Advertisement
Promo

Online business Toolkit

Group cracking Xbox 'for the public good'

Matthew Broersma ZDNet.co.uk

Published: 15 Jan 2003 12:39 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The Neo Project, which is using distributed computing to crack the main security code in Microsoft's Xbox games console, says it is confident its activities will stand up under legal scrutiny because they could have research and social benefits.

The group launched, and then quickly dropped its Xbox cracking plan recently, when it began attracting wide public interest. "With the recent media frenzy we stopped the project to research the legal aspect before proceeding any further," project founder Mike Curry explained on the group's Web site. "It seemed OK until we started receiving 75,000 unique hits per day."

The Neo Project is a group of computing enthusiasts devoted to cracking security challenges using distributed computing techniques, in which heavy-duty computing tasks are divided among a number of PCs. The group's initial software release focused on a $10,000, or about £6,400, challenge from computer security firm RSA Security to crack a 576-bit encryption code.

A subsequent software release was aimed at cracking the 2,048-bit encryption code used by the Xbox. A cracked encryption code could allow hackers to run homemade Linux software on an unmodified Xbox, satisfying a $100,000 hacking challenge funded by Michael Robertson, chief executive of Linux software company Lindows.

The project decided to go ahead with the Xbox crack because it felt the project's aims were compatible with the Digital Millennium Copyright Act (DMCA). The controversial law makes it illegal to break through copyright protections, but makes exceptions for legitimate research. The group is arguing that it is protected by sections of the law that allow for research in encryption, compatibility and privacy.

Since The Neo Project is facilitating a version of Linux that could run on an unmodified Xbox, the project feels it is protected under the exception for reverse-engineering for compatibility purposes. But the project also says that cracking the Xbox's 2,048-bit encryption key has implications for the encryption used on the Internet.

"Even email is secured with 2,048-bit keys. Your bank may rely on this encryption to protect your money. Networks may rely on this level of encryption to prevent access to public utilities and telecommunications," said Curry in a message to users on the project's Web site on Monday. "Factoring of the Xbox key has research and social implications well beyond interest in the game console."

The project also feels it is covered under a DMCA provision allowing a crack if personal information is at stake. Because some researchers have suggested that the Xbox stores its serial number in a way that could be leaked over the Internet -- via Microsoft's Xbox Live service -- Curry argued that decryption and examination of the Xbox's workings would "aid in alleviating these privacy concerns."

The project is working on a new version of its software that will be compatible with Linux, Mac OS, Windows and Solaris, and will be able to run on an Xbox running Linux. Currently about 25,000 computers have signed on, according to Curry.

CNET News.com's David Becker contributed to this report.


For all security-related news, including updates on the latest viruses, hacking exploits and patches, check out ZDNet UK's Security News Section.

Let the editors know what you think in the Mailroom.

  • Email
  • Trackback
  • Clip Link
  • Print friendlyPrint with EPSON

Did you find this article useful?
55 out of 141 people found this useful


Full Talkback thread

0 comments

Company/Topic Alerts

Create a new alert from the list below:





Sentry Posts Blog

Authentication risks all too human

Risks to successful online banking identification and authentication using smartcards involve a mixture of human and technological factors, according to the European Network and Information... More

1 comment

Opera censors Chinese content

Opera has updated the Chinese version of its mobile browser to stop users accessing restricted content. Opera Mini was updated on Friday from an international to a Chinese version,... More

2 comments

Symantec website breached

Security company Symantec has said that one of its websites was successfully breached. Romanian security researcher 'Unu' posted details of the breach in a blog post on Monday. Unu... More

Post a comment

Video icon

Video

Google Chrome

Roundup: Full coverage of Google Chrome

The search giant has launched a beta of its own open-source browser, sending a clear challenge to Microsoft in the way it lets users work with applications More

Blog: Google Chrome has Microsoft's code inside, says MS manager

And furthermore, he says, that's a good thing... More

Blog: Google Chrome — nine things we've found since launch

Google must be very happy with the coverage Chrome has gathered. But it's not all good news... More


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters