Xbox 360 Hacks & Mods - www.xbox360-hacks.comthe DashHacks Network

- ps3-hacks.com psp-hacks.com iphone-hacks.com ipod-hacks.net nes-hacks.com dashhacks.com -

October 14, 2007
Xbox 360 Arcade Unboxed: It Has HDMI

Posted by The Ori

Thanks to Emanuel, an intrepid tipster who went above and beyond the call of duty, there has been a full unboxing of the “Xbox 360 Arcade”, before Microsoft has even been able to send out a press release about it. Whenever the console officially lands, you can expect to pick up the hard drive free console for $279.99, which includes a 256MB Memory Card, a Wireless controller, and? A HDMI port minus the cable.  Also included is a disc that has Xbox LIVE Arcade games: Boom Boom Rocket, Feeding Frenzy, Luxor 2, Pac-Man Championship Demo, and Uno.

Comments (2)

October 13, 2007
Project started: rebooting into an(y) unsigned kernel and hypervisor

Posted by The Ori

Arnezami started a thread over at XBH to start of development of a ‘rebooter’ for the Xbox360 with exploitable HV. The goal is to reboot with a modified kernel and HV that will allow unsigned executables. Arnezami already released an initial version of his rebooter, but some work is still required before we can actually run homebrew code:

Before going to the juicy stuff I will first address these matters:
* How rebooting into an(y) unsigned kernel and hypervisor is done (using a 4532 or 4548 xbox).
* Why it is required to make substantial progress in the development of homebrew applications and software mods.
* How it can be a solution to the dilemma of having to choose between homebrew/linux vs playing new (or live) games.
* What milestones this project has to reach to arrive at the desired results.

I’m also releasing the first version of the rebooter which does most of the rebooting already. :-) That way other hackers can contribute as well and speed up the progress. I’ve also made a tool to assemble the rebooter file (using your own xbox-specific information) to allow everyone to create his or her own kernel/hv patches and run (and share) them. And that way there are no copyright issues.

I hope my contribution here will kickstart this project and will give all xbox 360 users a good reason not to update to any future version of the dash/kernel (which will most likely kill any hope of homebrew/linux or whatever else can be done besides what MS wants you to do) but instead to consider downgrading your xbox using the timing attack.

***Rebooting:
First off. We are talking about rebooting. Not about booting. And there is a fundamental difference.  will explain.

When the xbox 360 is turned on the first thing it does is start look in its ROM (also called the first bootloader or 1BL). In the 1BL there is code which the cpu will execute. There is also a public key in it. This is used to check the validity of second bootloader (the CB section in the flash). Because the key is in ROM (and only MS has the private key) and the ROM is inside the cpu casing there is no way to run unsigned code during normal boot.

We can however run unsigned code on the xbox 360. This is done using the KK exploit. And you need kernel version 4532 or 4548 for this. The problem is when doing the KK exploit there is still a signed kernel in memory. And its “non-trivial” to change/patch it on-the-fly and return to it as if nothing was happened.

In order to run an unsigned kernel/hv (which is required to run unsigned software on the xbox 360) you somehow need to replace the current operating system (kernel/hv/dash etc) completely. The best way to do this is to reboot the xbox but while rebooting change some things on-the-fly (eg. turning off xex-signature checks, the functions that blow fuses etc).

In other words: do a soft-reboot.

Doing a soft-reboot (as opposed to a hard-reset/boot which lets the cpu start in the ROM again) allows us to stay in control. That way we can choose how the to-be-booted kernel/hv/dash should look like (and in principle we can also choose which version we want to run, more on that later).

The rebooter I’ve written so far does this. It loads the CD section into memory and essentially runs it. The tricky part is to make sure the xbox is put into the same state as it was during the normal boot. But much of this has been done now. The current version of the rebooter can now reliably reboot from POST 0×40 to 0×79 (which is the last POST output during normal boot). The xbox also resets the screen output and seems to detect the wireless again.

***Homebrew:
If we are succesfull in (fully) rebooting into an unsigned kernel/hv we can patch the the kernel/hv to allow execution of unsigned xex-es (among many other things). Right now it is already possible to patch the kernel/hv so the moment we can get it to fully boot it should be easy to turn off the bad stuff… Wink

Creating unsigned xex-es probably requires the ability to compress and encrypt self made xex-es. Although the availabilty of libraries (not on retails boxes) might be a harder problem. But I guess these problems were also solved with the xbox1.

Apart from homebrew applications you can also think of mods: how big do you want your hdd to be? Want to change the dashboard appearance? Want to disable dvd-video or game region check? No problem.

But all of that is only possible if you can run an unsigned kernel/hv. And since we cannot boot into one we have to reboot into one.

