus you'd only be ripping DVDs you own and with good reason. "I just wanted to have easy access to my library." Another suggestion would be to set up an XBOX as a TV based info center. It stays on-line all the time on Input 2 (or whatever channel your XBOX is on), when a commercial pops up, flip the channels and get your messages. Heck, set up a browser so that it cycles through your favorite news sites every 30 seconds and scrolls them or something.

    At least with something like that, something that the XBOX is better at than a cheap-o PC, the case can be made for wanting to make these mods to the unit. That'll weaken MS's case (they'll probably try to say that copy protection is bypassed or something), plus it'll take a few pokes at the DMCA as well.

    I hope are people listening. MS has got an army of lawyers.

    --
    "Derp de derp."
    1. Re:Well, the damage is done.. by Zork+the+Almighty · · Score: 5, Interesting

      Those are some good suggestions. Here's my (ordered) list of Xbox Linux Killer Apps :
      Tivo / media server
      MAME/Console emulator
      Region Free DVD player
      highly portable internet game server
      video phone (with a USB camera and broadband)
      digital camera / MP3 player software (so you don't need a PC)

      --

      In Soviet America the banks rob you!
  25. Re:I don't understand by aziraphale · · Score: 5, Insightful

    It's one thing to phone up MS and say 'I've found out something you might like to know about and keep secret', and another to phone up and say 'I've got some information you might like to know about and keep secret - and I'd like you to pay me money, indemnify me against legal consequences, and give me a job - or I'll release it to the public'.

    The fact that when they were ignored, they carried out the implicit threat of releasing the information (implicit in their suggestion that they'd sign an NDA in exchange for money), makes it look like blackmail to me.

    It's the demand for personal gain that makes the threat of disclosure into blackmail.

  26. Too easy... by borgdows · · Score: 5, Interesting

    It's time now to hack a *real* protection system made by a *real* console maker -> Nintendo Gamecube.

    good luck everybody! (and you'll need it)

  27. Re:Woops, too late? This is what MS wants.... by CaptnMArk · · Score: 5, Interesting

    People, just buy an mini-itx system. It's much more open, hackable and flexible.

  28. "You should never challenge a powerful company..." by cliveholloway · · Score: 5, Interesting

    Right, you mean like these two did?

    Terrible waste of time, eh?

    .02

    cLive ;-)

    --
    -- Trinity in high heels carrying a whip: The donimatrix - there is no spoonerism
  29. Re:Full text of article in case of /. effect by Alsee · · Score: 5, Interesting

    how can such exploit be legal? If your door lock is easy to tamper with, is it implicitly legal for me to break in?

    It is perfectly legal for you to "tamper" and "break in" if it's a lock on YOUR OWN DOOR. It doesn't matter if Microsoft built the lock, you bought the house.

    The people using the exploit are using in on a machine THEY OWN. They can do anything they like with it. They can smash it with a sledgehammer or toss it in a blast furnace and vaporize the sucker. Of COURSE they can "pick the lock".

    -

    --
    - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  30. Re:Why don't they fix the exploit? by Alsee · · Score: 5, Interesting

    Actually, they update the dashboard (what the exploit plays with) when you install the Xbox Live stuff

    Any attempt to update the XBOX is merely a request from an outside source for the XBOX to update itself. But once you have control of the XBOX you can program it to ignore that request to update itself.

    When you connect to XBOX Live they check to see what version you are running, but all they can find out is what the XBOX tells them. If you control the XBOX you can have it tell them anything you like.

    They are going to run into the exact same problem with Palladium and TCPA. Once someone digs the key out of the hardware, or finds any other vulnerability, then they own their system. They can run an undetectable virtualized system. They'll have "god mode" over it and af far as the rest of the world can tell they are running a secure and "trusted" system. Hell, the security situation could wind up being worse because they are pretty much going to force you to "trust" other people running the system. It just means you're going to get screwed over worse when a computer you were forced to "trust" isn't in fact secure.

    -

    --
    - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  31. Sounds typical by The+Master+Control+P · · Score: 5, Insightful

    Reminds me strongly of the way typical bug-in-your-code exchanges go with companies:

    "There's a flaw in your code."
    "There's no flaw in our code."
    "I'm telling people there's a flaw in your code."
    "Alright, there is a flaw, but we're not fixing it."
    "I'm telling people how to exploit this flaw in your code."
    "Ok! Ok, we'll fix the bug."

    These guys have been telling Microsoft that they can run Linux on an Xbox without a mod chip for months. Microsoft has ignored their warnings about the "flaw" in their "code," so we've now arrived at "I'm telling people how to exploit it." Unfortunately, because the majority of people on capital hill are mildly retarded and/or (emphasis on the "and") corporate bitches, Microsoft will NOT be forced to fix the error, but will simply sue the people who publicize the flaw because it involves encryption.

    For those to whom it is NOT already patently obvious, THIS is the danger of the DMCA: Companies that provide defective products involving encryption are NOT forced to repair the error or lose business, they now have the option of silencing the white-hats who try to warn them, and trying to ignore the hordes of black-hats who are now working to duplicate the exploit.

    Naturally, when involving open-source software, the DMCA becomes irrelevant, because anyone can see and fix the code: We do not have to wait in the hallowed corporate halls waiting for a magic trinket, and that is what they (in reference to greedy CEO's and their ilk, for whom the pursuit of money has become a late-stage cancer) fear.

    Ok, I am done rambling. You may now resume your regularly scheduled indoctrination.

  32. Re:Closed Platform as Mixed Blessing by Col.+Klink+(retired) · · Score: 5, Insightful

    Yeah, sure, it's legal to *sell* a closed system. However, there is absolutely no legal basis that allow a seller to prevent a consumer from opening it. The most they could do would be to void all warranties if you do anything unapproved.

    If MS can say that you can't open it or run software on it, does that also mean that MS can keep you from reselling it or smashing it with a sledgehammer or just tossing the whole thing in the garbage?

    If someone wants to maintain control of a device after they give it to the consumer, their only choice is to rent it to the consumer and maintain the ownership themselves.

    --

    -- Don't Tase me, bro!

  33. Re:But you DONT own the firmware by bahamat · · Score: 5, Insightful

    any firm/soft-ware that came with the device you only have a license to use.. at their terms.

    Fine then, I don't accept the terms of the license. I guess I gotta delete the software. Hmm, now what am I going to do with my XBOX? I know! I'll run Linux on it!