Is there any information available for the HR2x filesystem?

[drnull]

DirecTV left ssh accessible in Friday night's CE download.
http://www.dbstalk.com/showthread.php?t=127029

The ssh server is dropbear .48

I was just wondering if anyone had ideas on getting in? Brute-forcing a root password via ssh login on this box would take... well, millennia. And that's assuming root logins are enabled via ssh. But with the os all on a prom chip, I guess we don't know anything. Usernames, dropbear config files, nothing.

As is, I just have a user/pass prompt taunting me on my HR21. So sad, my tivo sitting upstairs lets me in without a password at all.

[jt1134]

I remember seeing this (http://www.google.com/search?hl=en&q=squashfs+site%3Adbstalk.com) a while back. Also, this (http://mfslive.org/readme_1.3b.txt) states that the HR20 fs is mountable under mfslive.

Apparently, this was found in the HR20 logs :
Jan 1 00:01:06 Directv kernel: Linux version 2.4.29-uclibc-brcm build version (dtvcm@d-e37620) (gcc version 3.3.6) #1 Thu Jul 27 19:23:33 PDT 2006

Jan 1 00:01:06 Directv kernel: Kernel command line: mtdparts=pace_dtv:896k(loader),1408k(kernel),-(rootfs) root=/dev/mtdblock2 rootfstype=squashfs bcmrac=0xd0 console=ttyS0,115200
I got a tivohd instead of an HR20 so I never pursued anything, I just remember seeing this stuff a while back.