New Xbox security cracked by Linux fans

By Matthew Broersma, ZDNet.co.uk, 14 October, 2002 16:26

NEWS

A group of independent programmers says it has managed to crack a new security system in Microsoft's Xbox gaming console, less than a month after the reconfigured consoles hit the market. Breaking the new system took less than a week, the hackers said. Using a complicated method for analysing the new configuration, along with some unexpected help from Microsoft, the hackers said on Saturday that they are now able to run their own software -- including the Linux operating system -- on the newer consoles. Microsoft said it reconfigured the hardware in order to cut down manufacturing costs, but it also changed the way security was implemented at the same time. The newer units, which began to arrive on store shelves about three weeks ago, made obsolete the 'mod chips' used to run unauthorised software on the Xbox. Some mod chips can be reprogrammed, however, and will be able to take advantage of the new hack to regain control of the console. Hackers also say that, with the right equipment, the system's Flash memory can be reprogrammed to allow the console to run non-Microsoft software, without the need for hardware modifications. The Xbox hackers said that their success was founded on a known weakness in the security system that Microsoft uses in the reconfigured consoles, which have been unofficially dubbed Xbox v1.1. The console contains a Flash memory chip which contains, in an encrypted "kernel", the Xbox's BIOS (basic input-output system) -- instructions governing basic functions such as interacting with a television and controlling the machine's hardware. This kernel is launched by an unmodifiable ROM (read-only memory) chip called the MCPX, which is made by Nvidia, the company that also makes the machine's graphics processor. After using a complicated trick to analyse the contents of the MCPX ROM, and decoding the encrypted kernel, the hackers discovered that the new hardware uses a complex encryption method to ensure the validity of the Flash memory contents before executing them. According to Andy Green, a UK-based programmer who was part of the effort, the Flash memory is signed with a cryptographic hash -- a method of summarising a large amount of data with a short random sequence that is very sensitive to any changes in the original. However, there is a known weakness in the algorithm used to create the Xbox's hash, an algorithm called TEA. "In every group of 64 bits, it cannot detect a change when the 32nd and 64th bit both change together," explained Green. The Xbox Linux group that Green works with, along with a group working for the mod chip company Xecuter, both managed to exploit this weakness to gain control of the machine. "It turned out that flipping the 32nd and 64th bit of the very first 64-bit block of the protected area caused the Xbox to begin executing from RAM (random-access memory)," Green said. It was then a simple matter of embedding a command in RAM that allowed the user to control the machine. Green said that it took him less than a week to pull off the successful hack. Green said he expects Microsoft to begin using a still more sophisticated security system in the next revision of the Xbox, which will probably require more expensive and difficult methods of hacking. With the current model, "we were frankly lucky" that Microsoft chose the buggy TEA algorithm, Green said. Green and other Xbox hackers have noted that the methods Microsoft is using to secure the Xbox appear to be a warm-up for a longer-term project called "Palladium" to embed copy protection into the hardware and software of future PCs. This would theoretically make it impossible to, for example, copy CDs and digital videos on a PC without authorisation. The Xbox v1.1 configuration is "a new concept in secure code that we will soon be seeing everwhere, as it is the method used in Palladium," Green said.

For all your GNU/Linux and open source news, from the latest kernel releases to the newest distributions, see ZDNet UK's Linux News Section. Have your say instantly, and see what others have said. Go to the Linux forum. Let the editors know what you think in the Mailroom.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

ZDNet UK Live

I totally dislike pirating of works, I fear that artists will be deterred from creating works if they think that they are going to get ripped off....

19 minutes ago by GHar123 on ACTA stumbles in Germany

How dare film makers, artists or anybody that invests in creativity stop us pirating their works for free. I want to be able to walk into my local...

6 hours ago by JCB33 on ACTA stumbles in Germany

@GrueMaster. I prefer horses for courses rather than one size fits all. I, and I suspect most other computer users, do not really wish to have...

8 hours ago by Moley on A tale of two distros: Ubuntu and Linux Mint

The product that scares me every time I have to use it is the Office 2007 version of Excel. The first bug that I found was applying the median...

8 hours ago by greycynic on Ten flawed products that derail productivity

Nice review and very informative. One thing I'd like to add (in reply to whs001's 1st question), the main reason to have the same interface from...

10 hours ago by GrueMaster on A tale of two distros: Ubuntu and Linux Mint

I'be been using Mint 12 since the RC came out, and I am far more happy with the Cinnamon, the Mate, and, yes (with extensions), theGnome 3...

