News for hackers. Stuff that matters.
Re:Endgame: A dashboard exploit for the original Xbox by auguzanellato on Monday February 19, 2024 @06:40PM (#39436211)
> In many ways I think it is really quite sad that we're at a point where blown e-fuses, encrypted everything and properly done public/private key crypto means that it's entirely possible that next generation of consoles really might actually be unhackable

Pirates will always find a way, the Nintendo Switch had all the countermeasures you mentioned, the latest revisions also have a patched bootloader but someone figured out that they could still boot a custom firmware via power fault injection on the SoC.

Re:Endgame: A dashboard exploit for the original Xbox by jsheard on Monday February 19, 2024 @06:45PM (#39436244)
Nintendo (or rather Nvidia) was behind the curve on fault injection counter-measures, Sony and Microsoft did their homework and it's never been achieved on their last two generations of systems as far as I know. Microsoft openly talked about it here: https://www.youtube.com/watch?v=U7VwtOrwceo

Seriously, console security is getting really good. The Switch had some major hardware blunders between the bootloader bug and fault injection, but the developer of the main Switch CFW project is on record that their custom microkernel is absolutely bulletproof and he expects there will never be another software exploit. If Switch 2 gets the hardware right, there's no way in.

https://twitter.com/SciresM/status/1486787208333774848

https://twitter.com/SciresM/status/1327721899862888448

The Playstation is the weakest of the bunch, since they run FreeBSD on bare metal there's a large attack surface and a lot of eyes on the code. The Xbox uses some variant of NT but each application gets its own Hyper-V virtualized NT instance, so to jailbreak you need to escape Hyper-V, which is easier said than done and has a $250,000 bug bounty so MS would probably be the first to be informed.

Re:Endgame: A dashboard exploit for the original Xbox by coretx on Monday February 19, 2024 @07:39PM (#39436657)
"console security is getting really good." - It's not nor will it ever be. There is no point in investing extra millions for let's say anti electron microscope measures for example. Developers aim for secure enough and don't care much about a single nerd who cracked his individual system using exotic specialists tools more valuable than the console and the entire game collection combined. It's more lucrative to just send a lawyer. ( Until it goes wrong. )
Re:Endgame: A dashboard exploit for the original Xbox by jsheard on Monday February 19, 2024 @07:43PM (#39436682)
I would class making it uneconomical to hack a console for any practical purpose as "really good security". Could someone with nation-state resources hack the Xbox? Maybe? But who cares, they're not going to.
Re:Endgame: A dashboard exploit for the original Xbox by kjellsbells on Monday February 19, 2024 @11:55PM (#39438192)
Funny, I was just wondering if such an entity would not actually quite like the xbox and Playstation as targets. I mean, they are powerful machines, well connected to the internet and the ownership class by and large dont blink when they power them on and are told they need to download a system update or game patch. Feels like a fertile place to build a bot net?

I wonder if you really even need to hack the console. It might be easier to, say, subvert Rockstar's supply chain to put some code in the next GTA that spent a few cycles doing whatever botnets need to be doing.

Re:Endgame: A dashboard exploit for the original Xbox by danielheath on Tuesday February 20, 2024 @12:49AM (#39438421)
Surely cheaper to mandate that microsoft ship the patch, if they wanted to do that.
Re:Endgame: A dashboard exploit for the original Xbox by prmoustache on Tuesday February 20, 2024 @05:28AM (#39439660)
Why going through the hassle when so many IoT devices are wide open?
Re:Endgame: A dashboard exploit for the original Xbox by DANmode on Tuesday February 20, 2024 @01:06AM (#39438481)
not going to and publish it.
Re:Endgame: A dashboard exploit for the original Xbox by PUSH_AX on Tuesday February 20, 2024 @07:21AM (#39440386)
Tony Chen even addresses this directly in the video above.

They literally had a hard line in the sand. $600. If it costs more than $600 to hack it then they really don't care.

The other big thing is games being locked to a specific OS version, meaning some games require updates to play them. This has been key in their security strategy. It's basically pointless to hack it, it will be patched and you'll have to opt in to the patch to play anything new.

Re:Endgame: A dashboard exploit for the original Xbox by jsheard on Tuesday February 20, 2024 @08:31AM (#39440959)
Another smart move by Microsoft was shipping Xboxes in an uninitialized state that has to connect to the internet and download the latest firmware before it can be used. Sony has been repeatedly burned by patching an exploit but having the vulnerable firmware still pre-installed on machines still in retail channels, so someone willing to abuse return policies can easily get one. MS doesn't need to worry about that, every new Xbox ends up on the latest firmware regardless of when it was manufactured.
Re:Endgame: A dashboard exploit for the original Xbox by fomine3 on Wednesday February 21, 2024 @09:51PM (#39462585)
PS5 and XS was attractive hack target for crypto mining when it was boom and GPU were in shortage. I wonder anyone had hacked it (and keep it secret) or hadn't.
Re:Endgame: A dashboard exploit for the original Xbox by charcircuit on Monday February 19, 2024 @08:46PM (#39437093)
>There is no point in investing extra millions for let's say anti electron microscope measures for example.

TPM designs that protect against such an attack will become a commodity reducing the cost to include it onto a console. Every desktop, phone, laptop, tablet, microwave, fridge, server, etc will all need TPMs. The demand and scale exists for this to become cheap over time.

Re:Endgame: A dashboard exploit for the original Xbox by graphe on Monday February 19, 2024 @06:49PM (#39436275)
Xbone has no hacks. It has dev mode, no exclusives both which killed hacking and piracy.
Re:Endgame: A dashboard exploit for the original Xbox by coretx on Monday February 19, 2024 @07:43PM (#39436683)
The PS3 had "OtherOS" for lucrative import/export levies. Saving a dime on removing it post sales and export/import is what lead to hacking & piracy.
Re:Endgame: A dashboard exploit for the original Xbox by Jerrrry on Monday February 19, 2024 @09:24PM (#39437355)
yup, the "cat-and-mouse" game ended when they embedded the decryption key physically to the CPU.

You can't read it without breaking it.

Re:Endgame: A dashboard exploit for the original Xbox by WirelessGigabit on Monday February 19, 2024 @10:09PM (#39437610)
I felt called out in that YouTube video when the guy said 'This is what people do to not spend $60 on games'.
Re:Endgame: A dashboard exploit for the original Xbox by JauntyHatAngle on Tuesday February 20, 2024 @12:00AM (#39438224)
While I'm not saying most people by far aren't doing it to save money, I have bought switch games and then emulated them just to try the graphics at 4k 60fps that isn't possible on the console.

That's the part I'm sad about - that we won't get emulated games that look and feel better due to faster hardware in the future. Money isn't an issue for me.

Re:Endgame: A dashboard exploit for the original Xbox by doctorpangloss on Tuesday February 20, 2024 @12:22AM (#39438311)
On the other hand the Switch is the best platform to make money on as an indie game developer.
Re:Endgame: A dashboard exploit for the original Xbox by grishka on Tuesday February 20, 2024 @02:58AM (#39438969)
$60 for a game is very expensive though. Especially so with digital distribution which means it can't be resold.
Re:Endgame: A dashboard exploit for the original Xbox by ChrisKnott on Tuesday February 20, 2024 @04:21AM (#39439340)
It's not expensive compared to what games used to cost.
Re:Endgame: A dashboard exploit for the original Xbox by grishka on Tuesday February 20, 2024 @07:43AM (#39440540)
You used to be able to buy games used for a tiny fraction of the original price, and you used to be able to sell games you finished or didn't like. Now you have to pay the full price, every time, irreversibly.
Re:Endgame: A dashboard exploit for the original Xbox by mrguyorama on Tuesday February 20, 2024 @01:36PM (#39444989)
When I bought a $60 game in 1996, I knew it was a complete product. It might have a bug that made it impossible to finish, but returns are a solved problem. I knew I had a product that was made, possibly incompetently, for fun, or to tell a story.

I wasn't buying something that was trying to nudge me into spending another $400 on different pixel colors, or worse, different characters, abilities, or effects.

Modern video games have adopted techniques used by the gambling industry to trigger essentially addiction, because game companies prefer 3 whales to a thousand happy individuals buying the game a single time and playing it forever happily.

Because they were not satisfied with making a million dollars off a video game. That wasn't enough money.

Re:Endgame: A dashboard exploit for the original Xbox by bowsamic on Tuesday February 20, 2024 @04:20AM (#39439333)
It’s really not…
Re:Endgame: A dashboard exploit for the original Xbox by grishka on Tuesday February 20, 2024 @07:45AM (#39440554)
I'm sorry for not living in a first-world country and not having grown up in a rich family.
Re:Endgame: A dashboard exploit for the original Xbox by bowsamic on Tuesday February 20, 2024 @07:53AM (#39440616)
Games are a luxury, you aren't entitled to them (though in a third world country you probably aren't entitled to basic necessities either)
Re:Endgame: A dashboard exploit for the original Xbox by prmoustache on Tuesday February 20, 2024 @08:52AM (#39441220)
> you aren't entitled to them

Nobody said that.

