PDA

View Full Version : live security


bliz42
07-31-2003, 10:51 PM
Quick question... I've got my box.. and I chill with my immediate peeps using bo-xlink to get my halo on... ; )

but i have other peeps that really want to go with xbox live.. so.. i've been installing physical switches and such into the boxes for them.... BUT, being as the boxes are constantly taken from site A to site B to site C for lan parties, and get abused quite a bit.. the switches do not seem all that stable, and need to be fixed occasionally...

Looking for a way to avoid this, is phoenix a suitable use for this? I know I can't have the original bios on the box, and have an exploit code sitting there for them to check for in order to load some other bios.. but will it work the other way around? Can I have x2 4977 loaded, and throw a menu option to run phoenix which will load a retail bios..

My thoughts are that if they check the kernel from memory, then it should pass the checks... but if they check the kernel actually from the tsop.. then it would not work...

Technically, can they do a checksum of some sort on the tsop to make sure you have not tampered with it? I know you can't read out the bios using raincoat without soldering the jumpers... so that would be great if I could connect the jump points to enable flash, flash the tsop, remove the jump points.. and *bam* ; ) use phoenix to laod retail bios when they want to jump onto live..

What do you think?

stealth
07-31-2003, 11:25 PM
A couple of things.

Firstly, you can still read the tsop if the flash protect and write enable jumpers are not soldered.

Assuming microsoft does only an in memory check then yes it should work. Let me warn you that there is 1 byte different in the bfm retail bioses (It is the bootflags) but it is in a location that is unlikely to be hashed by M$, as it is a global kernel variable which can change during runtime.

As stated many times, M$ could do tons of things to check for mods (file checking etc.). There is no guarantee that any scenario is 100% safe other than having no extra files on your hard drive, and completely switching off the mod.

So in summary, yes it should work, but don't blame me if your account gets banned.

bliz42
07-31-2003, 11:45 PM
Thanks for the info...

And luckily.. ; ) it's not me that will get banned... it's them.

If they gotta have the mod.. and gotta use live.. they take the risk. Was just wondering if it was a reasonable option for them. : )