Categories: Originals

Negotiations Denied

An exploit for a vulnerability that can compromise all security features of the XBox was released on the VulnWatch mailing list today.

Author Stefan Esser said even though the flaw was a critical one, the vendor, Microsoft, was not willing to talk about XBox vulnerabilities.

Earlier today, the group Free-X issued a statement saying that the exploit was going to be released as Microsoft had refused to negotiate with the group.

It said that a month ago, Free-X had made an attempt to contact Microsoft after it had verified that the first software only mod-chip solution for the XBox had been developed and proved to work.

Only new consoles with updated firmware could lock out the exploit, the group said. The group said it had offered Microsoft

A complete summary of all hacking technologies (many of these technologies have not been released).

Source Codes.

All attacks which have been developed but not yet released.

To sign a Non-disclosure Agreement regarding our discoveries.

Further research on exploits, which would be exclusive to Microsoft.

Full names of all hackers involved upon agreement of legal protection from Microsoft.

Assistance in the development of future security for the XBox by working with Microsoft.

In exchange, it said it had requested

Complete access to all documentation (chipsets, video etc.) to assist in developing a better Linux for the XBox.

A signed Linux loader.

Protection from Microsoft or support if any organisation/government attempted to prosecute members of our team.

Refunding of the cost occured during the agreement period.

“To prove our discoveries we offered to make available an exploited dashboard for Microsoft to validate our claims,” the statement said.

“We have made every possible attempt to achieve our goal of running Linux on the XBox easier without the risks of encouraging software piracy, it is a shame that Microsoft appears to not share our concerns about protecting the intellectual rights of those who develop software for their console.”

The full statement can be viewed in it’s complete form here.

kombo