TitleOS (They/Them) ๐Ÿณ๏ธโ€๐ŸŒˆ @titleos.dev ยท Nov 3

Xbox, if you are gonna make an on boot advertisement, you should atleast invest some of that money in better Live security, considering anyone can downgrade the ads endpoint to http and the ads domain has full WinJS runtime permissions...literally a DNS server away from exploits.

10 likes 2 replies

?

Replies

TitleOS (They/Them) ๐Ÿณ๏ธโ€๐ŸŒˆ ยท Nov 3

For anyone curious what WinJS can do, see github.com/TitleOS/Toas...

X

@xos84.bsky.social ยท Feb 9

Gimme the exploit pretty please