Slashdot Mirror


Xbox 360 Backup Discs Bootable

An anonymous reader writes "The firmware of the Xbox 360 DVD drive has been hacked, allowing users to boot backups of games on the new Microsoft console. A group of hackers on the xboxhacker.net forum managed to trick the DVD firmware into reporting a recordable disc as an original Xbox 360 disc. This means that it will not allow booting of unsigned homebrew code (like Linux), as the signature check is not bypassed. This hack will just trick the Xbox 360 into thinking you inserted an original Xbox 360 disc, so it'll only boot unedited executables. A video has been released, the hack has not been released to the public (because it will be mainly used for piracy), but all the research of the last few months is publicly viewable."

47 of 287 comments (clear)

  1. "we don't want to support piracy" by Quick+Sick+Nick · · Score: 5, Funny

    yeah, and I read playboy for the articles.

    1. Re:"we don't want to support piracy" by Anonymous Coward · · Score: 5, Funny

      I read Playboy mainly for the page numbers, and the index. I mainly enjoy looking up a random page in the index, and then finding it in the magazine by binary search. I've written a program in Perl that helps me train; I type in the number of pages, and then it selects a random page for me, following a gaussian distribution (I don't want to have to find the index! lol!) and then I navigate to it. After a few years practice, I've got down to an average of less than two seconds for any given page number. I've got my girlfriend doing it now as well, we can sometimes spend entire evenings sitting down with my Linux box, seeing who can get to page 58 first! Its absolutely fantastic.

    2. Re:"we don't want to support piracy" by Anonymous Coward · · Score: 5, Insightful

      Actually, Playboy articles are pretty good, providing good analysis of all the hot topics, like global warming, politics, religion, law, freedom, etc., etc.

    3. Re:"we don't want to support piracy" by linguizic · · Score: 2, Interesting

      Wait a minute, playboy has articles?

      --
      Does this sig remind you of Agatha Christie?
    4. Re:"we don't want to support piracy" by NeMon'ess · · Score: 2, Interesting

      I thought that was just when users moved or tilted the 360 when it was powered up. If they'd wait until the disc wasn't spinning there wouldn't be a problem. Anyone smart enough to understand this doesn't get to use this as an excuse to backup their games.

    5. Re:"we don't want to support piracy" by rolfwind · · Score: 2, Interesting

      How about Fair Use? Weren't music cassete back ups declared legal in a court of law in the 80's? Is that a good enough "excuse" for you?

      Why in the world is a backup considered piracy? I have all my cds/movies on my harddrive precisely because I don't want to damage the discs and therefore have to buy the same crap again. It's the content industry that wants their products to have the advantages of both a physical medial and pure license, but without the downside of either.

    6. Re:"we don't want to support piracy" by Anonymous Coward · · Score: 5, Funny

      You are winner of Slashdot!
      This website can now close down.

    7. Re:"we don't want to support piracy" by wheresdrew · · Score: 3, Informative
      "AFAIK, nobody has managed to backup and burn GameCube discs."

      Gamecube games can be backed up and burned with very little trouble. Stick in a modchip and buy a custom case to allow the Cube to hold full-sized DVDRs and you're all set.

    8. Re:"we don't want to support piracy" by Retroneous · · Score: 2, Funny

      Yeah, Playboy is great. It also shows pictures of ladies with their tits out.

    9. Re:"we don't want to support piracy" by Klanglor · · Score: 2, Interesting

      actualy my brother told me that he downloaded his copy of eclipse on the playboy mirror.

    10. Re:"we don't want to support piracy" by mrchaotica · · Score: 2, Interesting

      Just because you're smart enough to know better (and I'm not saying you are) doesn't mean that someone else who might have physical access to your game console is also. Therefore, stupidity is not the only valid excuse (let alone the fact that you don't need an "excuse" for Fair Use anyway)!

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    11. Re:"we don't want to support piracy" by prionic6 · · Score: 2, Informative

      Instead of the custom case you can also use mini-dvd-r.

