“unhackable” is a bit sensationalized here. the Xbox One is actually a security success story not because it is impossible to hack, but because it’s a rare example of a console that wasn’t hacked in its service lifetime. at the risk of giving praise to Microsoft, the architecture is actually really neat and informed the security features of subsequent Windows releases, ie a hypervisor with sandboxed sub containers (this is why they required TPMs).
(also i’m not agreeing with requiring a TPM for general purpose machines; they make sense on a bespoke hardware platform like a game console)
i bet this hack is nuts, but the blue team deserves some level of kudos
I feel like allowing users to access dev mode played a large part in this as well. Without the option surely it would have been cracked sooner.
Which is a great lesson in and of itself for tech companies willing to listen.
Dev mode should be considered as part of that success. It devalued hacking the system in the first place. It’s not going to be hacked if people aren’t trying.
“unhackable” is a bit sensationalized here. the Xbox One is actually a security success story not because it is impossible to hack, but because it’s a rare example of a console that wasn’t hacked in its service lifetime. at the risk of giving praise to Microsoft, the architecture is actually really neat and informed the security features of subsequent Windows releases, ie a hypervisor with sandboxed sub containers (this is why they required TPMs).
(also i’m not agreeing with requiring a TPM for general purpose machines; they make sense on a bespoke hardware platform like a game console)
i bet this hack is nuts, but the blue team deserves some level of kudos
https://youtu.be/U7VwtOrwceo
I feel like allowing users to access dev mode played a large part in this as well. Without the option surely it would have been cracked sooner.
Which is a great lesson in and of itself for tech companies willing to listen.
And that is why they NDA anyone who touches a dev kit.
This whole post, including your point, is basically just mirroring what MVG said in this video: https://youtu.be/Evi6IDgjPD0
Dev mode should be considered as part of that success. It devalued hacking the system in the first place. It’s not going to be hacked if people aren’t trying.