http://www.theverge.com/2012/3/30/29...-hack-researchRestoring an Xbox 360 console to factory settings before selling it apparently isn't enough to remove your personal information. In an interview with Kotaku, Drexel University researcher Ashley Podhradsky said that her team had successfully retrieved credit card data from a refurbished Xbox using simple modding tools. The software gave them access to the console's files and folders, letting them extract information that hadn't been wiped even by the Microsoft-authorized reseller.
The process was published in the August 2011Proceedings of the America's Conference on Information Systems.
Podhradsky says that Microsoft "does a great job of protecting their proprietary information. But they don't do a great job of protecting the user's data." In particular, she singles out what she sees as a long history of misleading information. "When you go and reformat your computer, like a Windows system, it tells you that all of your data will be erased. In actuality that's not accurate — the data is still available." Fortunately, it is possible to sanitize an Xbox hard drive by hooking it to your computer and running a program like Darik's Boot & Nuke, she says. Podhradsky does not appear to have published research on other consoles, though, so PlayStation 3 or Wii users might want to wait before calling out Microsoft for poor security.
Be careful how you handle your old Xbox!
Results 1 to 11 of 11
- Join Date
- Jan 2008
- Taking my seat at the Fancy Pets Council
- Rep Power
Used Xbox's Can Be Hacked for Credit Card Info
I still have my old one. I wouldn't get rid of it for precisely this reason. However, you can completely destroy it and render this problem mute.
We are conducting a thorough investigation into the researchers' claims. We have requested information that will allow us to investigate the console in question and have still not received the information needed to replicate the researchers' claims.
Xbox is not designed to store credit card data locally on the console, and as such seems unlikely credit card data was recovered by the method described. Additionally, when Microsoft refurbishes used consoles we have processes in place to wipe the local hard drives of any other user data. We can assure Xbox owners we take the privacy and security of their personal data very seriously.
Last edited by F34R; 03-30-2012 at 22:06.
- Join Date
- Aug 2008
- Rep Power
Sounds like BS to me. No credit card info is stored on the machine itself. Now perhaps they can get the gamertag and log in info but I don't think that would get you the credit card info.
Sent from my DROID RAZR using Tapatalk 2 Beta-4
You know how this works?
Idiots thats how.
The idiots leave their live login on the console with the passwrd remebered.
Thank you itachi
Actually its pretty much impossible to fully delete data thats stored on a HDD so even if they deleted the password from being saved, chances are the data is still hidden on the HDD itself and all you would need is the correct adapter and file retrieving software to get it.
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)