One idiot use a TU editor to create fakes like "*****" and "Mass Effect 4 TU" he use other TU's and just change the name. You need to compare Title ID and Media ID to identify fakes.
Allow me to translate. Somebody on Xbuc is uploading false title updates and this nice guy here has told you what to look for to avoid getting the fakes.
Hmm, given the names of those two particular instances I'd imagine it would be quite easy to avoid them. Still, the possibility exists that some folks are editing the updates in various ways, so there could be others up there that are a bit more inconspicuous. I can't imagine these doing any damage to your XBox (but someone might find a way eventually), the worst they'd do is waste your time and not work. I wonder if it's even possible to weed out this stuff at source? In the meantime, XBUC might benefit from a reporting feature - so users can report these sorts of problem files as they come across them. That system itself is always going to be open to abuse, but it's better than carrying these sorts of things on the front page for weeks. Looking at the list, one of the files has been on the site since the 14th August, the other since the 17th - it's the 19th right now so the first one's been there for 5 days generating downloads (!) and encouraging others to do similar things (since it's clear that it wasn't immediately removed).
That's what I was saying. Each XBox360 file has a hash signature and security stamp. Those of us who've dabbled in the arts of modding game saves will know this as we need to rehash/resign our saves for every little change we make. This is rather easy to do because the keys for the CON file format is out in the open. Executable files (for example, LIVE Arcade titles), download content and patches use a different file type which would require different encryption keys. While you can still load an executable, DLC or patch into (for example) Horizon to modify the files it contains, no program has been written yet (I believe) that's capable of applying the correct encryption or security stamp. The result is that, while people with modded hardware can use the files just fine, those of us with regular machines that haven't been tampered with detect such files and display them as being corrupted. After a bit of browsing around and experimentation, I've found that it's easy as pie to alter the various data within a patch which the XBUC server extracts and uses to list the patches. In addition, any such changes alter the hash signature, so the XBUC server doesn't detect the fact it's actually a duplicate - so the altered patches are accepted and listed. While no TU editor exists, the requisite data can be found and altered because it's all there, readable, in the original patch. Anyone with a hex editor can perform these changes. That would result in files that don't work, but if you're one of those people who just wants to 'fly some flag' on this site that wouldn't be a concern. I had a feeling this would be the case earlier, which is why I don't think it's possible to prevent this sort of problem at source. While the OP has suggested we double-check the Title ID and Media ID, this is of little use since they're accessible in the patches and can be edited just as easily as the patch title itself. Like you said, they shouldn't do any harm since (at present) nobody can 'create' a functioning LIVE package that non-modded consoles will even attempt to use. This means that you (as legitimate users) shouldn't get any trouble from the existance of these files since they can only serve to waste your time if they're properly disguised making it harder to find the real patches. The main victim in all this would be the site itself. Right now, people are seeing clearly 'joke' patches on the site, and those with a strange sense of humor and/or some kind of personal issue will start getting ideas and the site could eventually be hit pretty hard with this spam. If it gets too bad, people might just give-up on XBUC and switch to the other patch-hosting site. On top of this, how long will it be before these people start doing more than simply retitling updates? How long will it be before people start passing around seriously illegal material, for example DLC, by uploading it as a pretend patch on XBUC? The site itself treads the fine line of offering a free service by making patches available, but could get pulled down by Microsoft given the slightest reason. Let's not get into a situation where they're monitoring the site round the clock and threatening the owner with legal action. A simple Report button added to the template would go some way to solve this issue. If every patch has a Report button next to it, people can use it to 'vote' for problem patches. Once enough people press the Report button (or immediately, I suggest waiting until there are a bunch of people reporting otherwise the site owner will be spammed with false reports all the time) the site owner is contacted where the problem file is drawn to his attention for swift removal. The alternative would be to have a log-in system in place before people can upload files (to make people accountable for content published on the site), but that would adversely affect the ease at which the site can be used for everyone. Maybe people wouldn't mind having to sign up, who knows, both methods are worth investigation at least.
Briefly looking over the most recently uploaded files, I'd hazard a guess that at least one of the two Skyrim updates has been modified somewhat, since the details match completely but each patch has a different Media ID: 67A8F227 425307E6 Skyrim TU PAL 18. Aug 12 09:43 30.51 MB 2517ABF8 425307E6 Skyrim TU PAL 18. Aug 12 04:39 30.51 MB Can't say for sure which is the dubious one (my Skyrim is PAL/NTSC U), but I highly doubt that there are two PAL versions out there. They might both be legitimate, but it does seem peculiar since all the details match entirely. The PAL/NTSC U patch I uploaded (version 1.7) was only 26.89MB, and while patch size can vary between region I can't help feeling suspicious of the above two. Update: The update with Media ID 2517ABF8 has been verified as genuine (thanks knarfboy!). It's the German USK version. This leaves the updates 67A8F227 and 49A1477A, though I'm beginning to suspect these are all just different European language versions of the same patch.
In addition to the above, the following appears to have been added earlier today: 49A1477A , 425307E6, Skyrim TU, PAL NTSC/U, 20. Aug 12 10:11, 30.51 MB Can't be absolutely sure, but this is a PAL NTSC/U file (just like the one I uploaded on the 9th), but it's Media ID is 49A1477A, so I can't verify this myself as my disk is 435FB6C3. This file (along with the two above) is 30.51 MB, which is making me believe that the person who uploaded the PAL patches on the 18th has done some more editing, It could be legit, but as I wouldn't be able to get this working (because of the Media ID) I can't be absolutely certain. I am fairly sure that the most recent patch released was patch 1.7, which was released on the 9th (I uploaded a PAL NTSC/U one when I first got it from LIVE), and there haven't been any patches since that I'm aware of. While someone might have uploaded old patches, I doubt that three different individuals all decided to upload random outdated patches of exactly the same size. I've just checked the other patch site (the one with the url beginning with 'marketplace') and the three 30.51 MB patches are all there, labelled as SKYRIM TU8, so these are (at least pretending to be) patch 1.7 - yet all three are identically sized and larger than the (definitely legit) one I uploaded on the 9th. Either that site gets it's patches from here, it's some sort of mirror site, or whoever the prankster is - he/she is messing with other sites, not just XBUC.
Dit you see the newest TU from today? -> Dave Listers Underpants But i can confirm that the TU 8 for Skyrim with Media ID 2517ABF8 (german USK Version) is a good one. I had uploaded this TU. I got it from xboxlive, take it from my online console. This TU is 100% ok, not a fake.
Yes I've already spotted the newest fake. It's a bizarre one, since I click the title and it won't let me see the download page. In addition, have you noticed the Media ID and Title ID both match - and they both read '80085AFE' - so someone's getting really cheeky. In addition, I've just been over to the other update site (the one more concerned with JTAG machines) and can confirm that they also have a recent update with that same Media ID. Over there, the update has the less silly title of "TU 1", so it looks pretty clear that XBUC isn't the only target for this behaviour. Thanks for verifying that Skyrim update btw, I wasn't even aware that different language versions of the game got separate patches, but if that's what's going on then there's a good chance the others are probably genuine as well. Still, in light of recent behaviour it doesn't hurt to be a little bit sceptical.
Finally I have worked a way for me to go through them. Also the way XBUC works, you can not upload DLC, unless you work hard to do it. Each title update is verified to be a title update. If there is extra junk or the headers are off by a single bit it red flags it in my admin panel. Site is undergoing maintenance tonight