    12. Re:"we don't want to support piracy" by mrchaotica · · Score: 2, Interesting

      Wasn't there something on Slashdot recently about someone getting mini-DVDRs (that would fit in an unmodified GameCube case) to work?

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

  2. firmware check on new games? by Brit_in_the_USA · · Score: 3, Interesting

    how long until a game is released that checksums the DVD firmware and "updates it" to soemthing more secure?

    ( + reporting to MS Live if you have a hacked verison and cancelling your account? ala Blizzard?)

    1. Re:firmware check on new games? by Rosco+P.+Coltrane · · Score: 4, Funny

      How long until they hackers then change the checksums or add the obvious GOTO 30 line?

      Yes, but Microsoft is cunning you see, they number their program lines one by one instead of 10 by 10, so you can't insert a GOTO line. And RENUM is disabled. Clever I tell you!

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    2. Re:firmware check on new games? by hazem · · Score: 4, Insightful

      Isn't that just a really bad "security" model... that any old game you put in your system has the ability to re-write the firmware? Isn't that just asking for trouble?

  3. better video by Quick+Sick+Nick · · Score: 5, Informative

    If you don't want to wait 30 seconds to download the video, stream it here:

    http://www.youtube.com/watch?v=XyZQ4k7Bi-8

    1. Re:better video by mzwaterski · · Score: 2, Insightful

      I thought of another way to fake this. Just use the rear inputs on the television hooked up to another xbox 360 with the real game in it. That'd be much easier than making a fake video.

  4. Ability to boot non-Microsoft code more useful by Animats · · Score: 4, Interesting

    This is the "piracy" hack. A way to cleanly boot non-Microsoft content would be more useful. Microsoft probably couldn't do much about that legally; if you own the unit, you have no obligation to play only approved content.

    1. Re:Ability to boot non-Microsoft code more useful by zlogic · · Score: 2, Insightful

      "if you own the unit, you have no obligation to play only approved content"
      Yes, but if you try to trick (and it is the only way) the DRM that prevents non-original content from loading you're violating the DCMA.

    2. Re:Ability to boot non-Microsoft code more useful by Aranth+Brainfire · · Score: 5, Funny

      The DMCA always means something, even if it's just "Haha, boy am I glad we don't have a law like that here"

      --
      "Quoting yourself is stupid." -Me
    3. Re:Ability to boot non-Microsoft code more useful by Gadzinka · · Score: 3, Insightful

      Yeah, but booting non-MS code is much more difficult than booting copied discs. All you need to boot copies of retail games is DVD-ROM telling xbox, that it's xbox360dvd in the drive.

      In order to run unsigned binaries you have to crack several levels of protection, some of them embedded into the processor itself. And these are not your garden variety propriety measures hackable in an hour by sophomore CS student.

      So, you still can't run XBMC (NG) on Xbox360, but you can play all the pirated games you want. Weird, isn't it?

      I own original Xbox modified with DuoX modchip. Of course I have several pirated games installed on my (upgraded) HD. I would have bought some games I love (like burnout 3, 4), if it weren't for extremely stupid, suicidal policy of MS to ship Xbox with defective DVD drives that don't read DVD-R etc disks[1].

      So, for me it's funny... MS is doing anything it can to make Xbox 360 unatractive to me and to prevent me from ever buying legal copies of games for either its old or new system... ;)

      Robert

      PS If you want to condemn me as unwashed pirate, bugger off. I have a DVD collection bought legally, exceeding 300 DVD-s. Give me fair deal and I'll make your toilet solid gold. But if you want me to bend over for marginal gain, you must have been smoking something very strong all of your life.

      [1] You see, me and my wife are compulsive sci-fi/crime series watchers. Unlike me, my wife can't really comprehend them in English, so whenever I buy dvd set I process it to add Polish translation. But -- in order to play those remastered DVDs -- I had to change the Xbox DVD drive to PC DVD drive, to read DVD-R. And PC DVD drive won't read original xboxdvd discs...

