[quote name='fatboyjam']I saw that, but the post also mentions that:
Later, through a separate channel, hackers were able to exploit the algorithm to generate codes for a Halo: Reach Banshee Avatar prop.
It all may be a non-issue, especially for the 1,000's that take advantage of the free codes. But it got me thinking how much do I REALLY need that lame-ass Carrot prop.[/QUOTE]
Nah... They didn't actually generate the XBL codes for the Banshee... They raped computerbild (or some other third party web site/promotion) and got hundreds/thousands of legit codes by exploiting the request form.
See the gmail-dot-trick posted a earlier in this thread -- but there are many other methods that would apply (gmail-plus-trick, catcha-all domains, etc).
Sadly, even with this form, the computerbild people will get raped again as hundreds of codes are easily obtainable in a short time doing it by hand... Thousands using a simple script.
The actual codes are legit. The way they are obtained is by exploiting the method used to distribute said codes.
I doubt MS will do anything about it. Computerbild on the otherhand could go after the people abusing their site. But based on their spartan form security, I doubt they would have the knowledge to be able to track down the people doing it, if they are even aware of the fact that they are being exploited. Or, if they even care. Considering all of the online 'attention' this is generating, and the amount of traffic it is generating for them (not to mention all the recent sign-ups), they may consider it a worthwhile investment.