Tuesday, August 30, 2011

Hackers allegedly overcome security system of the Xbox 360

Hackers allegedly overcome security system of the Xbox 360

Overcome because the hackers, the security system of the software of the
Xbox 360 could not, they conducted noise on the board of the console
hardware.
Image: The two hackers GliGli GliGli and Tyre have published over the
weekend and a description of a YouTube video showing how they have
overcome the security system of Microsoft's game console Xbox 360 to
inject and execute arbitrary code. Unlike previous attacks, aimed at
either the drives or exploiting errors in the game software, the new
attack was the CPU and can not be blocked by future software updates
from Microsoft, claiming that hackers.
To overcome the security questions of the Xbox 360, the attacker the CPU
clock slowed during the boot process. They used the slim model as an
externally accessible bus (I2C) of the HANA chip, to describe the
divider tabs in the new clock generator. When they sent down cycles with
a soldered circuit board at a particular time a 20 nano-second pulse on
the reset line. According to their description, however, this brings
about a restart of the CPU. Then they overclocked the CPU again. In the
opinion of the two hackers can be such a command to compare memory areas
(memcmp) manipulate. With luck, this means that the Xbox, the signature
of a boot loader does not properly checked - meaning you can start your
own boot loader.
For this no inspections would take place the revocation backups more, so
the interference was not by a software update can be prevented. In the
video, start hacking the Linux Loader (Xell) and an N64 emulator. The
attack will work regardless of the firmware that is played or dashboard
version. However, it needed an average of four attempts to call forth
the reset pulse, the desired effect. Vulnerable are the new Slim models
of the console and the latest revision (Jasper) of the earlier model. At
the first hardware generation of the Xbox 360, nor for their power
supply 175 watts or more is designed (Xenon, Falcon), the attack has not
been tested.

No comments:

Post a Comment