New Xbox 360 Dashboard Update Patches Security Hole, Free60 Devs Advise Against Installing
by eXophase Mirror on Aug.11, 2009 at 4:20 pm, under Gaming, Xbox 360 | Thread ID: 5231

The latest Xbox 360 dashboard update adds support for Microsoft’s Game on Demand service, but that isn’t all it does. According to Free60 project leads Felix Domke and Michael Steil, this update stealthily patches up a security hole that allows execution of unsigned code.
Apparently, “a complete end user compatible hack has been in development for some time” and will be distributed across public channels shortly according to the two devs. That translates to homebrew access for 360 owners who haven’t upgraded to the latest firmware.
Should be interesting to see how things develop. For those unaware, the last known Xbox 360 exploit was limited to an older kernel build that majority of folks already had upgraded past. Not for the technically squeamish, it also required users to connect to their 360 via serial port and have a copy of King Kong. This time around, it sounds like more people will benefit.
New Xbox 360 Dashboard Update Patches Security Hole, Free60 Devs Advise Against Installing - [eXophase.com]
Stimulus Map Pack Details Unveiled on Major Nelson Podcast
Modern Warfare 2 Stimulus Package DLC Details Leaked
Splinter Cell: Conviction Demo Confirmed
Final Mass Effect 2 Character Arrives on April 6th
Torchlight Seeing Light on Other Platforms
Free Battlefield: Bad Company 2 Maps Drop Same Day as Modern Warfare 2 Paid Maps
LittleBigPlanet to Introduce Co-Op Move Play
Sports Champions and Move Party Announced
Playstation Motion Controller Named: Playstation Move
Blur Multiplayer Beta Impressions
August 11th, 2009 at 10:15 pm
Oh well...too bad I didn't know about that king kong thing earlier...
August 11th, 2009 at 10:39 pm
Poor how they tell you not to update - after the update.
August 11th, 2009 at 11:09 pm
crap!!!
wait this is good, my other xbox is being repair. I hope they don't get me the latest update.
August 12th, 2009 at 1:42 am
Sweet!! I didn't update mine yet, but I have 2 so I can just use the one I didn't update.
I really wish a POC video would be released or something.
August 12th, 2009 at 3:13 am
Also, the project has been being worked on for 3 years with no release, and when you use this - you can't use Xbox Live. Hopefully another year will follow with better updates. :D
August 12th, 2009 at 4:39 am
Dose anyone else dislike the new game rateing system?
Such a game can be rated bad by fanboy,then when you're suggest new game its always going be high rep stuff.
August 12th, 2009 at 6:30 am
These are the facts from tmbinc:
The magic is how we launch 4532 - there is a "backdoor" for manufacturing since CB 1920. We have been able to restore the newer CD versions for all hardware types.
This means:
- We can boot own code in HV context ~5s after boot, before any video output, right after the kernel runs.
- we need to reflash the flash, and add 3 resistors for the JTAG (no modchip required! but you might want a dual-nand modchip),
- 8498 kills this by updating the bootloader - it blacklists 4532/4548. it also does hw init stuff which might interefere with the jtag hack, we don't know yet.
- we have a proof of concept hack, we will release it SOON (a matter of hours/days, not more - promised.).
- DON'T UPDATE to summer 09. Did i already say this?
- you don't need to know your cpu key. You can update to all BUT summer '09. you don't need a dvdrom.
- It works on all xenon, zephyr, falcon, opus, jasper. Unless you have updated to 849x. Then you're screwed.
It sounds like the hack is not purely software based - seeing as he's talking about adding resistors.