Source code for Xbox Series X's AMD GPU reportedly stolen and leaked

XboxSeriesXTech_HERO.jpg

Despite Xbox being quite generous about the details surrounding its next-gen console, some information are still kept under tight wraps, and likely will remain so. One of these, the source code for the console's Graphics Processing Unit, has been stolen from a hacker who threatens to leak it. The individual, who claims to be a female, got a hold of the source codes for Navi 10, Navi 21 and Arden GPUs, the latter being what's inside the Xbox Series X according to her.

“In November 2019, I found AMD Navi GPU hardware source codes in a hacked computer,” the hacker told TorrentFreak. “The user didn’t take any effective action against the leak of the codes.”

AMD has filed at least two DMCA notices against Github repos with source code relating to AMD's Navi and Arden GPUs, which have since been taken down. However, the hacker told TorrentFreak that if there's no buyer doesn't for the rest of the code, she will "just leak everything".

“I haven’t spoken to AMD about it because I am pretty sure that instead of accepting their mistake and moving on, they will try to sue me. So why not just leak it to everyone?” she added.

She estimates the source code to be valued at $100 million and threatens to leak everything if there is no buyer.

AMD on the other hand wrote in a statement that "the stolen graphics IP is not core to the competitiveness or security of our graphics products" and they are progressing with a criminal investigation.

:arrow: SOURCE
 

Joom

 ❤❤❤
Member
Joined
Jan 8, 2016
Messages
6,067
Trophies
1
Location
US
Website
mogbox.net
XP
6,077
Country
United States
Uhhh...did you actually take a peek at the code!? Or talk to someone who did? Not trying to be that guy, but I'm just curious if this is actually the case with this leak!
It is. It's been floating around other channels. This would be useful in creating bootleg hardware, or even developing an emulator, but that's about it. To the layman, this is useless, and anyone looking to hoard it is wasting their time.
 
  • Like
Reactions: Kazuto_Zed

jDSX

Well-Known Member
Member
Joined
Jun 15, 2015
Messages
1,202
Trophies
1
Age
33
Location
Lost woods
XP
1,696
Country
United States
For some reason I really do hope its a stupid script kiddie that got lucky, gets a life crippling punishment for it and sets an example for all the other kiddies as to how the world really works.
 
  • Like
Reactions: Zhongtiao1

Dominator211

JFK's Jelly Donut
Member
Joined
Oct 15, 2016
Messages
1,818
Trophies
0
Location
The LaCrosse Field
XP
3,342
Country
United States
My favorite quote is by far this...

“I haven’t spoken to AMD about it because I am pretty sure that instead of accepting their mistake and moving on, they will try to sue me. So why not just leak it to everyone?” she added."

I can see both sides of the equation. On the one hand I can see the legality of it where she did/is going to, commit a crime. I believe that nobody is above the law and that she should be prosecuted for it. On the other hand... I see the value from a cyber security standpoint. AMD did mess up big time. Like explain to me (assuming this code is stored in a secured server) explain to me how someone from the outside was able to get in to a building that was supposed to be secured. Then get access to a computer which is supposed to have a password. Like do I eve need to go on? AMD messed big time and they are paying the price.

As for the value of the code, it would be interesting to see where that 10 million estimate came from. Also could someone explain what this code actually does?
 
  • Like
Reactions: Kazuto_Zed

Zhongtiao1

Well-Known Member
Member
Joined
Feb 24, 2015
Messages
831
Trophies
0
Age
26
XP
2,765
Country
United States
My favorite quote is by far this...

“I haven’t spoken to AMD about it because I am pretty sure that instead of accepting their mistake and moving on, they will try to sue me. So why not just leak it to everyone?” she added."

I can see both sides of the equation. On the one hand I can see the legality of it where she did/is going to, commit a crime. I believe that nobody is above the law and that she should be prosecuted for it. On the other hand... I see the value from a cyber security standpoint. AMD did mess up big time. Like explain to me (assuming this code is stored in a secured server) explain to me how someone from the outside was able to get in to a building that was supposed to be secured. Then get access to a computer which is supposed to have a password. Like do I eve need to go on? AMD messed big time and they are paying the price.

As for the value of the code, it would be interesting to see where that 10 million estimate came from. Also could someone explain what this code actually does?

If she found an exploit in the network where she could access the computers and their data, why not notify AMD through the bug bounty program? Why actually steal the data? It's completely illegal what she has done. Even from a cyber security standpoint.

There's a pretty large line between white hat and black hat. She jumped way beyond it
 
Last edited by Zhongtiao1,

Dominator211

JFK's Jelly Donut
Member
Joined
Oct 15, 2016
Messages
1,818
Trophies
0
Location
The LaCrosse Field
XP
3,342
Country
United States
If she found an exploit in the network where she could access the computers and their data, why not notify AMD through the bug bounty program? Why actually steal the data? It's completely illegal what she has done. Even from a cyber security standpoint.

There's a pretty large line between white hat and black hat. She jumped way beyond it
I never ever said that it wasn't illegal what she did.
 

MarkDarkness

Nocturnal
Member
Joined
Dec 17, 2009
Messages
1,403
Trophies
2
XP
3,206
Country
Poland
Remember when Windows 98 sources were leaked, and they found direct code stolen from other competing OS's at the time directly within the comments, and yet Microsoft always managed to settle these issues out of court whilst bankrupting the victim by dragging court issues out for so long?

