It's pretty simple to exfiltrate data from the JavaScript sandbox once it has been compromised via XSS. The simplest way is probably appending an img tag to the page's DOM, with a src pointing to a server you control and send the user's password as the image name.
I believe the only portions of the development kits which used Linux was the communication processor, an isolated computing platform bolted on to the hardware to facilitate certain debugging functions.
Actually, the 360 does have a custom architecture. It has a tri-core PPC based CPU and all custom ICs for the GPU and southbridge. It was the original Xbox which was Pentium based and very close to a commercial PC, although with custom GPU and southbridge ICs as well.
Madison, WI - Web Courseworks, www.webcourseworks.com
Web Courseworks is looking for a talented full-stack PHP developer to work on improving and extending our learning management platform. Working full-time in our Madison, WI offices is preferable but we’re open to a remote arrangement on both a full-time or contract basis.
Requirements: A deep understanding of PHP, (My)SQL, HTML, CSS, and JavaScript. Candidates should have past experience developing complex web applications.
It no longer exists, but they likely still retain IP in this realm.