Keep in mind that in order to run homebrew or linux you have to downgrade to an exploitable kernel. And this requirement is unlikely to change. Upgrading to the upcoming “fall update” is most likely going to disable the ability to run any old kernel version (well thats what we expect MS to do). So its decision time Wink.

***Solution to the Dilemma:
While it may seem like you have to choose between two worlds the ability to run any unsigned kernel/hv may the solution to the problem. ;)

The idea to run a different kernel from the the one on the flash could work like this:
* You start with a dual nand system where both nands have the same kernel/dash version: 4532/4548
* You boot and start the KK game resulting in the exploit.
* You then hot-switch to the other nand. And reboot into the 4532/4548 dash. The hypervisor is patched to fake any efuse blowing (meaning it writes the new contents of the fuses on the nand or somewhere else )
* You upgrade to the latest kernel. Lets assume this will be the fall update and it blows a fuse in the fuserow 2. However since we are running a patched hv the fuses aren’t actually blown. But on the second nand (which is now active) the new bootloaders/kernel/dash is written to including the new fuserow 2 value (in the CB).
* The beauty is: you can still boot into 4532/4548 and run homebrew/linux. And you can also reboot into the fall update by starting in 4532/4548 then switching to the second nand and rebooting into the new kernel.
* Apart from a tiny patch deep inside the hypervisor (which fakes the fuse blowing) there is no way to tell (for an executable coming from live or a new game) that the xbox is running in “unsigned mode”. In fact (and this is the kicker) the hv protection system is working for us now Grin. MS can’t detect what we’re doing because of their own protection system. Talk about irony…

Keep in mind this is still theory.
Of course a dual nand system still requires soldering. But maybe the above is also possible by using a memory card to store the new kernel/dash etc. This is much harder to make stealthier though so live is not really an option. But new games probably are Wink.

***Project phases:
I guess the project can be divided into several phases given the above:
* Phase 1: Rebooting into an unsigned kernel. Making sure no patches are needed to the kernel/hv to simply boot. Main goal is to basicly restore the xbox 360 into the state it was during boot. Also making it possible to restart from CB or even 1BL so if CB changes in any of the new updates we can run it. This would require a “recursive” patcher though.
* Phase 2: Disable all security measures in the 4532/4548 kernel. The ability to run unsigned xex-es (also being able to encrypt them). Basicly removing all the “bad” stuff and paving the way for homebrew. Also being able to disable fuse blowing functions.
* Phase 3: Hotswapping the nand (best software triggered). Fake fuse blowing by storing the new values somewhere (a place a xex can’t access, maybe in the kv). Being able to upgrade and dual boot using the rebooter. Making it stealthy by cleaning up all traces.
* Phase 4: Doing the same as in phase 3 but using a mem card or harddrive as storage device (or for example the flash on the hd-dvd drive).

***The rebooter:
And finally the juicy stuff. Go here to try out (and help testing/developing) the rebooter itself:
http://www.xboxhacker.net/index.php?topic=8737.0

Comments (2)

October 11, 2007
Why Is PS3 Harder To Develop Games For -vs- XB360?

Posted by The Ori

The Xbox 360 processor was designed to give game developers the power that they actually need, in an easy to use form. The Cell processor has impressive streaming floating-point power that is of limited use for games. Why? Game code is a mixture of integer, floating-point, and vector math, with lots of branches and random memory accesses. This code is best handled by a general purpose CPU with a cache, branch predictor, and vector unit. The PS3 SPEs have no cache, no direct access to memory, no branch predictor, and a different instruction set from the PS3’s main CPU. They are not designed for or efficient at general purpose computing. DSPs (SPEs) are not really appropriate for game programming. Xbox 360 has three general purpose CPU cores. The Cell processor, in addition to the 7 SPEs,  has only one General Purpose CPU.

Dot products are critical to games because they are used in 3D math to calculate vector lengths, projections, transformations, and more. The Xbox 360 CPU has a dot product instruction, where other CPUs such as Cell must emulate dot product using multiple instructions (Emulation uses more of the CPU’s power - and more CPU cycles). Cell’s streaming floating-point work is done on its seven SPE processors. Since geometry processing is moved to the GPU, (Even ignoring the bandwidth limitations the PS3’s GPU is not as powerful as the Xbox 360’s GPU) the need for streaming floating-point work and other SPE style programming in games has dropped dramatically. Sony’s CPU is ideal for an environment where 12.5% of the work is general-purpose computing and 87.5% of the work is DSP calculations. That sort of mix makes sense for video playback or networked waveform analysis, but not for games. Cell is optimized for streaming floating-point, with 87.5% of its cores good for streaming floating-point and nothing else; this is the only place where XB360 falls short, by 50%.

