1. Headline
  1. Headline
By
updated 3/30/2012 6:17:20 PM ET 2012-03-30T22:17:20

It's not the usual approach to security, but if you want to keep your credit-card data safe, you might want to take a hammer to your old Xbox 360's hard drive, researchers say. Microsoft disputes the findings.

  1. More from TODAY.com
    1. Watch the full 'Fifty Shades of Grey' trailer: What we couldn’t show on TV

      "Fifty Shades of Grey" fans, you've come to the right place. You saw part of the exclusive too-hot-for-morning-TV trailer ...

    2. 'Moment of desperation' led Arizona mom to leave kids in hot car during job interview
    3. Have a ball! See Natalie and Jenna tube, tour baseball museum in Cooperstown
    4. Surprise! Weird Al makes music history — and Willie Geist's day
    5. Hot stuff! Check out Consumer Reports' 5 greatest grilling gadgets

According to Drexel University study, Microsoft's Xbox 360 stores its owners' credit-card data on the hard drive, even when the gaming console is restored to its factory settings, the gaming site Kotaku reported.

Unlike personal computers, the hard drive on the Xbox 360 is easily removable and used for storage only. The operating system resides in a read-only memory chip on the motherboard.

(Msnbc.com is a joint venture of Microsoft and NBCUniversal.)

The Drexel researchers, Ashley Podhradsky, Rob D'Ovidio and Cindy Casey (along with Pat Engebretson from Dakota State University), bought a refurbished Xbox 360 from a Microsoft-authorized retailer last year. Using a basic software-modifying tool, they were able to poke around the video-game system's hard drive and access its files, folders and, eventually, the original owner's credit-card information.

The hacking process is simple, Podhradsky said, but the ramifications are serious.

"Anyone can freely download a lot of this software, essentially pick up a discarded game console, and have someone's identity," she told Kotaku.

"I think Microsoft has a long-standing pattern of this," Podhradsky told Kotaku. "When you go and reformat your computer, like a Windows system, it tells you that all of your data will be erased. In actuality, that's not accurate — the data is still available ... so when Microsoft tells you that you're resetting something, it's not accurate."

In an email to SecurityNewsDaily, Jim Alkove, Microsoft's general manager of security for interactive entertainment business, disputed the researchers' claims.

"Xbox is not designed to store credit-card data locally on the console, and as such [it] seems unlikely credit-card data was recovered by the method described," Alkove told SecurityNewsDaily.

"Additionally, when Microsoft refurbishes used consoles, we have processes in place to wipe the local hard drives of any other user data. We can assure Xbox owners we take the privacy and security of their personal data very seriously."

Alkove said Microsoft "is conducting a thorough investigation into the researchers' claims. We have requested information that will allow us to investigate the console in question and have still not received the information needed to replicated the researchers' claims."

To remove your identity from your old Xbox 360 yourself, Podhradsky recommended removing the gaming console's hard drive, hooking it up to a computer and using a hard-drive sanitation program to wipe it clean.

© 2012 SecurityNewsDaily. All rights reserved

Discuss:

Discussion comments

,

Most active discussions

  1. votes comments
  2. votes comments
  3. votes comments
  4. votes comments

More on TODAY.com

  1. Watch the full 'Fifty Shades of Grey' trailer: What we couldn’t show on TV

    “Fifty Shades of Grey” fans, you’ve come to the right place. 

    7/24/2014 12:30:07 PM +00:00 2014-07-24T12:30:07
  2. video ‘Fifty Shades’ stars give first look at steamy film

    video Stars Jamie Dornan and Dakota Johnson offer TODAY viewers a sneak peek at the highly anticipated film. When Savannah Guthrie told Dornan that viewers had asked if he'd do the interview shirtless, he said, “I would have considered it.” 

    7/24/2014 12:37:20 PM +00:00 2014-07-24T12:37:20
  3. Not a date movie: Why ‘Fifty Shades’ a girls’ night hit

    Even though the film is opening on Valentine's Day — the biggest date night of the year — women are likely to turn the movie into a social event.

    7/24/2014 1:22:41 PM +00:00 2014-07-24T13:22:41
  4. Universal Pictures
Breaking news
  1. Wreckage found after jet carrying 116 people disappears

    A commercial jetliner crashed on Thursday after adjusting its route due to a storm and vanishing in western Africa, an official said.

    7/24/2014 2:47:05 PM +00:00 2014-07-24T14:47:05
  1. Brandon Goodwin / TODAY

    Have a ball! See Natalie and Jenna tube, tour baseball museum in Cooperstown

    7/24/2014 12:34:17 PM +00:00 2014-07-24T12:34:17