      --
      Bastard Operator From 193.219.28.162
  5. drm sucks by MikeFM · · Score: 4, Insightful

    DRM is a stupid idea. It never stops hackers but it stops the average consumer from having the full use of the device they've legally bought. Making backups should be a fully protected right. Not a limited number of backup copies - as many as I happen to want to make. If I make a backup and then run it over with my car it shouldn't matter because my original is in a safe location and I can just make a new backup.

    Of course 'backup' for the copy you're using isn't a very good term.

    --
    At what price learning? At what cost wisdom? The price is a man's peace of mind, and the cost is his life.
    1. Re:drm sucks by GlassHeart · · Score: 5, Insightful
      DRM is a stupid idea. It never stops hackers but it stops the average consumer from having the full use of the device they've legally bought.

      I don't like DRM either, but one fallacy among opponents is the distinction between "average consumers" and "pirates". The problem is that average consumers can easily become pirates if various conditions are ripe: the original seems expensive, copying is easy, nobody is ever punished, etc. There are entire countries of "average consumers" who almost never buy original software or music.

  6. Nice timing! by PhoenixOne · · Score: 2, Informative
    Next week at the GDC we can ask the Microsoft rep all sorts of awkward questions. :)

    --
    Spell cheek you've failed me four the last thyme!
  7. Tut, tut, tut... by dwalsh · · Score: 4, Funny

    the hack has not been released to the public (because it will be mainly used for piracy)
    It is sad to see so much cynicism in the world :-)

    --
    ${YEAR+1} is going to be the year of Linux on the desktop!
  8. Surprised it took this long by ryants · · Score: 4, Interesting
    Frankly I'm surprised it took this long, given that the Xbox 360 will boot burned CDs/DVDs for backwards compatibility updates.

    I always thought that was a pretty good area of attack right there.

    --

    Ryan T. Sammartino
    "Ancora imparo"

    1. Re:Surprised it took this long by cnettel · · Score: 4, Interesting

      Well, it doesn't help that much, as it's the signature that determines how a valid image may be started (and no commercial game will say "burned booting OK"). Now, all software written by MS really "sees" the disc as a real DVD, completely independent of whether booting from burned DVDs is supported or not. The only way to block this would be to block flashing DVD firmware (wise) or blocking reading burned discs in hardware. The latter would of course make it less usable for playing CDs or video in more or less legitimate ways that MS still wants to support.

    2. Re:Surprised it took this long by gabebear · · Score: 2, Informative

      Embedding the firmware makes it impossible to inject your own firmware and makes it MUCH MUCH harder to tell how the chip works. So, yes, Microsoft could stop people from reflashing their DVD drives.

      Unlike the CPU, the chip that drives the DVD rom can be completely re-implemented with a relatively cheap FPGA. You can reverse engineer chips with electron microscopes, although it is really expensive. Mod chips could still be produced even if Microsoft decided to start making their DVD-ROMs with an embedded firmware.

      I doubt embedding the firmware into the DVD controller is really an option for Microsoft since that would drive the cost of the DVD-ROM way up. Microsoft currently just reflashes standard Samsung and Hitachi Serial ATA parts with their proprietary firmware.

      Unless Microsoft radically changes the way they make the 360, this attack should work.

  9. Re:Forget Piracy. Solution For Disc Scratching Mes by Ethoscapade · · Score: 3, Funny

    it's not so much "scratching" as it is "burning a series of tiny little rings in these DVDs as if they were vinyls exactly how fast is this thing spinning jesus christ the disc is actually hot"

  10. Re:Mainly used? by Phil+Wilkins · · Score: 2, Informative

    The nature of the hack is that it masks a DVD-R as a factory pressed DVD. So all it lets you do, is boot 100% copies of existing titles. To boot homebrew, or imports, you'd need to crack the digital signature, or hack the main firmware, which hasn't happened. So there'll probably be pretty good piracy / 'backup' mod-chips available soon, but no homebrew yet.

  11. Citations by OpenSourced · · Score: 3, Interesting

    From the post:
    the hack has not been released to the public

    From Jane Austen's "Emma":
    'It's to be a secret, I conclude,' said he. These matters are always a secret, till it is found out that everybody knows them. Only let me be told when I may speak out.'"

