SECURITY Signal 408
Xbox PC and Game Pass titles are coming to Linux through 'Xodus' — Heroic Launcher devs embark on new open-source reverse-engineering project
↗
An open-source project called Xodus is reverse-engineering Microsoft's proprietary Xbox GDK authentication and packaging stack to enable Xbox PC and Game Pass titles to run on Linux.
The project has already replicated the most security-sensitive parts of the Xbox PC stack, service authentication, license acquisition, and package decryption, using proxy libraries and a custom Rust authentication library. For engineers working on DRM, license verification, or platform interoperability, it demonstrates that Microsoft's Xbox identity and licensing layer can be fully reimplemented outside its intended runtime, which has implications for how robust that proprietary stack actually is as a gatekeeping mechanism.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
Xodus has already solved Xbox Live authentication, license checks, and MSIXVC package decryption through open-source reimplementations including a Rust-based Xbox authentication library called xal-rs.
The project uses proxy libraries to intercept GDK API calls and transmit valid Xbox Live tokens, meaning the original authentication flow is being replicated rather than bypassed.
The technical barrier was never DirectX or x86 translation, Proton and DXVK already handle that, but rather the proprietary license verification trifecta of GDK, Xbox identity services, and encrypted packages.
THE CLUSTER