| Commodore4eva Explains Stealth Media |
Aug 15 2006, 05:57 AM
Memba Numero Uno
Joined: 17-May 02
Member No.: 1
Xbox Version: unk
360 version: unknown
Commodore4eva Explains Stealth Media
Posted by XanTium
| August 15 00:57 EST
Commodore4eva implemented "Stealth Media" into the lastest version of his TS-H943 DVD firmware (Xtreme firmware 3.0 for TS-H943 Xbox 360). Today he posted more details about what this exactly means:
* Stealth Media
This is to clear up a few misconceptions about what Stealth Media is and how it works. This is not firmware stealth. Reading the firmware itself for changes is not controlled by the firmware itself, it is a low level hardware function which cannot be stopped by firrmware code.
A firmware check routine which calculated a checksum and returned that to the host was already found in V1 and was modified to always return the correct unmodified firmware value. I think this was a last minute check incorporated by MS as they knew the firmware code was not signed.
Stealth Media is all about making a backup disc appear to the Xbox360 host exactly the same as an original. Although this was already done by the Security Sector and the challenge/response, there remained a number of differences on the disc that are currently not checked for. It would be very easy for the dash or the particular game to perform these extra disc checks. There are four main aspects to Stealth Media:
* PSN Lockdown:
This is a two part process:
-Before disc authentication (security sector,challenge response) is performed the drive will only allow vaild PSN reads as defined in the PFI sector. This is currently the standard video partition. Any request to read outside this range is not allowed - as per originals. (No more reading of the backup PFI,DMI,SS sectors.)
-After disc authentication is performed and the drive is unlocked only valid PSN reads are allowed from the range defined by the Security Sector, this is the standard game partition. Any request to read outside this range is not allowed - as per originals.
* PFI Sector (Physical Format Information):
This sector is contained within the lead-in and contains information about its physical format. Disc booktype, start PSN and end PSN and Layerbreak are contained here. Currently all Xbox360 and Xbox1 games have the same PFI information, but that may change.
On Writable media (our backups), this also contains media specific information such as Media Code/Manufacturer ID and Media Product Revision number.
Any requestes for this information is now redirected to the the PFI sector now at $04FB1D (for Xbox 360 backups) or $0605FD (Xbox 1 backups), if it exists. If it does not exist (pre V3 backup) a seperate embedded PFI is used for Xbox 360 and Xbox 1.
* DMI Sector (Disk Manufacturing Information):
This sector is also contained within the lead-in and contains information about the Disc manufacturer, such as Company name, batch id etc. This is currently different for each Xbox360 and Xbox1 game in each region.
Any requestes for this information is now redirected to the the DMI sector now at $04FB1E (for Xbox 360 backups) or $0605FE (Xbox 1 backups).
A pre V3 backup will always return blank information for this. (A possible detection method.)
* Video Partition:
When Extreme V1 was released ,the disc build included a blanc video partition as it wasnt required for games to boot. As this can be checked by the XBox360 host, the standard video partition from any game was included with the stealth firmware. This is nothing new, just put back in for correctness!
As of today , none of these extra disc checks are being performed, but it is only a matter of time before a game will. The same sort of checks were introduced to XBox1 games a while ago. I performed an exhaustive check of every command that the Samsung firmware can respond to and these differences were discovered.
The Samsung firmware only supports a limited subset of commands from the MMC-3/4 standards so not all commands exist compared to a standard PC drive, so anyone testing for media specific information should bear this in mind.
Non-Stealth backups will still boot with stealth firmware and will be enhanced with the PSN Lockdown and PFI Sector embedded in the firmware. These backups will have no DMI and possibly have a blank video partition, both of which can be checked for.
Stealth backups will still boot with non-stealth firmware but will be exposed to the above top three differences (PSN Lockdown,PFI,DMI) making the backup detectable. Correct Video partition is present.