10 hours ago by Frederick Wrigley via Facebook on A tale of two distros: Ubuntu and Linux Mint

Excellent article. One small correction, though--although a fresh installation of Linux Mint 12 will, indeed, provide the user with a version of...

11 hours ago by bdantas on A tale of two distros: Ubuntu and Linux Mint

In related news, the ISPs club together to get the members of the Home Affairs Select Committee (ya goofed on that part, ZDNet UK) copies of "The...

12 hours ago by Alan Ralph via Facebook on MPs urge ISPs to take down terrorist material

In related news, the ISPs club together to get the members of the Home Affairs Select Committee (ya goofed on that part, ZDNet UK) copies of "The...

12 hours ago by Alan Ralph via Facebook on MPs urge ISPs to take down terrorist material

For Gnome 2 die-hards, it is possible to add icons to the bottom panel (or top top panel, if you prefer) which provide the exact Gnome 2...

12 hours ago by Moley on A tale of two distros: Ubuntu and Linux Mint

Your comments would seem pretty naive and immature. Your 'solution' appears to be, "gee, let's all just give in to the hackers and give them...

13 hours ago by ramwellian on Cloud computing security: no more oxymoron?

"Interesting thought ... If you installed Win7 as a dual boot on a machine that previously only had Linux, and it wrecked your Linux installation,...

13 hours ago by BugStalker on Windows 7 Declares War on GRUB

This is an excellent summary of Ubuntu and Mint and the interface differences between them. Most such articles take a very partisan position for...

13 hours ago by whs001 on A tale of two distros: Ubuntu and Linux Mint

@ewallace. Not so clear. Anyone can obtain the text, for example from here http://www.ustr.gov/webfm_send/2379. I support ACTA so long as it and...

13 hours ago by Moley on ACTA: Facts, misconceptions and questions

I think WinRT is fantastic. I just wish it was an option for people that didn't want to go through Microsoft's App Store with its attendant...

16 hours ago by 45283 on Why Windows 8 needs architectural hygiene for WOA

Nine people? £30m? Who's back pocket is that lot going in? And IF they say it is for new buildings, what about all the ones the government has...

18 hours ago by Burn-IT on Police set to launch three £30m e-crime hubs

Just to be clear, nobody knows what is in the text of ACTA, here is a photograph of the text of ACTA http://twitpic.com/8h9iju as submitted to the...

18 hours ago by ewallace on ACTA: Facts, misconceptions and questions

Unfortunately main issue is that ASUS is refusing to accept that they make some mistake on this version of asus Transformer prime. 1 - GPS sensor...

19 hours ago by fgvrg56 on Asus Eee Pad Transformer Prime Wi-Fi & GPS problems?

@Marcus A fair question. Just talked with Archos which said it was working on an announcement for next week....

20 hours ago by Ben Woods on Archos confirms G9 Ice Cream Sandwich update schedule

Any update on this, considering the claimed "first week of February"?

21 hours ago by Marcus Karlsson via Facebook on Archos confirms G9 Ice Cream Sandwich update schedule

Featured white papers

Latest jobs

New Xbox security cracked by Linux fans

Daily Newsletters

Topics

Related stories

Xbox crackdown frustrates customers

Linux for Xbox released

Microsoft takes out Xbox hacker

Microsoft changes Xbox configuration

Perens: Linux could learn from Apple

Post your comment

ZDNet UK Live

Latest in Application Development

Perens: Linux could learn from Apple

Featured white papers

Latest jobs

Test Analyst - Business Intelligence /Data Warehousing

Test Analyst - Business Intelligence /Data Warehousing

Technical MI Manager - 50-60k - Leeds

Inside ZDNet UK

A tale of two distros: Ubuntu and Linux Mint

2012 Predictions: VCE FastPath, VI SAN Probe & Hadoop

BlackBerry Bold 9790

Case study: How cloud enables growth

Ten factors that make Ubuntu 11.10 a hit

Toshiba Portégé Z830-10P Review

BT's archive: Pictures from the vault

News & Analysis

Reviews

Blogs

Resources

About Us

Member Services

Special Features

Advertising Features

ZDNet UK / News and Analysis / Application Development

New Xbox security cracked by Linux fans

Daily Newsletters

Topics

Related stories

Post your comment

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

Latest in Application Development

Featured white papers

Latest jobs

Inside ZDNet UK

Resources

About Us

Member Services

Special Features

Advertising Features