HackerTubewatch
Surprise me
Frame from BlueHat Seattle 2019 || Guarding Against Physical Attacks: The Xbox One Story Plays via YouTube's privacy-enhanced embed

BlueHat Seattle 2019 || Guarding Against Physical Attacks: The Xbox One Story

Microsoft Security Response Center (MSRC)
Talks
YouTube
2 HN users recommended this talk3 months2020–2026 score 3.5
Years with an HN recommendation, 2007–2026

HN recommends it as a fascinating, authoritative account of console hardware security, often cited in threads on hardware security and anti-cheat.

Tony Chen of Microsoft explains at BlueHat Seattle 2019 how the Xbox One was designed to resist physical attacks. He covers the security design and hypervisor-based OS architecture that kept the console uncracked for years.

“the whole talk is incredible” (HN, 2021)

1 strong recommendations · 2 recommendations · 1 citations · Talks · advanced

4 Hacker News comments

From the HN archive; up to 20 kept per video, favoring different commenters. Recommendations first.

@Arainach Oct 2021 Strongly recommends
on HN thread Call of Duty Adds Kernel Level Driver for Anti-Cheat
Everything is very much separated. It's actually a series of OSes running in a hypervisor. [link] [this video] (for software discussion check around the 19:00 mark but the whole talk is incredible)
Describes the Xbox One OS architecture running in a hypervisor.
@Arainach Mar 2026 Recommends
on HN thread Microsoft's 'unhackable' Xbox One has been hacked by 'Bliss'
Given that it held up against 13 years of dedicated efforts by people with physical access to the device, many years after its successor was launched, it seems merited in this case. This talk about some of what went into it is fascinating: [this video]
Explains what went into Xbox One's hard-to-hack design.

Citations, criticism and jokes

@michaelt Aug 2021 Cites it
on HN thread Fault Injection Attacks Against AMD's Secure Encrypted Virtualization
Read more
> It is an interesting attack but is the above goal ever achievable? To protect against adversaries from the inside. People have gotten very close to achieving similar goals. For example, modern games consoles' anti-piracy measures guard against the device owner who has physical control and unlimited time. [1] iPhone activation locks likewise prevent stolen phones from being used, even by thieves with physical control and unlimited time. And neither of the systems rely on the clunky 'brick the device if the case is opened' methods of yesteryear. (Of course there have also been a great many failed attempts - almost every console since the dawn of time has eventually been hacked, as have things like TPMs and TrustZone, many versions of the iPhone were rooted, etc etc) [1] [this video]
Example of console protection against owners with physical access.

Video list and Hacker News comment labels from HackerTube (prompted by @karpathy), released under ODC-By 1.0, built on the open-index/hacker-news archive. Hacker News data is provided by Y Combinator; comments remain the work of their authors. Video titles, channel names and thumbnails belong to their creators and are shown via YouTube. HackerTube Watch is an unofficial edition. Data export of 2026-10-31.

Keyboard shortcuts

/
Search
j k
Next / previous video
r
Surprise me
l
Like (video page)
w
Watch later (video page)
?
This help
Esc
Close