Xbox 360 Vulnerable to Credit Card Theft?
By Surojit Chatterjee | April 1, 2012 1:20 AM EST
Credit card information is being reportedly picked clean from refurbished Xbox 360s, along with other personal information. Microsoft is investigating the claims.
"Microsoft does a great job of protecting their proprietary information, but they don't do a great job of protecting the user's data," she said.
Three researchers - Podhradsky, Rob D'Ovidio, and Cindy Casey, from Drexel and Pat Edgebreston at Dakota State University - purchased a refurbished Xbox 360 last year.
"They downloaded a basic modding tool and used it to crack open the gaming console, giving them access to its files and folder. After some work, they were able to identify and extract the original owner's credit card information," Kotaku reports. The Web site contacted Microsoft, but didn't receive a response.
Podhradsky says she isn't a regular gamer so, theoretically, the process would be even easier for experienced hackers.
"A lot of them already know how to do all this. Anyone can freely download a lot of this software, essentially pick up a discarded games console, and have someone's identity," she added.
For users wanting to sell their Xbox 360, the recommended advice is removing the hard drive and connecting it to your computer. Download a programme like Darik's Boot & Nuke program that removes all data.
"I think Microsoft has a longstanding pattern of this. When you go and reformat your computer, like a Windows system, it tells you that all of your data will be erased. In actuality that's not accurate - the data is still available ... so when Microsoft tells you you're resetting something, it's not accurate," Podhradsky added.
Despite not commenting on the original Kotaku story, general manager of security for Microsoft's game business - Jim Alkove - said the claims were unlikely.
"Xbox is not designed to store credit card data locally on the console, and as such seems unlikely credit card data was recovered by the method described ... [W]hen Microsoft refurbishes used consoles we have processes in place to wipe the local hard drives of any other user data. We can assure Xbox owners we take the privacy and security of their personal data very seriously," he said, despite the researchers claiming otherwise, while speaking to GameSpot.
"We are conducting a thorough investigation into the researchers' claims," he added.
(reported by Jonathan Charles, edited by Surojit Chatterjee)
To contact the editor, e-mail:
Most Popular Slideshows
- NFL MNF: Pittsburgh Steelers 30, Houston Texans 23 [PHOTOS]
- 2014 MLB World Series Game 1: San Francisco Giants 7, Kansas City Royals 1 [PHOTOS]
- 2014 MLB World Series - Game 2: Kansas City Royals 7, San Francisco Giants 2 [PHOTOS]
- NFL Thursday Recap - Denver Broncos 35, San Diego Chargers 21: Peyton Manning Has 3 TDs In Easy Win [PHOTOS]
Join the Conversation
- Sony Xperia Z3, Z1, Z1 Compact And Z Ultra Latest Firmware 23.0.A.2.108 And 14.4.A.0.155 Certified
- Android 5.0 Lollipop For Sony Xperia Z Devices Arriving By 2015; Z Ultra GPE Update Confirmed In 2014
- Samsung Galaxy Note Edge and Note 4 Designer Secrets: Behind The Materials, Edge Screen And S Pen
- 'World Of Warcraft' ‘The Iron Tide' 6.0.2 Patch Hotfixes Update Including New Resolved Issues Regarding Scenarios, Raids, Classes, Battlegrounds And Arenas
- Sony Xperia Z3 Launched In Japan Has 32 GB Storage Compared To 16 GB International Model
- Xiaomi Redmi 1S vs. Sharp Aquos Crystal – Specifications, Features And Price Showdown
- ASUS Releases A Teaser Indicating The Arrival of New Zenfone and ZenWatch On October 28
- Boy Stoned To Death For Alleged Rape, Victim Receives Dowry From Militants
- Three Dual SIM Samsung Galaxy Note 4 Duos Variants Comes To China
- Russia is Creating Underwater Combat Robots to Protect its Arctic Territories
- ‘Lone Wolf’ Attack on Canada Parliament Hill Could be ISIS-Related
- Update HTC One M7 with LG G2 with Android 4.4.2 as Sprint OTA: Fixes and Installation