HEY!!! Stop The Madness - NEXT PROJECT!

[TomCrazyCat]

I'm sorry.. I just read that whole damn thread (the one step dsr6kimage..) 62 replies in under 16 hours? damn...

Anyway, It seems to me instead of all of us going in different directions, and bitching about something.. It's time to move on.

Even though before I started doing this I knew NOTHING about linux or tcl, I learned. 'Cause I knew it'd be important.

The next task is hacking 2.5 so we can block the INEVITABLE next software update, that will make everything accomplished in the past 15 days or so wasted.

DirecTV receivers, with PVR functionality are out in the public. Over 1.5 million units sold already. What does this mean?
DirecTV & TiVo (DAVE) will start realizing they can kill 2 birds with 1 stone with tivo software. How would you like to wake up tomorrow, and realize your now running 3.0?

And.. DAMN your PROM was overwritten, your hacks are useless, your BASH isn't working, and.. your EMU\Test Card is no longer working, cause they have your tivo software modded to recognize the difference.. (not too hard to do...)

Let's unite to block the SAT from downloading the updates automatically. There has to be a script somewhere on the tivo that controls this.. Think about the future instead of the present.


I'm scanning through the thousands of lines of TCL code on my 2.5 tivo now.. are you??

[remmington]

I'm with you ... like I said the next job is ALREADY here.


Rem.

[bufordw]

I've been researching this. I found the Datasheet for the prom.

From what I can tell you should be able to jumper pins 32 and 31 (VDD and WE# respectively) This should cause the chip to be in a write inhibit mode.

I HAVE NOT TESTED THIS.....I would like to kick the idea around on the forum to get some other opinions.

The one thing I can't figure is..Does pin 31 need to be isolated (cut)? Will applying the supply voltage to pin 31 connected trash the control circuit?

I plan on doing some OHM checkin tommorrow and some voltage checks to see if the pin is grounded during operation.


Any Thoughts?

[flipsoft]

This is a great place to start. I moded my regular IRD before the last one that DTV sent down. This one cant be all to much different. and if i screw it up oh well. I did get another one today for free.

Also I have a close friend that does boundry scanning of eeprom's and boards. He can tell me exactly what will have to be done to write protect the thing and still get it to work. I will post it tomorrow
flipsoft

[TheDoctor]

On the software side, it looks like a lot of the update util scripts. are in /var/utils.

A check of /var/log/svclog indicates that tivo is still downloading that data as silce files. Under the old dial-up system tivo could also download scripts to the /var/packages that would be executed.

If they are still downloading to ext2 stroage then we could attack to the files before they are loaded. If they are downloading to mfs then it will take more work.

[TomCrazyCat]

bufordw & flipsoft:

I'm still trying to look for a way to do this without a hardware mod.

A) it will be much safer, and has practically no chance of hosing the unit.

B) it's less expensive (especially with the sony's)

C) it should be easier, provided we can find the EXACT script that calls this.

It may even be something as simple as removing the /var/packages directory, or chmoding it to 000. If a script calls for something to be written to a specific directory, and it can't write to that directory.. it will fail. But like TheDoctor said, we have to find where the updates are written to, cause if they are written to MFS, it's going to be a hard road ahead.

[IWantMyDTV]

Yep. TiVo puts everything in the database first cause it's easier to only do one thing on the call. (Update the db so the rules of ACID apply.) It's the point at where it decides to remove it that we have to worry. Chattr and chmod will likely have no effect as TiVo has demonstrated before that they can send anything they need down to fix a TiVo.

The question is: Can they do this over the sattelite?

BTW - Did you know that a copy of the entire filesystem is supposedly located somewhere in MFS? How's that grab ya?

[TomCrazyCat]

Well, with the hacked prom & zeroed out initrd it seems that it won't recopy things from the FS in the MFS, to the 4th partition..

So maybe we have a shot... What I'm looking for is what calls the satellite update to be downloaded by the tivo. Still checking. I just have to believe there is a script on there that is able to be modded to help us out.

