Live data from Hacker News

Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

tomshardware.com

201–210 of 311 posts

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#201

> Whether PC users, our core readership, will be interested in actually emulating Xbox One, looks unlikely. The 2013 system’s game library is largely overlapped in better quality on the PC platform. And this explains why it's stayed unhacked so long. There was very little incentive to hack the system when the games are all playable on a PC. Pirates, cheaters, archivists, and hackers could just go there. Microsoft's b…

Maybe cheaters want to cheat somewhere nobody else cheats. Idk if these games do online cross platform nowadays.

Helldivers 2 is cross platform (pc, sony, xbox all in same game at same time, doesn't matter who "hosts.") So it does exist in practice.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#202
post #195

Earlier quoted context omitted.

When you extrapolate out the political economy consequences of your hypothesis being correct the future looks very dark indeed. If you can make an unhackable game console it should be obvious to people on this site what sorts of dystopias you could also create.

unhackable subscription ignition interlock device?

unhackable brain-computer interface required for most daily activities (like phones are today) and with a killswitch "for the public safety" and 24/7 cloud monitoring. Obviously this is pretty out there science fiction today but will it remain so in a century? And if it doesn't, what kinds of political systems are likely to dominate? What will happen to those political systems that for one reason or another decline this capability? I leave these questions as an exercise for the reader.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#203

It wasn't unhackable and decrypted versions of games already have been dumped. There was even a public exploit published years ago. https://github.com/exploits-forsale/collateral-damage What's new here is that this compromises the entire system security giving access to the highest privilege level.

[flagged]

lol

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#204

Earlier quoted context omitted.

They are on PC afaik?

Forza Motorsport 5 & 6 and Halo 5: Guardians all Xbox One exclusives, I think.

i don't know forza very well, but those two are older, right? because there's a motorsport 7 as well as a "Motorsport" that is between releases of Horizon 5 and 6.

seems like everyone that made racing games went a little nuts around the same time...

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#205

Earlier quoted context omitted.

The Nintendo switch 2 uses DCLS (Dual-core lockstep) in the BPMP and PSC (PSC is PSP-like but RISC-V). So yes, it helps - I'm unsure if/where msft uses it on their products.

DCLS actually makes sense for this scenario as the fault tolerance gained from having three processors isn't needed here. The system can halt when there's a mismatch, it doesn't have to perform a vote and continue running if 2 of 3 are getting the same result. Also I just thought of this but it should be possible to design a chip where the second processor runs a couple cycles behind the first one, with all the input…

yeah give the man more ideas, smart

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#207
post #43

Created a voltage drop that exactly occurred to be timed to the key comparison, then a spike at the continuation. Irl noop and forced execution control flow to effectively return true. B e a utiful

It's fascinating - how does one defend against an attacker or red-team who controls the CPU voltage rails with enough precision to bypass any instruction one writes? It's an entirely new class of vulnerability, as far as I can tell. This talk https://www.youtube.com/watch?v=BBXKhrHi2eY indicates that others have had success doing this on Intel microcode as well - only in the past few months. Going to be some really e…

Voltage glitching is an old technique. Here's a paper about it from 2 decades ago https://ieeexplore.ieee.org/document/1708651 but it is at least another decade older as an attack vector.

Defend against it one way by voltage monitoring or physical intrusion detection, and another way by droop and such detection and countermeasures on the device. Both probably just increase the cost of hacking it by some orders of magnitude, but that may be enough.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#208
post #9

This is great news. Hopefully this opens the floodgates towards emulation and homebrew. Not that there are really any exclusives, but it would be interesting.

Very few exclusives. Couple of Forzas? Halo 5? Practically everything else available elsewhere in similar quality.

Rare Replay is another exclusive that comes to mind.

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#209
post #175

Earlier quoted context omitted.

You don't need to attack the math, if you can attack the sender or thr receiver ['s hardware].

Good luck If I burnt the one time pad.

Give me enough time to reverse entropy

Re: Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'

#210
post #72

> Whether PC users, our core readership, will be interested in actually emulating Xbox One, looks unlikely. The 2013 system’s game library is largely overlapped in better quality on the PC platform. And this explains why it's stayed unhacked so long. There was very little incentive to hack the system when the games are all playable on a PC. Pirates, cheaters, archivists, and hackers could just go there. Microsoft's b…

The other major incentive for hacking the console Microsoft removed was for the first time on a modern mainstream home console to allow side loading of homebrew code/emulators etc. The console supported a developer mode that allowed side loading of third party applications, so folks could get emulators and other traditionally "banned" content on the console through an officially supported route. There's a great prese…

I'm very much of the opinion that PS3's linux support massively delayed its exploitation. And not just because it provided a path for homebrew/linux.

A lot of the early hacking focused on trying to breach the hypervisor from otheros. The hypervisor turned out to be quite secure, people smashed their heads against it for years until it finally fell to a memory glitching attack.

But turns out it was so much easier to just attack gameos with a USB exploit. The hypervisor did nothing to prevent it, and would then just decrypt games for you (because gameos was trusted)

Post reply on HN