Guarding Against Physical Attacks: The Xbox One Story — Tony Chen, Microsoft
Why Hacker News recommends it
HN points to it constantly in console, DRM and hardware-security threads as the authoritative account of Xbox One's threat model.
What it is
Microsoft's Tony Chen explains how the Xbox One was designed to resist physical attacks, including secure boot, encrypted memory, a security processor and a hypervisor. The goal was to make any hardware attack cost more than the price of many games.
Recommended by 8 HN commenters across 8 different months, 2019 to 2026.
What Hacker News said
Recommends doikor · 2020-11 · on “How to turn your Xbox Series X/S into an emulation powerhouse”
Here is an excellent talk about the Xbox One security (and Series X|S should be quite similar) by the person who is in charge of security on the Xbox platform. [this video] Basically it boils down to trust NOTHING outside the actual SoC chip (so stuff like RAM, Flash/HDD, optical dics, etc cannot be trusted). The SoC is made on 28nm (Series X|S 7nm) process so physically attacking it is very hard/expensive. Also goes into the difference between Windows (PC) and Xbox (Console) security. On PC the owner/admin wants the help keep the system secure as it gets attacked by malicious parties from the internet. On console the owner is usually the bad guy (the one doing the attacking) and thus needs a ver
Recommends monocasa · 2021-04 · on “Signal Server code on GitHub is up to date again”
DRM has only been successful in the space of making easily replicable attacks more expensive than what is being protected by the DRM. Microsoft has talked about this publicly in this great talk on the Xbox One's physical device security. 'We can't stop people hacking, but we can make each hack more expensive than what someone would spend on games on average'. [this video] SGX running on centralized servers turns that calculus on it's head by concentrating the benefits of the hack all in one place.
Recommends nemothekid · 2022-03 · on “Nintendo Switch prevents downgrades by irreparably blowing its own fuses (2020)”
There's a really good presentation, by a Microsoft Platform Security Engineer, detailing the lengths they went through to ensure only properly signed executables run on the Xbox One and really answers your question. One of the tools they developed, HVCI, was later incorporated into Windows Hyper-V. [this video]
Recommends RandomBK · 2022-07 · on “The Dangers of Microsoft Pluton”
Obligatory link to the talk from MS where they covered the origins of Pluton on the Xbox: [this video] The video does a good job of the original threat model for this technology and how it works on Xbox.
Recommends 323 · 2022-11 · on “Mercedes Makes Better Performance a $1,200 Subscription in Its EVs”
> would like to know how the answer is no TL;DR: cryptography and secure hardware (think TPM) This is a very interesting talk from Microsoft about how they made Xbox immune to physical attacks (modding) like you proposed. Now they are working on getting this tech into regular computers. [this video] Of course, we don't know if the solution Mercedes used is as robust. For all we know it can be hacked in 1 minute.
Recommends numpad0 · 2023-06 · on “Linux on the 7th Generation of Consoles Part 1: Xbox 360”
This talk[1] was interesting watch wrt that. They made DRAM encrypted and Secure Boot seems to be done right too… 1: [this video]
Recommends mmaniac · 2024-11 · on “Switch 2 will be backwards compatible with Switch”
Modchips on newer Switches use fault injections (clock/voltage glitching) but there exist mitigations for those. The Xbox One is confirmed to use them. I encourage you to watch this video where Microsoft describes the security design of the Xbox One, which so far has been almost bulletproof. [this video]
Recommends ytch · 2026-04 · on “Breaking the console: a brief history of video game security”
Guarding Against Physical Attacks: The Xbox One Story — Tony Chen, Microsoft: [this video] I like this video too, Tony Chen explains the overview of Xbox security system.