[_Formula]

I've been exploring the TiVo lately and I noticed something funny while browsing with TivoWeb...

While looking at my ToDo list I noticed several entries I didn't recognize. They were service data downloads scheduled for like 2:00am every day on channel 100 (TIVOR). Of course channel 100 is not TIVOR, but I'm assuming whatever data TiVo is getting at 2:00am is broadcast with DTV channel 100.

I still have a unit running 2.0, so I need to set up a PPP link so I can check out TivoWeb's ToDo list on 2.0. My guess would be that this scheduled download is for showcases. Note that when you first get 2.5, showcases is empty for a day or two.

I didn't bring this up because I'm scared, but because this method of updating could be how they choose to update the software IF and when they choose to do so via satellite.

Something to think about...

[dopester]

_Formula: You need to understand more about how the cam authorization system works.. The DirecTivo doesnt have control of the Transport IC, which is what decides weather or not the access card is authorized or not. All the DirecTivo does is take the mpeg that comes out of the transport IC and stream it to a harddrive using DMA transfers.

The guide data is most likely skimmed from the bird as well, but this needs to be fully investigated. If they cannot send slice files via the satellite then the 2.5 hack is completely safe.

There is no way for them DirecTV to modify the TransportIC to make it detect a hacked card, and subsequencly a hacked tivo. If this was possible they would have already done that years ago. They for some reason figured that the ZKT test was more than enough to verify if the Cam was OK or not.

The only thing that needs to be worried about with the tivo is weather or not with the current software can get slice files from via the satellite. If the slice files that contain software updates, and prom updates are all sent via the phone line, and the guide data is simply skimmed then there is nothing to worry about.

You must realize that the DirecTivo is basicly a dual tuner IRD that is seperate from the tivo. THe tivo simply takes the mpeg from the transport ics, and write it to a harddrive. The only functionalilty that the tivo has to talk to the card is standard functions that exist for all IRDS.

[TheDoctor]

They are sending slice files from the sat. The system I have been monitoring has not been allowed to call in for several days, yet the log file shows the slice filesing being evaluated for loading. The entries I saw indicated that they were ignored because they had already been loaded. The transfers are occuring between 2 and 4 a.m. I will try to catch one of the slice tonight if I can find where they are being stored. The service log indicates a path along with the slice, but no reference to the root directory. The program listings are being taken directly from the stream, and do not appear to be coming from slice files.

The stream appears to also be used to distribute GZ zip files for software and directories that are to be upgraded. It could be that if the database was manually updated to think that it had a higher version number that the system would reject the loading of lower version numbers.

[dopester]

The the simple solution is to just let the slice files get downloaded from the bird, and have the processing script not do anything with them. The only thing we need is guide. I am quite happy to lock the system down to 2.5 as long as the guide keeps coming down..

Patching the software version is not a good solution. They could easily do something to get around that quite easily. The best thing is to just block everything.. And patch the database to keep the tivo happy..

[_Formula]

Originally posted by dopester
_Formula: You need to understand more about how the cam authorization system works..What are you talking about? First of all, I know plenty about DSS and how their security works. Second, what does that have to do with anything on this thread? I've reread my post several times and I still can't figure out what you're talking about.

Listen guys... All I was saying is there IS a hidden entry in the ToDo list which is set for channel 100 at 2am. I believe these are for showcases downloads. That's why I want to fire up my 2.0 box and check it out. If they are solely for showcases download, they shouldn't be on the 2.0 ToDo list.

Unless you have run TivoWeb on a 2.5 box, you probably didn't know there is a hidden entry "TiVo Service Data", 2:00am, 30min,"Broadcast of data to keep your TiVo Service up to date".

All I'm saying is this method of TiVo updates COULD be used to update to new software versions. We should look into this and anticipate a move like this. Maybe I didn't make myself clear earlier, but I'm sure I never mentioned anything about the access card or DTV being able to detect hacked boxes/cards...

[TomCrazyCat]

dopester:

The tivo can easily detect CAM ID.

