|
|
Bunnie about Xbox 360 Kiosk Demo Disc |
|
Bunnie about Xbox 360 Kiosk Demo Disc |
Bunnie posted some comments on his blog about the recent findings with the Xbox360 Kiosk Demo Disc
Andrew "bunnie" Huang is one of the main guys behind the original Xbox hacking, he's also known for his book "Hacking the Xbox". Here's what he said on his blog:
"I've also been observing the progress on the Xbox360 hacking, and I'm impressed. The hacking scene is more or less an organized anarchy that is frightfully productive. Now that I've had a little brush with being a manager in my day job, I can see that clarity of purpose obviates the need for management; people just self-organize and things happen. I could ponder on this for many parargaphs, but I'll spare you my treatise on human social behavior.
At any rate, some very interesting things are afoot. Much of it stems from the discovery of an all-media bootable kiosk demo disk. Many hackers will instantly recognize the value of this, but it's still interesting to reflect on the significance of this find.
Like the original Xbox, the Xbox360 uses a media flag on its executables. The media flag tells the OS what type of media it should be on; typically, games are released with the flag set to Microsoft's proprietary secure Xbox DVD format (which is in itself not that secure...). Significantly, only the executable is signed for a game; the data sections typically are not signed (presumably for performance reasons). Thus, one has the ability to fuzz the executable by corrupting the data sections, potentially invoking a buffer overrun or some other unintentional behavior-if one could effectively modify the data sections. Remember that this is normally not possible, since modifying the data segment requires making a copy to a writeable media, and this contradicts the signed media flag.
Thus, the run-anywhere demo disk now enables software hackers to create and test the interaction of signed executables with modified game data using no tool other than a DVD-RW drive (and an Xbox360 console, still considerably rare and difficult to obtain in the US). Some of the more interesting modifiable data regions include Shockwave Flash movies, and the pixel shaders executed by the GPU (more info can be found on the xboxhacker.net website). Of particular interest is the MEMEXPORT shader command in the 360, which could enable people to dump physical memory to the screen (where it can be digitized or extracted with a sniffer upstream of the ANA chip), or to some other peripheral function. Presuming plaintext kernel code can be extracted this way, it bootstraps further efforts in vulnerability analysis of the code running in the Xbox...and so forth. Of course, its quite possible that this hole is plugged, since Microsoft's NGSCB spec calls for the Northbridge to limit DMA access from the graphics card to main memory. Furthermore, buffer overrun exploits have questionable applicability since each process runs as its own virtual machine and rumors has it that the no-execute bit is used on heap space. Still, I'm very surprised that such a media was even released into the wild by Microsoft...their own worst enemy is their own haste to get to the market and carelessness; security is for naught without consideration of human factors. Very exciting! Perhaps the Xbox360 will be opened without the need for significant hardware hacking."
News-Source: http://www.xbox-scene.com
| |
|
|
|
Related Stories |
|
|
Most Popular |
|
|
|
Rate this Article |
|
| | |
| Xbox Download Stats | | | Site Statistics
| |
HQ Online Statistics Members: 2 | Guests: 1,269 | Xbox Live Tags: 4,376
| | | |
Forums Active Users: 802
| Your Account Active Users: 160
| News Active Users: 61
| Xbox Games Active Users: 41
| Private Messages Active Users: 41
| Home Active Users: 35
| Profile Active Users: 33
| Downloads Active Users: 32
| VIP Signup Active Users: 20
| Xbox Homebrew Active Users: 20
|
| View More Detailed Statistics |
| Popular Xbox Games | |
True Crime: Streets of L.A. Page Views: 322,301 True Crime: Streets of L.A. combines the deepest fighting, shooting and driving elements ever seen in one game. Players take the role of Nick Kang, a no-holds-barred undercover operative fighting to b.. | | More Xbox Games | | HQ Network Affiliates | |
| Xbox-Hq.Com - Archived News | |
| Thursday, April 18 | | GIC’24 Early Bird Tickets Now Available published by: BigJ | Page Views: 29 | Comments: 0 |