So, why are games slow to arrive on PS3? Game programmers do not want to spread their code over eight processors, especially when seven of the processors are poorly suited for general purpose programming. Evenly distributing the game code across eight processors, one being a general purpose one (optimized for other code) , is extremely difficult. It’s almost a whole new way of thinking and programming, the developers were not prepared for.

Comments (17)

October 11, 2007
XB360 HD-DVD Drive - Free movie offer extended, new free movies

Posted by The Ori

Back in July, Microsoft dropped the price of the Xbox 360 HD DVD player add-on to $179 in the US and threw in five free HD DVD movies as part of the Perfect Offer promotion. That promotion was scheduled to end on September 30th, but it has been extended until next year with a new set of movies to choose from.  The new five free HD DVD offer started October 1st, 2007 and will run through February 28th, 2008, where with any new HD DVD player purchase, customers will get to choose five free movies.

DETAILES HERE

Comments (2)

October 11, 2007
XB360 Core replaced by “Xbox360 Arcade”

Posted by The Ori

This should be further evidence that the Core system days are over. A photo obtained by GameSpot, shows that retailers are already erecting displays for the Core replacement, the “Xbox 360 Arcade” SKU. As previously speculated, the display shows the console will come bundled with a wireless controller, a 256MB memory card, and five arcade games. Microsoft declined to offer comment on the photo of the console.

Xbox 360 Arcade SKU

 

As you can see in the comparison columns, one says Xbox 360 Arcade, then Xbox.  There was no pricing information.

Comments (2)

October 9, 2007
Yet another planned XB360 Mainboard revision after “Falcon.”

Posted by The Ori

Well, we all know the 65nm CPU will be in the “Falcon” release boards, so what of JASPER? I think enough is enough!

Jasper (the friendly…. Eh, never mind) is the code name for the next motherboard for the Xbox 360. It will becoming next August, just in time for next year’s holiday season. Jasper is going to have a 65nm GPU (graphics chip from ATI Technologies), as well as smaller memory chips. That isn’t much information to go on, but it’s enough to tell people about their great cost-reduction plan. If you ask me, and probably everyone else, it’s a bit of a slow pace, considering…

So, why will it will take Microsoft essentially three years to cost reduce the size of the graphics chips, and memory chips, through a manufacturing shrink (Can you imagine what Sony will do with PS3 by year three?)? It doesn’t seem all that likely that they’re in a hurry to launch a redesigned Xbox 360 with the new graphics chip, considering that Intel (and AMD) have introduced their 65-nm chips a long time ago. ATI uses TSMC to make its chips out of Taiwan, and TSMC (look them up), hasn’t been the fastest people at moving to the 65-nm manufacturing process. We are to understand these tasks are difficult, and they take a lot of engineering resources. Microsoft has had to divert a lot of engineers to debugging problems with Xbox 360 reliability (hmm, you don’t say). Even so, you would think that they would have moved just a little faster, since the move to 65-nm graphics chip will likely be one of the best things they can do to improve the reliability of the XB360, considering HEAT generated is the main problem with it.

So, here is something that Xbox 360 buyers (and owners) should be aware of: Both Falcon and its predecessor Zephyr (used in the Xbox 360 Elite) have different thermal solutions than the original Xbox 360 (NO, Really?). You’ve seen the heat sinks in the cut-out photos posted elsewhere. Microsoft engineers believe those heat sinks will be sufficient as a solution for keeping Xbox360s from overheating. From their point of view, you don’t have to wait until Jasper to get a reliable machine, right? Then why are they making it?

This is all very suspicious here, because apparently, they still have a problem. So, they keep redesigning the product, all in an effort to reduce the heat output from the console. I, and everyone else, will not appreciate that; by THIRD generation, other people will have a more reliable, and to boot, a cheaper console. So, what about everyone that paid FULL PRICE for the portable oven that they have now? I don’t like it, not one bit. Sure, I like the Xb360, but I don’t have to like what they are doing, as they know full well, they have a real problem on their hands with the Xb360.

So, since we all have a 3-year, 3 lights of death warranty, one can only hope to snag a Jasper just before the warranty runs out.

Comments (4)

October 9, 2007
More on GTA: IV - The Delays Till 2008

Posted by The Ori

Zelnick told the world that the delay was due to “almost strictly technological problems… not problems, but challenges.” 

“We’re not gonna send money back to Microsoft. That’s not part of the deal.” Said Zelnick about the planned episodic content for the game, the first instalment of which is scheduled for a March 2008 release. Take-Two don’t plan to adjust the Xbox 360 episodic content schedule at the moment and are confident that they can deliver the episodic content as planned.