If they sent a modified blacklist for directivo's, it could be done.
They just have tivo check the CAM ID against the blacklist. This (most likely) would require a software update, though.

You know DirecTV would pay tivo for that, and you know tivo would accept that, since it would also cut down on illegal use of tivo services. It would just take a simple script:

A) Tivo gets CAM ID

B) Tivo matches CAM ID against new blacklist

C) Tivo detects that the CAM ID is invalid

D) tivo removes all channels from the channelmap

E) no more free tv on a directivo (only thing that would work is H card EMU of a subbed card - and even that could be further restricted if they sent subscription info with the blacklist - although it would probably take up too much bandwidth..)

Anyway, my point is, we need to come up with a way to secure 2.5... fast. They surely know that 2.5 is hacked, and will be putting a new software update out as soon as it is ready.

[chipster]

FWIW...

From the updated PDF's off the Tivo site - I know that they use channel 100 - maybe we can block access to this channel:

TiVo is now using the satellite to deliver TiVo Service information like Tivolution
Magazine and Showcases. These automatic downloads will occur late at night,
when most people are not using the Service. (You still need to leave your phone line
plugged in, because software updates and other types of information are delivered
through it.)
During the download, the channel banner displays “TiVo Service Data” instead of a
program title, and an orange light on the front of the Receiver turns on.
You can watch any program in the Now Playing List while the download takes
place. If you wish to watch live TV, simply change the channel (e.g., with the
CHAN UP/DOWN button or the numbers on the remote) or bring up the TiVo Live
Guide. The download will automatically occur later.
If you would like to know when your last download took place, go to Messages &
Setup, then select System Information. Press CHAN DOWN until you see “Service
Data Download.” Information about the last download can be found here.

[BubbaJ]

If ONLY we had a way to control what those dang STi5505s did/saw..

[mrblack51]

ah, the 5505, or something. i remember seeing something to that effect...ah yes: send5505

[milhouse]

Has anyone made any progress here. I thought it would be worth posting to keep this thread going. If they CAN update software with out the phone line, we are all sitting ducks and we will get hit.

Milhouse.

[dsboyce8624]

I think we need to hunt down BubbaJ and beat him till he tells us about the 5505s.

Dennis

[BubbaJ]

:D

what specifically would you like to know about them.. I'll not answer any overly braod questions in public, and my knowledge finally has at least one determined suitor. many will likely be needed to fulfill my goals..

[digitalAir]

Why do these wonderful threads just STOP as soon as they start going in the direction I'm looking for?!?!?!?!

:)

This is what I've been able to find (from here, other forums, STM's website, various google searches, and my TiVo):

1. the STi5505 is the DTV processor.
It contains a 32bit 50 MHz RISC cpu (ST-20)
It contains audio and mpeg decoders (so why is there a separate mpeg decoder on board?)
It contains several i/o ports
a. os-link (I believe this to the RG-6 dish link)
b. i2c (I'm guessing that this updates the eeprom)
c. iso-7816 (duh!)
d. 2 uarts, some timers, etc

And why can't I find any datasheets on any of the STM OMEGA processors?!?! -- just marketing flyers...

2. there's a mysterious little program in the tvbin directory called send5505 (usage: send5505 <command>). There are 2 examples of it's use in the rc.sysinit script; 1 turns on the nds sniffer (but where does the output go?), the other enables the BERR test. (and -i1 accesses the 2nd tuner). Thanks to `strings`, I know that this little prog access oslink, dtune, apg, and cam.

3. there's a couple additional gems in the diag dir: camdiag and camtest
camdiag returns the access card id and subscriber id. (It also has the ability to detect hi-lo and lo-hi changes on the card-insert switch)-- so, yes, the PPC can talk to the CAM. But, I can't figure out the <command> choices.
camtest goes off and doesn't appear to return. (but I may have run it without the lnb connected, I can't remember)

4. in the dev directory character devices with a major number 95 is associated with the 1st tuner and 96 with the 2nd. but I haven't written any code to read and/or write to any of these (especially /dev/cam) yet.

