Xbox Hypervisor Security Protection Hacked
ACTRAiSER writes "A recent Post on Bugtraq claims the hack of the Xbox 360 Security Protection Hypervisor. It includes sample code as well."
From Bugtraq
"We have discovered a vulnerability in the Xbox 360 hypervisor that allows
privilege escalation into hypervisor mode. Together with a method to
inject data into non-privileged memory areas, this vulnerability allows
an attacker with physical access to an Xbox 360 to run arbitrary code
such as alternative operating systems with full privileges and full
hardware access."
Just checked and I have 4552. I was holding onto it hoping it would get hacked but my patience is running out. I hardly touch it. I use my XBOX1 a couple times a week but the XBOX360 is junk. The media capabilities are a joke compared to XBMC on xbox.
"But there's one thing I don't understand"
That's funny, I have something I don't understand either: why bother?
People were using the original Xbox as a media center. I never understood why.
For the amount of money it costs to get an Xbox 360 with an HD, you can build your own media PC with off the shelf parts and run whatever OS you like. You don't have to worry about coding around 3 cores or that the Xbox 360 looks terrible in most home theater setups. You don't have to worry about accidentally updating firmware and crippling functionality. Just build you own box (mine is slim and almost impossible to see), throw a massive HD and tuner card in there and you're done.
People who hack these things have way too much time on their hands -- there's seriously no point in messing around with this kind of crap when you can build a completely "open" (at least more open that Xbox 360) PC for free. (And no, not even for the "really nice video card" -- most people are never going to use it in Linux and there's better cards available for free.
Assuming the whole thing was coded in C, here we have yet another bug that a better programming language could have caught (the error was an unchecked parameter in a system call).
Can we please stop using C now?