    --
    Rome taught me patience and assiduous application to detail. Virtues which temper the boldness of great, general views.
  12. Re:Morality by Haeleth · · Score: 5, Funny

    It's clear that the submitter of the article doesn't think the moral case for this type of thing is strong enough to stand on its own. He has to help it along, and slightly mislead his audience despite the fact that the vast majority of the copies this is used for will be pirated copies rather than backup copies.

    Huh? The submitter wrote, right there in the summary, "it will be mainly used for piracy". I really don't see how he could have been any blunter about it. It does not look to me like there is any attempt being made to mislead readers in any way whatsoever.

    But I'm not surprised to see a response like yours. However someone phrases it, there's always someone who thinks they should have phrased it more strongly. I expect that even if the submitter had opened the article with "Filthy bloodsucking terrorist pedophile pirates have raped America's freedom once again in a savage assault on the copyright protections that keep our children safe", then someone would still have complained that he was being too sympathetic to them... ;)

  13. One small step by Enselic · · Score: 3, Interesting

    I remember hackers speaking of how easy hacking the Xbox 360 will be, that it will only take hours once it is released.

    Now, 4 months after the release, they manage to hack a disc. Microsoft sure has given them a challenge this time.

    1. Re:One small step by Anonymous Coward · · Score: 5, Insightful

      to hack a disc? this is the entire disc authentication system completely reverse engineered with little or no understanding of the inner working of the 360 kernel. this is a complete sidestepping of what was probably 3 years of complete tightening of all of the 360s internal communication, integrity checking and copy protection. no one made any claims about it taking a day, and when a loose community does this in 4 months it IS god damned impressive since it is more than most people on this board could do in a fucking lifetime.

  14. Trying to eat the cake and have it too by ikejam · · Score: 2, Insightful

    I'm guessing the good researchers figured if they publicly took the credit AND released the code, they'll be in the crosshairs of (MS||HomelandSec:-s||Feds||++) in a minute. If its not already illegal (isnt it?) , it'll probably soon be.
    So they figure they wont release the code.
    They say, hey its possible.
    They say, hey this is the exact result.
    They say, hey this is how we've been going abt it these past few months.
    They say, sorry folks, y'know we'd love to spread the good hack around, but y'know
    piracy's piracy, and we dont want to get in range of the long arm of the law.

    24 hrs later.
    Ult.XBoxHack.360.FirmwareUpdate.CRaCkED.l33T.torre nt..

    They say, huh what??

    Well, Good Luck...

  15. LOL by bogie · · Score: 3, Interesting

    "the hack has not been released to the public (because it will be mainly used for piracy)"

    Then why did they bother? Testing XP or linux to see if its security is working is one thing. That has real world consequences. Testing it is a noble cause IMHO. Hacking the firmware of a gaming system make get done to "boot linux" but we all know the real world implication here. I don't frown on this morally one bit but let's not kid ourselves here. Information may want to be free, but people want free games even more.

    --
    If you wanna get rich, you know that payback is a bitch
    1. Re:LOL by BillyBlaze · · Score: 2, Insightful

      Even towards the more noble goal of running homebrew software on the XBox360, this hack is useful. Since it is designed to run only signed code, the obvious vector of attack is to make the signed code do something bad. One way to do this is to give the signed code malicious input, which is much easier to do now, because any unsigned content on the DVD can now be changed. (Of course, maybe the whole DVD is signed, I don't know.)

  16. Implications for xbox live by AlphaWolf_HK · · Score: 2, Interesting
    I was wondering why somebody didn't try this before. It would allow you to play copied games on xbox live without getting banned as well since the main xbox firmware hasn't been tampered with, nor has any other hardware been modified in any way.

    I suppose microsoft could detect this on live by scanning the dvd drives firmware, but the data contained on the firmware itself could easily be spoofed. The other software on the xbox has to relie on whatever the firmware itself says it has. Somebody could just add code to the firmware that sends false data to external reads. All it has to do is report whatever data the console would expect it to have and then detection would become impossible.

