Feeds

Tricky Xbox 360 hack claimed to work 1 try in 4

New slim Redmond console pwned like a bitch

Security for virtualized datacentres

Hackers reckon they have come up with a way to circumvent the security of Xbox 360 gaming consoles via an attack that allows them to inject unsigned code into the heart of the system.

The so-called Reset Glitch Hack, developed by hackers GliGli and Tyros, creates a means to load code into a console's CPU. This makes it more sophisticated than previous approaches, some of which relied on bugs within gaming software.

The hack relies on slowing the CPU during the boot-up sequence, using an "externally accessible HANA chip bus (I2C) to overwrite the divider registers in the clock generator", as H Security explains. With the clock sequence slowed down it becomes possible to inject a reset pulse that both resets the clock speed and injects code of the hackers' choosing into memory. The approach is less than elegant but, given a bit of luck (the exploit is only successful 25 per cent of the time), the hacking duo showed it was possible to smuggle their own customised bootloader onto the system.

The hack works by essentially destabilising the console in order to trick it into believing the hackers' code is hashed and signed.

In a demonstration video, the hackers launched a Linux loader and Nintendo 64 (N64) emulator. The approach works regardless of firmware version. Both the new slim console and some previous versions of XBox 360 console (Jasper) are potentially vulnerable. Earlier versions of XBox 360 (Xenon, Falcon) are not. Microsoft may have its work cut out in blocking the hack because a simple software update would not be enough to block the exploit, according to the hackers.

The hackers stated that the hack had only been developed for the purposes of running homebrew code, and not for gaming piracy or similar malfeasance.

More details on the hack can be found here. ®

Top 5 reasons to deploy VMware with Tegile

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.