Apparently there has been a lot of development to improve the speed and reliability/repeatability of the exploit, as at this time it is not persistent (it must be run every time the console is booted). Modern Vintage Gamer was able to get it to run 10/10 times in a row under a minute each time, from what I can tell, which I love to see.

The exploit featured in OP:

https://github.com/grimdoomer/Xbox360BadUpdate

GPT-5 (openai.com)

Fight Chat Control (fightchatcontrol.eu)

GitHub is no longer independent at Microsoft after CEO resignation (theverge.com)

I tried every todo app and ended up with a .txt file (al3rez.com)

Claude Sonnet 4 now supports 1M tokens of context (anthropic.com)

Ultrathin business card runs a fluid simulation (github.com)

I want everything local – Building my offline AI workspace (instavm.io)

Wikipedia loses challenge against Online Safety Act (bbc.com)

Emailing a one-time code is worse than passwords (blog.danielh.cc)

Debian 13 “Trixie” (debian.org)

Vibechart (vibechart.net)

Claude Code is all you need (dwyer.co.za)

Show HN: The current sky at your approximate location, as a CSS gradient (sky.dlazaro.ca)

How I code with AI on a budget/free (wuu73.org)

Try and (ygdp.yale.edu)

GPT-5: Key characteristics, pricing and system card (simonwillison.net)

Wikimedia Foundation Challenges UK Online Safety Act Regulations (wikimediafoundation.org)

OpenFreeMap survived 100k requests per second (blog.hyperknot.com)

FFmpeg 8.0 adds Whisper support (code.ffmpeg.org)

Show HN: Building a web search engine from scratch with 3B neural embeddings (blog.wilsonl.in)

Jim Lovell, Apollo 13 commander, has died (nasa.gov)

Ask HN: How can ChatGPT serve 700M users when I can't run one GPT-4 locally?

Historical Tech Tree (historicaltechtree.com)

Search all text in New York City (alltext.nyc)

Cursed Knowledge (immich.app)

The Chrome VRP Panel has decided to award $250k for this report (issues.chromium.org)

Meta Leaks Part 1: Israel and Meta (archive.org)

Why are there so many rationalist cults? (asteriskmag.com)

Monero appears to be in the midst of a successful 51% attack (twitter.com)

GPT-OSS vs. Qwen3 and a detailed look how things evolved since GPT-2 (magazine.sebastianraschka.com)

Flipper Zero dark web firmware bypasses rolling code security (rtl-sdr.com)

Getting good results from Claude Code (dzombak.com)

The Framework Desktop is a beast (world.hey.com)

Claude says “You're absolutely right!” about everything (github.com)

StarDict sends X11 clipboard to remote servers (lwn.net)

GPT-5 for Developers (openai.com)

Linear sent me down a local-first rabbit hole (bytemash.net)

Show HN: Engineering.fyi – Search across tech engineering blogs in one place (engineering.fyi)

OpenSSH Post-Quantum Cryptography (openssh.com)

Trump Orders National Guard to Washington and Takeover of Capital’s Police (nytimes.com)

Vanishing from Hyundai’s data network (techno-fandom.org)

My Lethal Trifecta talk at the Bay Area AI Security Meetup (simonwillison.net)

The surprise deprecation of GPT-4o for ChatGPT consumers (simonwillison.net)

Windows XP Professional (win32.run)

GLM-4.5: Agentic, Reasoning, and Coding (ARC) Foundation Models [pdf] (arxiv.org)

MCP overlooks hard-won lessons from distributed systems (julsimon.medium.com)

Tor: How a military project became a lifeline for privacy (thereader.mitpress.mit.edu)

OpenAI's new open-source model is basically Phi-5 (seangoedecke.com)

Exit Tax: Leave Germany before your business gets big (eidel.io)

Building Bluesky comments for my blog (natalie.sh)

Any Xbox 360 can now be hacked in less than one minute [video]

Comments (1)