News-Source: xboxhacker.net (this is posted in the XBH tech section - please keep discussion there serious/tech only - thx)
Posts in this topic
Xbox-Scene Commodore4eva Explains Stealth Media Aug 15 2006, 05:57 AM SAPHiREX thanks for the headsup.
now it makes sense ^_^ Aug 15 2006, 05:56 AM Nailed Good write-up. Any word on when the Hitachi drive... Aug 15 2006, 06:07 AM J0RD4N 007
does this mean that a modified firmware cannot b... Aug 15 2006, 06:22 AM Textbook
does this mean that a modified firmware cannot be... Aug 15 2006, 12:48 PM Bradl3y
I'd like to know the answer as well. Everybo... Aug 15 2006, 01:21 PM Textbook
If you read his posting, you would see that your ... Aug 15 2006, 02:15 PM ILLusions0fGrander
does this mean that a modified firmware cannot ... Aug 15 2006, 06:24 AM halikus You must be tired by now Commodore4eva, for the lo... Aug 15 2006, 06:41 AM Base8 Thanks again comadore4eva, I have yet to mod my dr... Aug 15 2006, 08:24 AM mist4fun
Thanks again comadore4eva, I have yet to mod my d... Aug 15 2006, 11:06 AM tom_mandory i see Aug 15 2006, 09:19 AM pickie ?? so the backups of my games which i have as imag... Aug 15 2006, 10:08 AM bucko Very nice work :D Aug 15 2006, 11:11 AM infamous_Q i wonder if its possible to merge this new stealth... Aug 15 2006, 11:42 AM jo7a thks Commodore4eva :) Aug 15 2006, 12:20 PM KUNFUCHOPSTICKS * DMI Sector (Disk Manufacturing Information):
Thi... Aug 15 2006, 12:47 PM jtom617 thanks for the update, this explains many things t... Aug 15 2006, 01:11 PM KUNFUCHOPSTICKS lol who gives, just dont go online! Aug 15 2006, 02:50 PM kowrip
lol who gives, just dont go online!
It migh... Aug 15 2006, 03:23 PM stbennet The "don't go online" strategy is fi... Aug 15 2006, 03:27 PM Textbook Meeks and I were discussing this in #fw yesterday.... Aug 15 2006, 05:28 PM _8ight it's obvious this isn't some random yahoo ... Aug 15 2006, 05:57 PM krayzie The problem is that the check for the firmware mig... Aug 15 2006, 06:06 PM infamous_Q and thats where these ideas could come in:
on-the... Aug 15 2006, 06:20 PM kowrip
and thats where these ideas could come in:
on-th... Aug 15 2006, 09:22 PM shizzyraw585 Ok,
I understand that the reading of the firmware... Aug 15 2006, 07:38 PM krayzie
Unless they do something drastic like rewrite and... Aug 15 2006, 07:53 PM OriginalCompGeek Well, one thing I am 99% sure on is that whatever ... Aug 15 2006, 07:39 PM infamous_Q wait a sec...is media stealth JUST the way the dis... Aug 16 2006, 02:57 PM kowrip
wait a sec...is media stealth JUST the way the di... Aug 16 2006, 03:28 PM infamous_Q thats what i meant....if the backup appears exactl... Aug 16 2006, 04:04 PM kowrip
thats what i meant....if the backup appears exact... Aug 17 2006, 12:16 AM nicholson82 Awsome job C4E!!
Now for the LG Version..... Aug 16 2006, 07:50 PM phrozen209 hey, so if the backups are stealth, then why dont ... Aug 16 2006, 10:23 PM Infamous
hey, so if the backups are stealth, then why dont... Aug 16 2006, 11:43 PM boza111 no offense commodore4eva i dont think you should h... Aug 16 2006, 11:48 PM pcrat so is this being done "stealth" to play ... Aug 17 2006, 01:20 AM WinbonD
if its for offline play exellent job, if it helps... Aug 17 2006, 03:06 AM roughriders i just hope they dont complete ban people from liv... Aug 17 2006, 05:00 AM infamous_Q
I see what you are asking. The big questions are... Aug 17 2006, 03:07 PM KUNFUCHOPSTICKS the most they will do is ban you from live. i dont... Aug 17 2006, 03:50 PM Obveron
the most they will do is ban you from live. i don... Sep 6 2006, 03:56 PM Kikbuty Has anyone got an update on this since the Novembe... Feb 2 2009, 12:10 AM