Group cracking Xbox 'for the public good'

Daily Newsletters

Sign up to ZDNet UK's daily newsletter.

NEWS
The Neo Project, which is using distributed computing to crack the main security code in Microsoft's Xbox games console, says it is confident its activities will stand up under legal scrutiny because they could have research and social benefits. The group launched, and then quickly dropped its Xbox cracking plan recently, when it began attracting wide public interest. "With the recent media frenzy we stopped the project to research the legal aspect before proceeding any further," project founder Mike Curry explained on the group's Web site. "It seemed OK until we started receiving 75,000 unique hits per day." The Neo Project is a group of computing enthusiasts devoted to cracking security challenges using distributed computing techniques, in which heavy-duty computing tasks are divided among a number of PCs. The group's initial software release focused on a $10,000, or about £6,400, challenge from computer security firm RSA Security to crack a 576-bit encryption code. A subsequent software release was aimed at cracking the 2,048-bit encryption code used by the Xbox. A cracked encryption code could allow hackers to run homemade Linux software on an unmodified Xbox, satisfying a $100,000 hacking challenge funded by Michael Robertson, chief executive of Linux software company Lindows. The project decided to go ahead with the Xbox crack because it felt the project's aims were compatible with the Digital Millennium Copyright Act (DMCA). The controversial law makes it illegal to break through copyright protections, but makes exceptions for legitimate research. The group is arguing that it is protected by sections of the law that allow for research in encryption, compatibility and privacy. Since The Neo Project is facilitating a version of Linux that could run on an unmodified Xbox, the project feels it is protected under the exception for reverse-engineering for compatibility purposes. But the project also says that cracking the Xbox's 2,048-bit encryption key has implications for the encryption used on the Internet. "Even email is secured with 2,048-bit keys. Your bank may rely on this encryption to protect your money. Networks may rely on this level of encryption to prevent access to public utilities and telecommunications," said Curry in a message to users on the project's Web site on Monday. "Factoring of the Xbox key has research and social implications well beyond interest in the game console." The project also feels it is covered under a DMCA provision allowing a crack if personal information is at stake. Because some researchers have suggested that the Xbox stores its serial number in a way that could be leaked over the Internet -- via Microsoft's Xbox Live service -- Curry argued that decryption and examination of the Xbox's workings would "aid in alleviating these privacy concerns." The project is working on a new version of its software that will be compatible with Linux, Mac OS, Windows and Solaris, and will be able to run on an Xbox running Linux. Currently about 25,000 computers have signed on, according to Curry. CNET News.com's David Becker contributed to this report.
For all security-related news, including updates on the latest viruses, hacking exploits and patches, check out ZDNet UK's Security News Section. Let the editors know what you think in the Mailroom.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

  • Login

Will not be displayed with your comment

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

Get ZDNet UK's daily newsletter

Enter your email address to sign up

ZDNet UK Live

apexwm

Bill Goodrich : Just as al_langevin pointed out, with Windows Server 2008 there is no Services for Macintosh anymore. It's gone, not available....

8 hours ago by apexwm on Windows Server 2008 drops the ball for Mac compatibility
txtrainguy

Replying to an old topic that I'm currently facing with my CEO (who is on a Mac). Our servers are primarily Windows Servers, office is about...

14 hours ago by txtrainguy on Windows Server 2008 drops the ball for Mac compatibility
k0tcs3

Sure, that makes perfect sense. Pay wrong-doers money and thank them for breaching your security and pointing out your flaws, that would surely...

15 hours ago by k0tcs3 on US indicts Romanian over NASA climate change hack
Random_Error

I think he's referring specifically to Android apps, as Apple do regulate their App Store, but Google seem to let any old crap onto the Android store!

15 hours ago by Random_Error on RIM: BlackBerry will keep 'garbage' apps out of store
Paul Fezziwig

Keep the crap apps out?! How will they compete with Android and Apple's claim to fame of having so many life changing apps? I wonder if the media...

20 hours ago by Paul Fezziwig via Facebook on RIM: BlackBerry will keep 'garbage' apps out of store
Aigars Mahinovs

It has been shown time after time that if there is an author store that sells the songs at even 1$ per song and gives you a high-quality digital...

21 hours ago by Aigars Mahinovs via Facebook on Copyright isn't working, says European Commission
awbMaven

""As a result of Butyka's alleged conduct, researchers were unable to use the computers for more than two months while NASA removed the malicious...

24 hours ago by awbMaven on US indicts Romanian over NASA climate change hack
subhorup

It simultaneously worries me and uplifts me that a self-proclaimed group of internet activists name themselves after Indian mythical figures....

1 day ago by subhorup on Anonymous activists release PCAnywhere source code
naviathan

It's actually far easier to work anonymously on the internet than you think. With tools like Tor bouncing your traffic around the world before...

1 day ago by naviathan on Anonymous activists release PCAnywhere source code
Agnostic_OS

1000272134 and bluedalmatian with you both there but then I'm still in 10.04 land (and happy with it)

1 day ago by Agnostic_OS on Ten factors that make Ubuntu 11.10 a hit
apexwm

Interesting article and definitely see your points on the products mentioned. One of the top products for our Help Desk (approximately 20% of all...

2 days ago by apexwm on Ten flawed products that derail productivity
Paul Hutchinson

Absolutely - this should obviously not be handled my isp - but handled by their hosting operator. What's been suggested here is that my isp police...

2 days ago by Paul Hutchinson via Facebook on MPs urge ISPs to take down terrorist material
Techs UK

Looks like a great phone. I don't notice any deficiencies in WP7. used IOS before, that's pretty good. I don't spend much time in Apps, all i need...

2 days ago by Techs UK on Nokia pins US 're-entry' hopes on Lumia 900
Larry Bloggy

Now with the help of these apps you are always synced with MS outlook while on the move. Just download apps like xobni or outlookreflex and get...

2 days ago by Larry Bloggy via Facebook on Outlook Social Connector beta 2 and the LinkedIn connector
mike40g123

Your details are wrong. The version currently being made is the one with 2 USB ports, 256MB RAM and a network port. This is the Model B. The...

2 days ago by mike40g123 on Raspberry Pi boards set to go on sale
Moley

The thing that has been puzzling me for quite a while is how Anonymous can remain anonymous whilst not only being active on the Internet but also...

3 days ago by Moley on Anonymous activists release PCAnywhere source code
Don Dilly

If what Semantec is saying is rue, that is even worse and shows a complete disregard for thier users. If what Anonymous claims is true and the...

3 days ago by Don Dilly via Facebook on Anonymous activists release PCAnywhere source code
MattChurchy

Didn't seem particularly biased to me either. Oh though you might have mentioned some other competitors with free search and email services...

3 days ago by MattChurchy on Time for an evil umpire: Google, Microsoft & privacy
Simon Bisson and Mary Branscombe

James - exactly as much as anyone paid you for your comment; I don't feel that I need to say that I'm independant and unbiased, but just for you...

3 days ago by Simon Bisson and Mary Branscombe on Time for an evil umpire: Google, Microsoft & privacy
Carl White

Once they realise symantec are willing to pay real money, they will simply keep extorting, unless of course symantec/authorities can use the...

3 days ago by Carl White via Facebook on Symantec offered hackers $50k in source code sting