Xbox One Hacked After a Decade: 'Bliss' Exploit Unlocks Unsigned Code Execution
After more than a decade of security, the **Microsoft** Xbox One has reportedly been hacked. A researcher known as Gaasedelen successfully exploited the console using a voltage glitching technique dubbed 'Bliss,' allowing for the execution of unsigned code at every level.
It's a significant achievement, marking a complete compromise of the console's security.
### The 'Bliss' Exploit
Gaasedelen turned to voltage glitching after reset glitching proved ineffective. Instead of manipulating the system reset pins, the attacker targeted the CPU voltage rail. This was particularly challenging because direct observation inside the Xbox One was impossible, requiring the development of new hardware introspection tools.
The 'Bliss' exploit involves two precise voltage glitches in quick succession. The first glitch bypasses the memory protection setup of the **ARM Cortex** processor. Subsequently, the Memcpy operation during the header read is targeted, enabling a jump to attacker-controlled data.
### Unpatchable Vulnerability
According to Gaasedelen, this hardware attack against the boot ROM in silicon is unpatchable. This means the exploit provides complete control over the console, enabling the loading of unsigned code at all levels, including the Hypervisor and OS. Furthermore, 'Bliss' grants access to the security processor, allowing for the decryption of games, firmware, and other protected content.