5. Then there's the btl files??? Binary data that is cat'd into the oslink devices... initializing the lnb?


--Anyone have anything to add?!?

-digitalAir


P.S. sorry for the long post... when I get to rambling... :D

[homer08]

ftp://ftp.ni.com/incoming/STi5500.pdf

[digitalAir]

thanks homer08

[Digitz]

Hey Bubbaj sounds like Digital Air may be able to contribute to the cause. I'm still stuck in dissassembler hell. The xrefs are harder than they look at first glance. I've gotta cook up a half baked simulator to get them calculated correctly. Gonna be a little while.

Digitz

[digitalAir]

I posted this here (http://www.dealdatabase.com/forum/showthread.php?s=&threadid=4740&pagenumber=3), but I'm copying it here since there seems to be interest...


Has anyone successfully communicated with /dev/cam?

I wrote a little c file to open read and write file streams, but all it read back was FF's on an H card and an HU...

I'm guessing I've overlooked something...


-digitalAir


P.S. I haven't been brave enough to comment out all the dtv initialization code in the rc.sysinit yet. I'm thinking that it may be similar to the /dev/mpeg0a device -- where you have to disconnect myworld from the device before you can manually send an audio stream to it

[BubbaJ]

a. os-link (I believe this to the RG-6 dish link)
b. i2c (I'm guessing that this updates the eeprom)
c. iso-7816 (duh!)
d. 2 uarts, some timers, etc

a) oslink stands for oversampled links (it's a fast serial port, and does not communicate with the tuner, but you have the documentation now to know that)

b) i2c is a standard serial communications specification, commonly used to access the configuration registers of clusters of smart, simple, devices. The mpeg decoder, and ntsc encoder, and tuner all fall into this category

c) the chip supports 4 serial ports, 2 of these have extra smartcard signals set up as well,

d) yeah..

[digitalAir]

Oh sure, give me the document, then expect me to read it... :p


-digitalAir

[smokeman]

<question 1>does anyone have insight into how the tivo only needs one access card for video authorization of 2 recievers?

It is my understanding that in video decryption of a channel on a transponder, all the channels on that transponder are sent to the decryptor, but only the channel called to from the guide is decrypted...so could we shanghi these dropped packets, and decrypt them too.....

might mean recording of more than 2 shows at a time.
</question 1>
<question 2>
you just referenced the smart card, but is there any insight on how the tivo communicates with this...by a /dev/whatever?

here's to hoping that pitou can be ported, and done internally :-)

</question 2>

smokeman

[BubbaJ]

1) Yup, .. it MAY be possible to capture 4 SCIDs (2 Audio 2 Video)at once, but the current software does not acknowledge that possibility.

2) smart card is ONLY connected to the STi5505s (probably only to one of them).. emu is irrelevant.

[newlooper]

Originally posted by chipster
FWIW...

From the updated PDF's off the Tivo site - I know that they use channel 100 - maybe we can block access to this channel:

TiVo is now using the satellite to deliver TiVo Service information like Tivolution
Magazine and Showcases. These automatic downloads will occur late at night,
when most people are not using the Service. (You still need to leave your phone line
plugged in, because software updates and other types of information are delivered
through it.)
During the download, the channel banner displays “TiVo Service Data” instead of a
program title, and an orange light on the front of the Receiver turns on.
You can watch any program in the Now Playing List while the download takes
place. If you wish to watch live TV, simply change the channel (e.g., with the
CHAN UP/DOWN button or the numbers on the remote) or bring up the TiVo Live
Guide. The download will automatically occur later.
If you would like to know when your last download took place, go to Messages &
Setup, then select System Information. Press CHAN DOWN until you see “Service
Data Download.” Information about the last download can be found here.


Curious... mine says no data available. Does that mean anything?

[Soleil]

newlooper,

Do you remember what you did to get the "No Data Available" ?

