6 ms·
So, just stating the obvious, you can now (¥) download all xbox games directly from the microsoft store for free? I.e. the xbox is - for now - as completely ha
by Tepix 2y ago
So, just stating the obvious, you can now (¥) download all xbox games directly from the microsoft store for free?
I.e. the xbox is - for now - as completely hacked as the PS Vita?
(¥) you might have to figure out some details
- ryx 2y agoYep. This seems to be the most overlooked part of the article, although maybe the most interesting. Unfortunately not for anyone who has activated the auto-update feature on his/her Xbox, as the latest system software version seems to include a higher kernel version than supported by the collateral-damage exploit.
- 38 2y agoExactly why you should never, ever, enable auto update, for anything. Too often it ends up breaking something or patching something you don't want patched. It allows a profit seeking company to enable or disable software functionality on your device, regardless if it's in your interest.
- indrora 2y agoIt should be noted that unless you've modified an Xbox One, from what I understand you cannot stop it from auto updating unless you permanently disconnect it from the internet (which will cause your licenses to eventually expire, in the year timespan or so), new launch games won't run (they're tied to a minimum version of the OS).
- __MatrixMan__ 2y agoWow, so it's a ticking time bomb, that should be illegal.
- seabass-labrax 2y agoI agree that the device updating without your consent should be illegal, but new games requiring the updates seems fair enough: the Xbox can still run all of the games it was advertised to be able to do so at launch, and if game developers could not rely on the presence of system updates, Microsoft would just release an entirely new, incompatible Xbox instead. I think that updates are fine so long as you can update and roll back whenever you want to.
- Zambyte 2y agoDepending on if you consider "authorization" to require consent or informed consent, it already is illegal behavior under CFAA.
- klodolph 2y agoThat would require a pretty creative interpretation of the CFAA.
- fragmede 2y agoThe CFAA's broad enough so as to allow a lot of creative interpretation. A journalist using view source was breaking the CFAA was one district attorneys view.
- hedora 2y agoThis is the only carve out I could find for manufacturers of computers: > No action may be brought under this subsection for the negligent design or manufacture of computer hardware, computer software, or firmware. I guess Microsoft could argue their entire operating system business, app store, and update infrastructure are intentionally negligent, and so not covered. I’d think a reasonable court would say that it’s working as designed, and therefore not covered by the carve out. https://www.law.cornell.edu/uscode/text/18/1030 https://www.law.cornell.edu/uscode/text/18/1030
- deleted 2y ago[deleted]
- timenova 2y agoThe same is the case with the Xbox Series X/S. I was shown three options for the last update: [Update Now] [Continue Offline without Updating] [Shut Down Xbox].
- eric-hu 2y ago> (which will cause your licenses to eventually expire, in the year timespan or so) Can you manually modify the system clock? If so you could roll the calendar back every 3-6 months.
- thot_experiment 2y agoYup, 100%. My golden rule of computers is: If it's working right now, an update can only cause it to break. The best case scenario is that it still works. Why would your roll the dice?
- hoffs 2y agoGolden rule to get exploited
- 38 2y agothe "but muh security" argument is absolute horseshit 99% of the time. and the 1% that actually need it, are going well beyond automatic updates to secure their systems.
- trog 2y agoIf you look at the background radiation of the Internet of automated things just hitting services to probe for exploits, they are most commonly looking for exploits from bugs in older software. There's a timing argument - that unless you're at risk of zero days (like you're the DOD) - that you probably don't need to upgrade immediately. But it seems unarguable to me that the longer you wait, the greater the risk from a security perspective. As always, security is a trade off. Risk of breaking from an update has to be balanced against risk of exploit. I'd argue the latter is going up more quickly than the former.
- thot_experiment 2y agoHow many actual zerodays are there that don't require you to ALSO be doing something dumb per year? It seems exceedingly rare. I understand the argument if you're talking about like, a server running some CMS or whatever, sure that's gonna get pwned because it's a big target so it's worth going after. Your natted personal machine? You're fine unless you're running executable off random russian sites (and even then you're probably fine if you're getting your shit from reputable shady sites)
- appendix-rock 2y agoAbsurd. There are benefits to enabling auto-updating (security, etc). One should weigh up the costs / benefits oneself and make a call based on that. As usual, such absolutist guidance is hyperbolic.
- HeavyStorm 2y agoYeah, never ever make sure you are patched against hackers who can exploit your devices...
- newdee 2y agoNobody should follow this advice. Not least because you (the person giving it) wouldn’t have to live with the consequences of following it, but mostly because it’s idiotic.
- simonjgreen 2y agoTotal tangent, but extremely interested in the use of the Yen/Yuan sign as a footnote marker. Is there some history here I’ve overlooked or is this just arbitrary?
- Tepix 2y agoHaha - i was looking for ¹, ² or § but couldn‘t find them on my german ipad onscreen keyboard, so i improvised.
- bratwurst3000 2y agoyou have tp hold a key longer and then there it is. i think it was „s“
- AStonesThrow 2y agoI learned BASIC programming on a VIC-20, and I typed in so many "A$, B$, C$", for decades thereafter I pronounced "$" as "string" ("A-string, B-string", etc); it got weird as I discussed Perl scripts with coworkers...
- amplex1337 2y agoHah, I did this as well but on a TI-99-4A. Stopped a long time ago but yes var$ would have been pronounced var-string, even in context of later gwbasic, qbasic etc.
- 2y ago