I looked at the “content” of the game, and there is definitely a graphic depiction of  the Lawyer, Mr. Jack Thompson (As seen below)

It it him?

That looks pretty close, if you ask me.

Other rumors say the delay was because Halo III would have killed sales.  The others are because of the Ban of Manhunt 2, and legal issues with GTA:IV and Mr. Thompson.  I read elsewhere that; Development on the PS3 has proven to be a little more difficult, where as the XB360 version was pretty straight forward.  Zelnick said there were technical problems, and that would be PS3 issues.  Neither game is a port, they are both being written from the ground up, for each console.

Remember, GTA has always been a port to the original Xbox, from six months to years after the PS2 versions.  So, you have to wonder, why is this taking SO LONG?!  My money is on the rumor that; one version is completed, but waiting for the other.

On 10th May 2006 Rockstar announced that the next version of Grand Theft Auto will be released simultaneously on Xbox 360 and PS3.  That is the contract deal that Take 2 has with both M$, and SONY.  Rockstar also said that they are “not giving money back” to M$?  This may be due to the possibility, that the XB360 version is done, but the PS3 version presents programming “challenges”, so even if the the XB360 version is done, it  can’t be released till the PS3 version is done and ready for release.

Also? Hosi starts off assuring gamers that it doesn’t matter which platform they play on, he soon makes it clear where the hardcore gamer will find the ‘complete experience’;

“They’re identical games. We’re not hardware makers, and we’re not like a pawn between these companies, we try not to be as much as we can. We make great games for people to enjoy on whichever system they want.”

Wait for it…

“But I guess if you want the complete experience with the episodes, then yeah, you should buy the 360, I suppose.”

As always, rumors are just that, RUMORS.  Feel free to search the internet on why GTA IV is being delayed.  There is more to Zelnick saying it was simply his decision alone for the Fiscal 2008 release.

Comments (1)

October 8, 2007
First working (kind of) SATA-PC drive on Xbox360

Posted by The Ori

The Philips DROM6316 drive is using x360 retail benq firmware, and dvd key. A small modification enables it to run backups.  Do not ask for the firmware, it’s not available, and it’s all still not finished. The eject function is now almost fixed. Open/close tray options also works through dashboard.

Oh, and by the way, this is not new information, but a progress update. It will hopefully be possible in the future to run an ixtreme variant on this drive.

See it at the original thread at: xboxhacker.net

Comments (1)

October 8, 2007
Melted Xbox360 - Microsoft not at fault.

Posted by The Ori

Apparently, the below depicted Xbox 360 meltdown occurred when a young fella and his pals, setting up to conduct a furious Halo 3 LAN match, ran out of space for an Xbox everywhere in the house, except on the kitchen stove. Well, someone turns the range on, and presto change-o: you have instant grilled Xbox. Well, maybe the story doesn’t quite add up, but there’s no denying; This box is melted.

Melted Xbox 360

Comments (8)

October 7, 2007
Lite-On IT Obtains Additional Orders for 360 DVD-Drive

Posted by The Ori

Lite-On IT, the largest Taiwan-based maker of optical disc drives (ODDs), has received additional OEM orders for internal DVD-ROM drives for use in Xbox 360 consoles from Microsoft and consequently has given top priority to Microsoft’s orders in allocating its total production capacity, according to sources from the ODD components industry in Taiwan.

To meet Microsoft’s urgent demand, Lite-On IT has allocated production capacity solely for turning out one million Xbox 360 DVD-ROM drives a month, the sources pointed out. But the capacity is still not enough, and thus Lite-On IT has dedicated additional capacity, the sources indicated.

Lite-On IT is the third OEM maker of Xbox 360 DVD-ROM drives having started shipments in June-July with an initial monthly volume of 300,000-500,000 drives, the sources said. Shipments in September were already likely close to one million drives, not including the additional orders, the sources indicated.

Microsoft has also placed additional orders with Wistron, a Taiwan-based assembly maker of Xbox 360 consoles, the sources indicated.

Note: Lite-On bought the BenQ-Philips ODD division a while ago, so they are probably talking about what we know as the ‘Xbox360 BenQ drive’. Looks like we’ll be seeing more and more of these drives soon.
Full Story: digitimes.com

Comments (1)

« Previous PageNext Page »
Home Forums XBox360 News XBox360 Hacks XBox360 Saves XBox360 Downloads
XBox360 Accessories Reviews Contact Us SiteMap


Links Provided by a 3rd Party:

Adrian Flux Car Insurance - Halifax Car Insurance - Accommodation Rotorua - Penny Stocks Articles - 123Spill


Mortgage Calculator - Credit Card Consolidation - Loans - Arizona Landscaping

©2008 Dashhacks Inc. - part of the dashhacks network.