Wednesday, April 17 | | Killer Klowns From Outer Space: The Game laun published by: BigJ | Page Views: 35 | Comments: 0 |
| Epic Fantasy RPG 'Dungeons of Hinterberg' is published by: BigJ | Page Views: 33 | Comments: 0 |
Tuesday, April 16 | | Sleight of Hand launches Day One on Xbox Game published by: BigJ | Page Views: 41 | Comments: 0 |
Monday, April 15 | | Dune: Awakening Shows Off Stunning Unreal Eng published by: BigJ | Page Views: 86 | Comments: 0 |
| INDIE Live Expo Reveals First 2024 Showcase, published by: BigJ | Page Views: 54 | Comments: 0 |
Friday, April 12 | | Build Your Empire: 'Rise of Industry 2' Comin published by: BigJ | Page Views: 60 | Comments: 0 |
Thursday, April 11 | | Perennial Order is set to bloom on Xbox Serie published by: BigJ | Page Views: 52 | Comments: 0 |
| Metro Simulator 2 is coming soon for Xbox and published by: BigJ | Page Views: 59 | Comments: 0 |
Wednesday, April 10 | | Terminator: Survivors announced for Xbox Seri published by: BigJ | Page Views: 78 | Comments: 0 |
Tuesday, April 09 | | TMNT: Wrath of the Mutants Hits XBOX, PlaySta published by: BigJ | Page Views: 61 | Comments: 0 |
| devcom announces new venue, call for speakers published by: BigJ | Page Views: 71 | Comments: 0 |
Monday, April 08 | | Space Invaders Deck Commander - The Board Gam published by: BigJ | Page Views: 68 | Comments: 0 |
| Demolish & Build 3 is coming to Xbox, PlaySta published by: BigJ | Page Views: 79 | Comments: 0 |
Tuesday, March 26 | | Rugrats: Adventures in Gameland coming soon f published by: BigJ | Page Views: 92 | Comments: 0 |
Monday, March 25 | | Sci-fi adventure 'Sky of Tides' announced for published by: BigJ | Page Views: 101 | Comments: 0 |
Friday, March 22 | | Planet Zoo: Console Edition arrives on March published by: BigJ | Page Views: 121 | Comments: 0 |
Thursday, March 21 | | Taxi Life: A City Driving Simulator Out Now o published by: BigJ | Page Views: 90 | Comments: 0 |
| Terra Memoria is set to launch on Xbox Series published by: BigJ | Page Views: 111 | Comments: 0 |
Wednesday, March 20 | | MLB The Show 24 launches on Xbox Game Pass published by: BigJ | Page Views: 117 | Comments: 0 |
Tuesday, March 19 | | Discover the Sound of Life in The Lullaby of published by: BigJ | Page Views: 132 | Comments: 0 |
Monday, March 18 | | FLIPGO: A portable dual monitor that you can published by: BigJ | Page Views: 153 | Comments: 0 |
Thursday, March 14 | | Highwater launches this week on Xbox X|S, XB1 published by: BigJ | Page Views: 125 | Comments: 0 |
| JSAUX’S Black MODCASE for the ROG Ally Is Ava published by: BigJ | Page Views: 142 | Comments: 0 |
Wednesday, March 13 | | Paper Ghost Stories: Third Eye Open coming to published by: BigJ | Page Views: 124 | Comments: 0 |
Tuesday, March 12 | | Night Slashers: Remake confirmed for XBOX, Pl published by: BigJ | Page Views: 141 | Comments: 0 |
| RuneScape developer Jagex joins CVC Capital P published by: BigJ | Page Views: 135 | Comments: 0 |
Monday, March 11 | | Dark JRPG Graphic Adventure 'Neon Blood' debu published by: BigJ | Page Views: 131 | Comments: 0 |
Friday, March 08 | | WWII-based strategy epic Classified: France ' published by: BigJ | Page Views: 167 | Comments: 0 |
| Sonic X Shadow Generations hits Xbox One, Xbo published by: BigJ | Page Views: 161 | Comments: 0 |
Thursday, March 07 | | Explore the World of Ink Painting in Realm of published by: BigJ | Page Views: 116 | Comments: 0 |
Wednesday, March 06 | | Barton Lynch Pro Surfing Update v1.07 is LIVE published by: BigJ | Page Views: 115 | Comments: 0 |
| FALLEN LEAF Teams Up with STUDIOS EXTRAORDINA published by: BigJ | Page Views: 141 | Comments: 0 |
Tuesday, March 05 | | Goons: Legends & Mayhem: Meet the Cat Goon an published by: BigJ | Page Views: 120 | Comments: 0 |
Monday, March 04 | | Hauntii hits Xbox Game Pass for console and P published by: BigJ | Page Views: 160 | Comments: 0 |
| REVEIL launches this week on Xbox Series, PS5 published by: BigJ | Page Views: 128 | Comments: 0 |
Friday, March 01 | | Dark Atlas: Infernum launching on Xbox, PlayS published by: BigJ | Page Views: 162 | Comments: 0 |
| Towerful Defense: A Rogue TD confirmed for XB published by: BigJ | Page Views: 128 | Comments: 0 |
Thursday, February 29 | | The House of Tesla announced for Consoles, iO published by: BigJ | Page Views: 106 | Comments: 0 |
Wednesday, February 28 | | Martha Is Dead: The Terrifying Game That's Ge published by: BigJ | Page Views: 130 | Comments: 0 |
News Archive
| |
|
|