Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

tomshardware.com

Post reply on HN
Print view View original

161–170 of 311 posts

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#161

Post by Retr0id »

mike_hearn wrote: post #152
Retr0id wrote: post #127

Earlier quoted context omitted.

> It's mandatory to use the pause key to understand the full details I was going to say I disagreed but the rest of your comment reminded me that I've accumulated a lot of domain-specific knowledge.

What I meant is that at points he skips past slides so quick even very fast readers can't absorb every bullet point. I read at ~2-3x the average speed, have lots of domain knowledge and couldn't read fast enough to get every word on every slide. So the pause key is very useful for that even if you know what's coming.

I read at Normal speed but I didn't feel that way when watching. I believe you though, I was just having an XKCD 2501 moment.

https://xkcd.com/2501/

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#162

Post by selectively »

ActorNightly wrote: post #80
btown wrote: post #43

Earlier quoted context omitted.

It's fascinating - how does one defend against an attacker or red-team who controls the CPU voltage rails with enough precision to bypass any instruction one writes? It's an entirely new class of vulnerability, as far as I can tell. This talk https://www.youtube.com/watch?v=BBXKhrHi2eY indicates that others have had success doing this on Intel microcode as well - only in the past few months. Going to be some really e…

Basically if someone has physical access to device, its game over. You can do things like efuses that basically brick devices if something gets accessed, but that becomes a matter of whether the attacker falls for the trap.

This hasn't been true for the time a typical American high school senior has been alive. Please stop repeating things people said years ago.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#163

Post by hnaccounttw99 »

charcircuit wrote: post #14

It wasn't unhackable and decrypted versions of games already have been dumped. There was even a public exploit published years ago. https://github.com/exploits-forsale/collateral-damage What's new here is that this compromises the entire system security giving access to the highest privilege level.

[flagged]

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#164

Post by Lammy »

natas wrote: post #128

I wonder... if microsoft can't secure a gaming console which they have full control on, from top to bottom, how do they secure "Azure Government"?

The point of the gaming console is to get hacked, because that's how they develop the security techniques that metastasize over to strangle general-purpose computing, which is the real goal. Device attestation is a perfect example of this.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#165

Post by int0x29 »

natas wrote: post #128

I wonder... if microsoft can't secure a gaming console which they have full control on, from top to bottom, how do they secure "Azure Government"?

That game console isn't in a data center with CCTV coverage, mandatory access control, guards, and employees with background checks. If somone is soldering wires to your server and doing fault injection something has gone very wrong. Azure Government customers also don't have to worry about the NSA demanding access.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#166

Post by robotnikman »

beachy wrote: post #86
ActorNightly wrote: post #80

Earlier quoted context omitted.

Basically if someone has physical access to device, its game over. You can do things like efuses that basically brick devices if something gets accessed, but that becomes a matter of whether the attacker falls for the trap.

Only if they leave a door open, which they did here. If your argument is that you can't hope to close every door, then AI will make it easier to close all the doors in the future.

>then AI will make it easier to close all the doors in the future.

AI could also make it easier to open the doors too.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#167

Post by Gigachad »

selectively wrote: post #160
autoexec wrote: post #51

> Whether PC users, our core readership, will be interested in actually emulating Xbox One, looks unlikely. The 2013 system’s game library is largely overlapped in better quality on the PC platform. And this explains why it's stayed unhacked so long. There was very little incentive to hack the system when the games are all playable on a PC. Pirates, cheaters, archivists, and hackers could just go there. Microsoft's b…

Yeah, you couldn't be more wrong here. The exact same people who thoroughly destroyed the 360 badly wanted to attack this system - they were just outgunned.

The security was way better with the Xbox One, but also no one cared about the Xbox one. The 360 was the last successful Xbox.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#168

Post by Gigachad »

everyone wrote: post #87

It had those e-fuses in it right? *Seriously* it should be illegal to sell anything with those.

Basically all computers use efuses, otherwise it would be possible to rollback the firmware to a previous, insecure version.

For something like a game console, that’s annoying, for a phone or laptop, that’s highly desirable if something like a TPM bug is fixed, without efuses the system would forever be vulnerable.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#170

Post by Cthulhu_ »

natas wrote: post #128

I wonder... if microsoft can't secure a gaming console which they have full control on, from top to bottom, how do they secure "Azure Government"?

I don't believe servers actually have this level of hardware protection to be honest. Physical protection, as someone else pointed out, on the other hand.

If hacking the xbox goes wrong, the hacker will short out the console. If hacking Azure goes wrong, the hacker will get shot.

Post reply on HN