full-disclosure - Re: Xbox hacks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: nick at virus-l.demon.co.uk (Nick FitzGerald)
Subject: Re: Xbox hacks

Valdis.Kletnieks@...edu wrote:

> On Wed, 23 Jul 2003 16:57:19 BST, PiG_DoG <PiG_DoG@...dog.homeip.net>  said:
> > Anyone Heard Any more on The XBOX Hack
> 
> Which one?
> 
> (I'm not being facetious here - I've seen rumors of at least 3 different hacks for it,
> unless said rumors have mutated so widely that they're 3 versions of the same rumor..)
> 
> I know there was one group that made a fairly credible "Sign our bootloader or we'll
> reveal the hack" request a few weeks ago, not aware of anything coming of it.  There
> was a long thread on Slashdot about it, so it should be easy to track down...

No need to go to SlashDot -- AFAIK, it was someone from that group who 
posted not only a description but what is claimed to be a sample 
exploit of the vuln they discovered to this very list on 4 July:

http://lists.netsys.com/pipermail/full-disclosure/2003-July/010895.html

Ironically (in light of several recent posts) that message had a 
Subject: line of:

   When full disclosure is the only way...

More info is available by asking your favourite search engine what it 
knows about "dayx xbox hack" or similar...


Regards,

Nick FitzGerald