Soleil

[AlphaWolf]

I'm thinking a half-assed approach to blocking updates would be to set the IRD to manualy record one of the blank test channels (blank for minimal use of storage) nightly at 1 AM for 3 hours (2 different channels simultaneously if you have a dual tuner), and then just delete it in the morning.

IF the tivo must tune to a specific transponder/frequency to download any updates, then it will not be able to update anything since it takes preference to the users already set to-do list.

Lemme know where the flaw in my logic is if there is one.

[Soleil]

AlphaWolf


I tried that last weekend, I recorded on 2 dif channels from 2am to 4am and the Service Data Download happened at 4:30am instead of the regular 2:30am

Next I created a channel.dat to remove channel 100, I do not see the channel 100 in the guide and I can not select it manually, It tell's me channel not available.

But last night the Service Data Download was still succefull at 2:30am.

Any other ideas?

Soleil.

[AlphaWolf]

perhapse its tuning to a specific frequency, rather than a pre-defined specific channel? If that is the case, then I would think that before we can go any further, we would need to dissassemble the myworld app....? Either that there must be a way to "unschedule" the download, or maybe interrupt it somehow so that it waits til the following evening.

I have tried changing the channel manualy while the update was in progress, and I didn't see it attempt to finnish it later. But then I wasn't watching it the whole time and I didn't look at the info screen later that day....could be possible, if so then its a simple matter of making that happen automaticaly.

[Soleil]

Tonight I will try to set two recording from 2:30 to 5 or 6am.

To see if there is a windows of time that the process need to take place.

I will post the result Friday, I will not be around tomorrow.

Soleil

[AlphaWolf]

Maybe it would be in our best interest to have a project whos aim is to create an opensource generic myworld replacement? We could probably easily control updates this way. Of course this would require ample ammounts of effort, and would probably be the biggest thing ever done to change a tivo.

[Soleil]

Ok,

Here is the report.

Wed evening I programmed a manual repeat recording of Channel 210 & 211 (Blank on my DTivo) from 2:25am to 7am.

So far my Service Data Download said the last successful one was Wed 2:30am. So the download did not happen for over two days now, I believe I got it now.

I simply have to delete the recording once in a while. They are empty anyway. It does not even play the blank screen but the Data download does not happen.

I will let you know if something else happens in the future.

Soleil

[gsxrpilot]

So you can disable downloads with two simultaneous recordings but don't we need these for guide data? Does anybody know how many days of guide data TIVO stores? I suppose to minmize the risk, we could set it to update only when we absolutely need it. Either that, or a site could be set up which has the guide data we need and every few days we would manually download it into the TIVO via bash (an automatic PC utility for this would be nice) Just throwing out ideas.

[AlphaWolf]

Dtivos obtain the guide data the same way that the regular IRDs do (notice when you first plug it in, that it gets the guide data). The nightly updates are for (I think) both small software upgrades as well as tivolution and showcases downloads.

I think the path we need to take now would be to trick whatever schedules the updates to think that something is being recorded when it realy isn't. This could be as simple as looking for where the program checks the todo list and modify it so that it sees the times its looking for as being used.

I am not an expert, so I can't do this myself, just trying to help plant a seed :)

[BubbaJ]

become an expert.. it isn't hard.. just start digging through stuff til it makes sense, then learn from there..

[Glitched]

nothing useful to add... LOL@become an expert. ahaha :D

as usuall, he is right though

[Marksmanaz]

I have no knowledge or skills to contribute to this cause, I'm sorry. I did come across this though.

http://www.tivocommunity.com/tivo-vb/showthread.php?s=&threadid=43607

Time is running out. The next upgrade is coming soon.

