XTREME-SOURCE
Search:

Go Back   XTREME-SOURCE > GAMING TECH-SUPPORT > GAMING CONSOLES > XBOX 360
Shoutbox
Loading...


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 05-22-2007, 01:08 AM
PTU PTU is offline
Premium Member
 
Join Date: Feb 2006
Posts: 1,969
Send a message via MSN to PTU
Xbox360 LIVE Bans Info and iXtreme Online FW WIP

Posted over at Xbox-Scene:

Quote:
Here are some details about the Xbox360 LIVE bans I got directly and indirectly from GaryOPA, Commodore4eva (C4E), Iriez and others. Of course don't take any of this info as 100% confirmed, noone knows exactly based on what data MS is banning ... it's just an analysis of what they think is happening and what MS might/can be checking.

C4E thinks MS is probably detecting and banning consoles from LIVE by tracking usage of backups via timing of the challenge response (c/r) on the drive over the last few weeks or months. A modified FW will reply much faster to the the Challenges requests (stored in a table) than an original firmware (seek on drive). They probably do this test more than once and can ban you if you're above a certain average.
FuzzyLogic also found that microsoft is sometimes doing additional checks on discs: PFI/DMI (so images without these sectors (or if using an old FWs without support for PFI/DMI) can probably be detected easily), drive inquiry (reads ascii string from drive), and capacity (reports capacity of disc) are requested. Strange thing here is MS requests 0x8000 bytes for PFI and DMI, while it should normally be 0x0800 bytes. TheSpecialist pointed out that the remaining 0x7800 bytes contains the relocated SS and PFI on burned discs ... which would make it very easy to detect backups for MS. C4E however told us this would not work on TS drives as its cut off to 0800 even if more data is asked, it's unconfirmed how modified HLG FWs drives respond to this atm.
The "read capacity check" will also work as detection on HLG because, unlike the newest TS FWs, it doesn't have true 'stealth media' yet, these drives are reporting back the burned disc based size of PFI instead of the correct PFI.
Apparently there's also an issue with SS (Security Sector) extracted from Hitachi-LG, some necessary data is screwed ... which means that probably only the Toshiba-Samsung / kreon setup has been extracting correct SS.

Another thing they are probably detecting (but probably not using yet to decide to ban or not) and log/flag is if you ever booted your Xbox360 with DVD SATA cable not connected to your Xbox360 (E64). Many people did this to power their drive when they wanted to flash it (power connected to 360, SATA to PC). So it's highly suggested to use an external power to flash next time.
It's also possible MS also bans based on stuff like bad credit card info for your country, running a NTSC machine with euro-address/credit card (or inverse), having out-of-region (arcade) games and demos on your HDD, unofficial 360 HDD, internet downloaded gamesaves etc. There's no clear view on all this yet.
For now, C4E believes Microsoft is not detecting modified FWs or detecting FW changes/updates. Using a special FW they did not detect any debug commands sent to the drive by MS (they went through the dash/kernel updates with the special FW as well and did not detect any debug commands there either). So they think either:
A/ MS is not doing any FW detection right now, and only previously (maybe on request of MS servers while playing on LIVE?), or
B/ MS is banning based only on the timings of the drive, ss/pfi/dmi checks, capacity, drive inquiry and c/r verification.

We also got information C4E is working on an "iXtreme Online" FW for Toshiba-Samsung drives, a Hitachi-LG version and maybe even BenQ version might follow later.
The new FW will have less features than the current Xtreme FWs: no single-layer (DVD5) support, no ripping of games (0800 mode), but more features to safely play from burned discs (emulate the exact speed and timings of the original games) and prevent booting from un-safe discs (without PFI and DMI or bad SS - so discs not passing the 'Stealth Check' (using Xbox Backup Creator(info)(info) for example) are not going to boot on the new firmware), or images that aren't exact dumps of the original.
There's no official ETA (maybe this weekend though for TS drives), and of course no guarantee MS will never ban you based on new checks (that's the risk it takes if you want to be part of the modding community ) The HLG FW will take a bit longer as it'll require true 'Stealth media' etc added.

This new FW will of course be made mostly for new consoles being modded, because even if you're not banned from LIVE yet there's no way to know if MS already has info/logs on your console ID regarding timings or other stuff so even changing to this new firmware in the near future may not stop that console ID from being banned in the next wave of MS bans.
If your console is not banned yet, it's highly suggested you don't boot any burned discs, originals should be ok, even when offline (MS might be storing results of some checks in flash), until the release of the new FW.
If your console is already banned this will of course not help you ... just enjoy the offline playing on that console for now (with some games you could try using 3rd party networks like XLink Kai(info)) and maybe some day a new exploit will allow you to do more with that console.

To end with ... X-Scene's obvious tip of the month: don't buy 2nd hand Xbox360 consoles
__________________
PSN: PTU360 250GB (40GB Model PS3) - 35 PS3 games + 41 on the HDD
Live: PTU 360 Xbox360 x2 (Pro + Elite) - 102 360 games + 32 XBLA games
Why not stop by the XS Facebook Group
Reply With Quote
 
Old 05-22-2007, 01:33 PM
Lord Sesshomaru's Avatar
Moderator
 
Join Date: Nov 2005
Location: Anti-Spirals Realm
Posts: 8,386

Very interesting stuff, thanks for posting. The only thing it doesn't explain is why 360's with swapped out, unmodded DVD-ROM drives are getting banned, unless that's something kept in the flash memory log and MS is automatically banning any swapped out drive, assuming it's for modding purposes. That or MS simply screwed the pooch.... again.
__________________


Quote:
Gigabyte DQ6 X-48/Intel Core 2 Quad Q6700@3.00Ghz/4x1GB Corsair Dominator DDR2 PC 8500/Sapphire Radeon HD3870 (Omega Drivers)/Seasonic 650w PSU/Western Digital 500GB SATA II HDD/NZXT Blackline Midtower/Xigmatek HDT-S963 92mm Rifle CPU Cooler/Xigmatek Crossbow LGA 775 Bolt through kit (Burn in hell pushpins!)/Silverstone FM121 120mm Case Fan x3/Logitech Z5500 5.1 Surround Sound
Reply With Quote
 
Old 05-23-2007, 10:49 AM
Administrator
 
Join Date: Aug 2005
Posts: 1,633

You would think that MS would have thought about this being a problem with swapped out drives. But then again, we are talking about MS here...... boy, what was I thinking?


At any rate, this new firmware may not help with currently flashed 360's, even if your not banned from live yet. It just means that either they haven't gotten to you yet (since they are doing the bans by hand) or they haven't reviewed your logs yet and then banned you. I'm not sure if there is a way to keep from being banned at this point, but I'm not giving up hope though.
__________________

|PC|XBOX|XBOX 360|Wii|NDS|PSP|
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


vBulletin 3.7.1 ©2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.2.0