Xbox Dashboard Local Vulnerability

[Guest ellas]

The XBOX Dashboard is what appears when you turn the XBOX on without a

disc in the DVD drive. It will let you adjust system settings, manage

your save games, play and rip audio CDs and configure your XBOX Live

account. It is the heart of the XBOX and its most vulnerable point,

because it lacks several security restrictions which are enforced on

games. This includes the lack of the reboot-on-eject-button "feature",

which is obligatory for all games.

The existance of an exploitable vulnerability within the dashboard could

totally compromises the XBOX security system. It will make the box

independent from Microsoft signed code and therefore this information is

released to the public now on the 4th of July 2003, the day of the XBOX

Independence.

more here http://lists.netsys.com/pipermail/full-dis...uly/010895.html

[Guest LB]

i may be being a little naive, but why????

what purpose would doing any of this serve?

[Guest ellas]

well it could have something to do with the fact you could play pirated games

Q4: Is it possible to play "backed-up" games with this?

A4: Yes it is possible to play pirated games by using this vulnerability

but my proof of concept code will not allow this. You have to change

the exploit to patch the kernel in memory. This is not very hard and

I am not going to help you with this.

Q5: Can I go "Live" with this hack?

A5: You have full control over the box with this vulnerability. You can

modify the exploit to allow XBOX Live playing but this will only

start a cat & mouse game with Microsoft.

Q6: I have read that I can solder my mainboard with this hack...

A6: This exploit has nothing to do with soldering, It will just run

everything you want on unmodded (and even unopened) XBOXes. Infact

when this hack is installed you do not need to solder anything to

get your homebrew or whatever applications to run.