Marksmanaz

[AlphaWolf]

Yeah I am working on it :P but I am a long ways away from being able to make anything that is reliable. Dissassembling code is a bit out of my league (probably would be good to learn more assembly language first, which isn't something that somebody like me can do within a few months even)

[AlphaWolf]

*snip* screwed that one up :/ sorry. (tried to delete but couldnt)

[AlphaWolf]

BubbaJ: Ill get back to you on that tommorow (no time for an active conversation at the minute). Hopefuly cracking is easier than im thinking. I have a small (I do mean small) ammount of knowledge of C++ (the best I know is how to use arrays in dos consoles), basic, and quite a bit of HTML (but then who doesn't nowadays?). I think my only strong points right now are that I understand the capabilities and limits of computers, and I believe I have a decent ability to break down a programs algorithm just by watching what it does a few times (if thats any good). The main thing I lack is knowledge of language.

Hopefuly my self-eval is accurate at least. In a thinner nutshell, I think psuedoscripts can be easy childsplay. Something like hex dissassembling drives me whacko and is what I consider the work of an "expert".

[BubbaJ]

sure it is.. I'd never looked at PPC assembler before I took a whack at the prom.. (I didn't actually look at much of it then either.)

If you want to LEARN assembly, the best place to start is to write a disassembler, that way you learn all of the odd nuances of the processor. Myself and a number of others on this board would be more than happy to help you in learning, and building your own disassembler. If you want somewhere to start, send me a PM..

[digitalAir]

Step 1. get the datasheet on the CPU in question.
Step 2. get the instruction set on the CPU (usually another datasheet)

These can usually be gotten from the website of the chip manufacturer...

In this particular case, goto www.ibm.com and enter a search for "403GCX" -- lots of good stuff, most in pdf format...

[AlphaWolf]

hah....my ginea pig tivo hasnt taken a single update in a whole week. How you ask? Set a season pass for paid programming, only keep one episode at a time, and set it to the lowest recording priority. Stupid, but it works! You should only do this if you are either A: very paranoid B: never watch live TV late at night C: dont frequently watch live TV on the weekends, or D: some or all of the above. If not then it will realy piss you off how every 30 minutes during the late evening your tivo asks you to change the channel.

:D

[tivomon]

ingenuos... so along those same lines. Can we take channel 100 off the list. I think the updates come doen on channel 100. Well last time I was up at 2am.

[AlphaWolf]

I think somebody tried that and it didn't work. It's my belief that the IRD tunes to a specific frequency rather than a defined channel, and then just pops up the generic number '100'.

[groundhog]

hah....my ginea pig tivo hasnt taken a single update in a whole week. How you ask? Set a season pass for paid programming, only keep one episode at a time, and set it to the lowest recording priority. Stupid, but it works! You should only do this if you are either A: very paranoid B: never watch live TV late at night C: dont frequently watch live TV on the weekends, or D: some or all of the above. If not then it will realy piss you off how every 30 minutes during the late evening your tivo asks you to change the channel.


Thanks Alphawolf. Did a sort of variation of this, and I still have 2.5.1 :).

[BubbleLamp]

Do we know if 2.5.2 is a rolling rollout? IOW, should any regular user get it on their normal service download? I haven't done as much as you guys to stave off the update, but I still have 2.5.1. Can/should I assume my measures are sufficient?

[chipster]

Guess you need to define "regular user". Many here do not allow their DTivo to call home - not exactly "regular"...

Relatively few have indicated that they were updated from the stream. Many at AVSForum report they got 2.5.2 from the phone.

We don't know for sure what the trigger is - does a phone in set the DTivo into the approprite group - for download from the stream later? Or can this "group inclusion" be accomplished over the stream?

Take a close look at PGM's upload today .............

[Juppers]

Although the ability is there, I don't believe stream updating is enabled. I did get 2.5.2 from the phone. And the SW_released thing has always been there for me since 2.5. What I do suspect, is 2.5.2 will be the last version that will come via the phone. And if stream updating was on the menu for 2.5.2, you can rest assured that the tivo beta users would have had experience with it, and none of them have even hinted at it. So far, 2.5.2 is nothing big and nasty, just some minor updates, so I wouldn't sweat it. Now the 3.0 version for Dtivo, that is the one I am worried about. I bet there are all sorts of fun stuff in there to play with. :)

[groundhog]

Maybe I was misled but I noticed a few post by those claiming that they received the update via the stream. I guess that I thought that more people received it than actually did.