    People who would want to cheat on xbox live would be out of luck, since afterall, the signature checks are still in place.

    --
    Careful with names containing L slashdot.org/~AiphaWolf_HK slashdot.org/~AlphaWoif_HK slashdot.org/~AiphaWoif_HK
  17. Re:Mainly used? by Aneurysm9 · · Score: 4, Insightful
    Well, to be fair, killing is not illegal per se.

    Neither is creating a backup copy of software you have purchased, nor is utilising that backup copy. As for the DMCA, there is an explicit exception for reverse engineering for interoperability that does not limit it to interoperability of software with other systems. It could just as easily be read to allow modification for interoperability with other software.

    --
    There was Cowboy Neal at the wheel of a bus to never-ever land.
  18. But i wont release it.. by nurb432 · · Score: 2, Insightful

    Phfft. What garbage. If you arent going to release, it why even bother telling anyone? Its not like your work can be replicated ( proved ) and it makes you look like you are just making it up.

    " i found out the secret of area 51, but since it might be used improperly , ill just not tell you the details ".. its about as valid as he story subject.

    And as a disclaimer, im not a gamer.

    --
    ---- Booth was a patriot ----
  19. Re:This is step 1 of 2. by It'sYerMam · · Score: 2, Insightful

    You don't need this hack to run arbitrary code, only the signature hack. In fact, if there were a signature hack, you wouldn't need this, as you could change the flag telling the XBox what media the executable should be run off, and then recompute the signature, or perhaps find a collision.

    For arbitrary code, you compute the signature for whatever you want - media flag and all.

    --
    im in ur .sig, writin ur memes.
  20. Re:Bollocks by Dibblah · · Score: 3, Insightful

    Uh.... Huh. You're a man, are you, Mr Anonymous Coward?

  21. Re:Forget Piracy. Solution For Disc Scratching Mes by SpryWeb · · Score: 4, Informative

    If you want to stop scratches on your original games, use d_skin protectors... Every game should have one... http://www.gamestop.com/product.asp?product_id=801 784

  22. Re:Forget Piracy. Solution For Disc Scratching Mes by zapfie · · Score: 2, Informative

    Amen, brother.

    I found the d_skin protectors on sale for a pack of 30, and they have been nothing but a blessing. Anyone who is paranoid (like me) about scratching up their disks even slightly should definitely look into buying a pack.

    It's a HELL of a lot cheaper to replace a scratched up d_skin protector than it is a $50 game.

    --
    slashdot!=valid HTML
  23. No big surprise by Myria · · Score: 2, Insightful

    If you look at the design of the 360's security system, you will see that they have taken *extreme* measures to protect against running unauthorized software, but very little protection against piracy. The anti-piracy system is more or less the same as it was on Xbox 1.

    It's very obvious that Microsoft cares much more about blocking Linux and Xbox Media Player than it does about piracy. They have their priorities way out of whack.

    Melissa

    --
    "Screw Sun, cross-platform will never work. Let's move on and steal the Java language." - Visual J++ Product Manager
  24. RtFA... by Faeton · · Score: 4, Insightful
    Please read the article!

    This isn't just a "Oh, I'll put this firmware on a disk and load it up and Bam!, insta-pirate!". This is a firmware for the DVD-ROM, which you first have to A) physically open up the XBox360 B) Then remove the DVD-ROM C) then desolder the firmware chip D) then read the firmware and figure out where to edit, because each DVD-ROM has a unique ID tag E) then you have to reprogram the chip using specialized equipment F) reinstall the chip and hope you didn't ruin a $400+ machine G) get a good copy of a game and hopefully it'll work.

    Currently, this is *far* harder than the average modchip. Since each chip has to be custom-programmed, this isn't an easy hack, even if you did have the hacked firmware available.

    Still, hopefully this is a taste of things to come. The 360 has been only out for 4 months, and this is much better progress than with the original XBox.