13-Year xbox one lock finally picked live on stage
Markus Gaasedelen froze the boot ROM for three microseconds, injected a voltage fault, and the supposedly unbreakable Xbox One rolled over like a puppy. One solder puff later, the console greeted him with a root shell while the RE//verse 2026 crowd howled at the projected hex dump.
The console that outlived its own relevance
Microsoft’s 2013 flagship was supposed to die young. Consoles usually do—they get cracked in months, pirate torrents bloom, and the vendor moves on. Instead, Xbox One endured an entire hardware generation, a mid-cycle refresh, and two successor launches before anyone planted a flag inside its silicon.
Gaasedelen’s exploit, dubbed Bliss, is not a bedroom hack. It demands a microscope, a hair-thin tungsten probe, and the steady hand of a watchmaker. By nudging the SoC’s core voltage 160 mV below spec during power-on, he induces a single-bit flip in the immutable boot ROM. The chip mis-fetches the next instruction, lands in attacker-controlled memory, and hands over the crown jewels. Repeat the glitch 37 times—once per boot stage—and the machine is yours.
The trick works because the Boot ROM is mask-programmed at the fab; Microsoft can’t patch it. The only fix would be a silicon respin, and Xbox One chips haven’t rolled off the line since 2019. Every unit in the wild is now, permanently, a homebrew canvas.
Piracy is the sideshow
Yes, you can run unsigned discs and ripped ISOs, but the Xbox One catalog is already playable on Series consoles through official back-compat. The real trophy is documentation: finally seeing how Microsoft’s hypervisor partitions DRAM, how the encrypted Blu-ray layer talks to the southbridge, why some games stutter when the ESRAM overheats. Emulation authors have waited a decade for this Rosetta stone.
Gaasedelen, who once unpicked the PlayStation 3’s hypervisor for the NSA, insists preservation is the motive. “These boxes will brown-out in fifteen years. When the capacitors bulge and the servers go dark, you’ll need a reference to rebuild the experience.” He plans to release schematics and a Python rig that automates the glitch on a $40 FPGA board—cheap enough for university labs, pricey enough to keep casual pirates at bay.
A pyrrhic victory for microsoft
The timing stings. Xbox One is already a historical footnote: outsold 2-to-1 by PS4, remembered mainly for the launch-day DRM fiasco that forced Don Mattrick’s resignation. The console’s security record should have been a laurel; instead it becomes a posthumous embarrassment. Redmond’s current Secure Boot arsenal on Series X|S is tougher, but engineers inside the company admit the Bliss payload will be studied like the Dead Sea scrolls.
Meanwhile, second-hand Xbox One prices ticked up 8 % on eBay within hours of the demo. Not for gaming—for archaeology. Collectors want the final, fully owned iteration of a closed ecosystem before the cloud swallows everything. Gaasedelen closed his talk by booting a 2024 build of RetroArch straight from the UEFI shell, then loading Halo: Combat Evolved at 4K resolution just to prove the point. The audience saw Master Chief sprint across a ringworld; Microsoft saw 4,000 days of invulnerability evaporate in a voltage hiccup.
Some locks fall too late to matter. This one fell just in time to remind us that every sealed box eventually becomes an open book—if you own a soldering iron sharp enough to write the first word.