Here is a whole thread stating that it comes over the stream. http://dealdatabase.com/forum/showt...&threadid=13644

I'm now wondering if it is just that those who are using Turbonet are getting it and thinking that it's coming over the stream, when it's actually coming over the ethernet connection. Has anyone without Tivonet/Turbonet received the update with no phone line plugged in?

Anyway, I took some extra precautions last night with some rcsysinit changes. It doesn't hurt to be safe

[SuperVHS]

I have an SA, so this does not directly apply to me (although I did record the "Advanced Programing" and watched the pretty patterns that look like a way to send digital data to TiVos).

Anyway, if you read the different scripts on the TiVo, you can see that it compares it's current software version and only upgrades if the newer software is a higher version. The version is stored in MFS (I found it in 2 places on my SA).

If you set the value to 4.1.0-01-1-2510 (so you know you actually have 2.5.1), I would think you would be immune to upgrades until TiVo comes out with 4.2.

PS This is not a good idea on units that call in, since TiVo would receive the version your unit thinks it has.

[BubbleLamp]

Originally posted by Juppers
What I do suspect, is 2.5.2 will be the last version that will come via the phone.

So Juppers, do you think they had to add code in 2.5.2 to facilitate updates via the stream? If so, then it'd be another good reason to stay at 2.5.1.

[jmayes]

So has anyone got 3.0 for DTIVO yet?

I assume that the "updates=false" trick for the SA will be of no use in the DTIVO,

SuperVHS, would you provide some step by step to change the version number?

Great work Guys!
Jmayes

[groundhog]

SuperVHS, would you provide some step by step to change the version number?
The version is stored in MFS (I found it in 2 places on my SA).

Could you at least let us know where the MFS file(s) are? I searched around a little and couldn't find it/them.

[SuperVHS]

enter tivosh

mls /

mls /SwSystem
Directory of /SwSystem starting at ''

Name Type FsId Date Time Size
---- ---- ---- ---- ---- ----
2.5.1-01-1-000 tyDb 404637 02/15/02 07:03 664
ACTIVE tyDb 404637 02/15/02 07:03 664

dumpobj 404637
SwSystem 404637/11 {
Active = 1
IndexPath = /SwSystem/2.5.1-01-1-000 /SwSystem/ACTIVE /Server/4758173
InstalledOBSOLETE = 1
Module = 404619/-1 404621/-1 404623/-1 404625/-1 404627/-1 404629/-1 4
04631/-1 404633/-1 404635/-1
Name = 2.5.1-01-1-000
ResourceChecksum = 09529207a69f7fff2e0ce1b0363992c
ResourceGroup = 404638/-1 404639/-1 404640/-1 404641/-1
ServerId = 475813
ServerVersion = 51
Version = 3
}

This is location #1
You can use dbget / dbset to read and write to the database
ex: dbset /SwSystem Name 4.00.00.00.00

Remember this is an SA with 2.5 s/w

[SuperVHS]

The second location where I found the SW version was by dumpobj(ing) the /Setup fsid and then dumbobj(ing) the ServiceInfo fsid. I have changed these separately and they are not linked (at least not in the short run).



so, to change these.....

Backup first!

1) Find it
2) get the fsid for it
3) use dumpobj in tivosh to verify that you can access it
4) use dbset (fsid) Name (new value)
5) use dumpobj in tivosh to verify the change
6) reboot

Enjoy...... and let us know how it works.

oops.... this line was wrong
4) use dbset (fsid) Name (new value)
also dbget (fsid) Name should give you the value as well as dumpobj

[groundhog]

Thanks :)

[jmayes]

Same here, Thankx for the heads-up SuperVHS!

Jmayes

[SuperVHS]

I corrected an error on the dbset syntax in my last posting.

Keep in mind that this is just an idea, since I have an SA and not a combo. I guess the only way to test it is to let the unit upgrade, restore it to an earlier version, add this mod, and see if it upgrades again.

Good Luck!