> though in a third world country you probably aren't entitled to basic necessities either

I think you should travel more before writing that kind of comments.

Re:Endgame: A dashboard exploit for the original Xbox by prmoustache on Tuesday February 20, 2024 @05:27AM (#39439652)
It really depends where you live eh.
Re:Endgame: A dashboard exploit for the original Xbox by bowsamic on Tuesday February 20, 2024 @06:02AM (#39439860)
Videogames are usually not made in cheap countries
Re:Endgame: A dashboard exploit for the original Xbox by prmoustache on Tuesday February 20, 2024 @07:10AM (#39440305)
That is irrelevant to how affordable or not it is for the end user.
Re:Endgame: A dashboard exploit for the original Xbox by bowsamic on Tuesday February 20, 2024 @07:21AM (#39440385)
If you can’t afford to pay for the labour to produce it, then why would you expect to be able to buy it?
Re:Endgame: A dashboard exploit for the original Xbox by grishka on Tuesday February 20, 2024 @07:50AM (#39440594)
Here's the thing: if I can't afford a game because it's so outrageously expensive, I'm not going to just not play it and miss out, I'm going to pirate it.

And now that I'm an adult who totally can afford these things (after bypassing all the roadblocks that the world's entertainment companies put for customers from Russia), I still pirate everything because that's what I'm used to, and that's what I'm convenient with.

Re:Endgame: A dashboard exploit for the original Xbox by bowsamic on Tuesday February 20, 2024 @07:52AM (#39440605)
That's fine, the problem is people acting like it's outrageous to charge $60 for 100+ hour length multi-million dollar projects. Factorio recently increased its price by $5 to $35 in line with inflation and gamers are outraged. How dare they charge more money, it's totally immoral, etc. I don't get why people feel outraged about it.
Re:Endgame: A dashboard exploit for the original Xbox by grishka on Tuesday February 20, 2024 @07:57AM (#39440653)
My main complaint is not that games cost this much money, but rather about digital distribution. Especially with console games, it used to be such that you could buy pre-owned cartridges/discs and sell yours. It was really cheap to you, and technically the game developers also got their asking price for each copy they sold. You were also able to swap games with friends who had the same type of console.

With digital distribution, you still pay the full price, but your copy is "single-use" in essence. You're never getting any of that money back. And, the only way to buy games digitally is "new" for that full price.

Re:Endgame: A dashboard exploit for the original Xbox by prmoustache on Tuesday February 20, 2024 @08:50AM (#39441196)
You don't pay for the labour to produce it, you pay for a gamble over an investment. The labour to produce the game can totally be paid if the price of the game is reduced but the amount of copies sold increase by a significant amount to make up for the price reduction.

And wallet and income of the consumers in region X of the world do not stretch magically because game companies in region Y decide to invest more on games. It is not that simple.

Re:Endgame: A dashboard exploit for the original Xbox by oxygenoxy on Tuesday February 20, 2024 @08:28AM (#39440930)
I don't. I bought 1 game for my original xbox- Mech Assault
Re:Endgame: A dashboard exploit for the original Xbox by NotPractical on Wednesday February 21, 2024 @10:26AM (#39454954)
It seems surprising to me that they went from shipping a vulnerable WebKit with numerous public CVEs on day 1, to producing a more or less bulletproof OS?
Re:Endgame: A dashboard exploit for the original Xbox by jedrek on Tuesday February 20, 2024 @04:05AM (#39439274)
The Playstation 4 was launched in 2013 and there is no modern hack for it.
Re:Endgame: A dashboard exploit for the original Xbox by jiehong on Tuesday February 20, 2024 @05:36AM (#39439719)
Playstation 5 has been jailbroken, though [0].

Well, even the PS4, actually [1].

[0]: https://www.youtube.com/watch?v=5Cq3K9lBli0

[1]: https://www.youtube.com/watch?v=OxRTGMe_RuE

Re:Endgame: A dashboard exploit for the original Xbox by NotPractical on Wednesday February 21, 2024 @10:22AM (#39454892)
> Pirates will always find a way

Except it's usually not pirates who find these exploits, rather curious tinkerers that want to unlock the full capabilities of the hardware that they own. The pirates / script kiddies usually come in after the groundwork has already been laid by these true hackers. E.g. the people who hacked the Switch in fact condemn piracy and any discussion of it on within their communities will lead to an immediate ban.

I'm proud to say that I've hacked my Switch, but have never pirated anything on it. An impressive homebrew scene has formed around the console, which has produced gems such as Mission Control, allowing you to seamlessly pair third party controllers. I use it with my PS4 controllers.

https://github.com/ndeadly/MissionControl