Hi,

I have several questions:
1. Was system flashing using fake update ever considered?
2. What kind of protection does update package use?
3. If updates are encrypted is it possible to obtain key from already jtagged dash?

I have failed to find answers on my own.

1. Yes
2. Digital Signature with public / private keypair
3. No

1: Many times.. It was a dead end then and its a dead end now.
2: The Private signature, the Xbox encryption handshake system to prevent a man in the middle attack among the local key being used as well. In other words alot of protection given this is an obvious attack venctor.
3: What key? There is more than one