I love to see things like this, in reality it's just karmic retribution.
Source please? For my personal research.
 

junker

Well-Known Member
Member
Joined
Feb 11, 2006
Messages
236
Trophies
0
Website
Visit site
XP
51
Country
United States
This code isn't normal software source code for drivers or anything. It's a bit more interesting because it's the source code for the GPU chip itself. In theory, if you find a shady semiconductor fab that'd let you do it, and put in the die layout work (nontrivial), you could take this code and make bootleg Navi/Xbox GPU chips. I don't know how much was stolen, but it appears that the high level Verilog is there.


Yooo, you mean to tell me GPUs are created with Verilog HDL? Seems....inefficient. That's incredible. I'm not an expert in the hardware design field, but far back in college we used Verilog to program FPGAs, and I thought Verilog and that oher HDL language were used for higher/higher level stuff, not GPU design.
 

bobmcjr

Well-Known Member
Member
Joined
Apr 26, 2013
Messages
1,156
Trophies
1
XP
3,213
Country
United States
Yooo, you mean to tell me GPUs are created with Verilog HDL? Seems....inefficient. That's incredible. I'm not an expert in the hardware design field, but far back in college we used Verilog to program FPGAs, and I thought Verilog and that oher HDL language were used for higher/higher level stuff, not GPU design.
It's legit verilog. If you look at job postings for CPU/GPU Architects at AMD/Intel, they want like 10 years of SystemVerilog experience. The filenames from this appeared to be regular verilog though (.v) and not systemverilog (.sv).
 

junker

Well-Known Member
Member
Joined
Feb 11, 2006
Messages
236
Trophies
0
Website
Visit site
XP
51
Country
United States
It's legit verilog. If you look at job postings for CPU/GPU Architects at AMD/Intel, they want like 10 years of SystemVerilog experience. The filenames from this appeared to be regular verilog though (.v) and not systemverilog (.sv).

That's awesome, thanks for the info! CPU/GPU design and how it's done has always been a mystery to me, and didn't really learn too much in school.
 

chrisrlink

Has a PhD in dueling
Member
Joined
Aug 27, 2009
Messages
5,560
Trophies
2
Location
duel acadamia
XP
5,737
Country
United States
i'm pretty sure this is no script kiddy nor a novice hacker (VPN,fake social media accounts,non extraditing country) I mean no ones that stupid to hold data for ransom or sell it and even boast about it on a torrent news site i wouldn't be supprised if she's a russian kgb agent selling tech info in her free time
 
  • Like
Reactions: Kazuto_Zed
D

Deleted User

Guest
https://wccftech.com/amd-stolen-gpu-ip-exclusive/
Information on what the AMD GPU leak actually is and is not:

Here is what the AMD GPU IP leak actually is:

  • Partial Verilog files that are typically used in the construction of processors.
  • The Verilog files in question represent a single and isolated function(s) on the GPU - NOT the whole/actual GPU blueprint. This I believe is the most important takeaway and context for the IP theft. This particular function(s) is not very exciting and not part of AMD's core IP.
  • Based on the leaker's screenshots, the files they have not yet leaked are more of the same and also nowhere close to being a complete "source code". In other words, the total stolen IP represents a very small fraction of the "source code" needed to build and design a GPU.
  • These Verilog files are built on a proprietary schematic that is only compatible with AMD's internal design language (in other words, these are going to be close to useless to a third party).
Here is what the AMD GPU IP leak is not:

  • It cannot be used to design or build any of the mentioned products - not even close.
  • It cannot be used to reverse engineer product performance.
  • It cannot be used to easily reverse engineer any features/product specifications. This comment is based on the files leaked so far. The source estimates that it may be possible for the full list of files to be used to arrive at a couple of very high-level specifications but this should not be an issue because most of this information is already public.
  • It does not contain any data that can be used to easily/immediately bypass any security features on AMD RDNA GPUs. Caveat: there is a very slim possibility that it may be used to discover a vulnerability in the functions stolen in this theft.
  • It does not contain any "crown jewel" IP. In fact, I am told that this would not even constitute a "significant" theft to a company like AMD in terms of the severity of the information compromised (any theft is still very significant by virtue of the act of course).
 
  • Like
Reactions: Joom and Kazuto_Zed

|<roni&g

Well-Known Member
Member
Joined
Nov 18, 2010
Messages
452
Trophies
1
Location
UK
XP
2,166
Country
United States
I hope the sx is hacked within a year of release. Xb1 & ps4 have stank for cfw, not like the glory days of 360 n pstriple
 

Joom

 ❤❤❤
Member
Joined
Jan 8, 2016
Messages
6,067
Trophies
1
Location
US
Website
mogbox.net
XP
6,077
Country
United States
If she found an exploit in the network where she could access the computers and their data, why not notify AMD through the bug bounty program? Why actually steal the data? It's completely illegal what she has done. Even from a cyber security standpoint.

There's a pretty large line between white hat and black hat. She jumped way beyond it
With people working remotely thanks to COVID, all it would take is compromising a naive employee and jacking the VPN credentials they have to use to access the company network. Security concerns are through the roof right now because of this. Security departments can't secure home networks.
 
  • Like
Reactions: Zhongtiao1

Psionic Roshambo

Well-Known Member
Member
Joined
Aug 12, 2011
Messages
2,246
Trophies
2
Age
50
XP
3,344
Country
United States
I'd be more interested in possible hardware exploits for the new console, maybe mod chips. Those are the people who will want to see this stuff.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    Xdqwerty @ Xdqwerty: aeiou