PDA

View Full Version : 11.0j starting to roll out.



StanSimmons
09-17-2010, 11:46 PM
http://www.tivocommunity.com/tivo-vb/showthread.php?t=455781

According to TiVoJerry:


We just started CS Ramp for 11.0j, which should resolve persistent grey screens on analog channels and GSAS (green screen and screeching/siren)

We'll be reviewing all CS cases for a little longer than normal to see if this can be released to the wider audience. If we do roll, it will only take a few days to get to all S3 HD boxes, so there is no priority list to sign up for.
__________________
Jerry
TiVo Field Trials Program Manager
Grillmeister
TiVo Ninja

T_RJ
10-02-2010, 10:35 AM
Has anyone looked at 11.0j yet?
I was going to do the upgrade this weekend and hoping someone has already gone through with it.
Is there any changes in Tivoapp?

psxboy
10-04-2010, 12:27 PM
I haven't seen 11.0j yet but if anyone wants to upload their tivoapp from it I'll look at porting patches for it.

-psxboy

T_RJ
10-08-2010, 06:30 PM
I have two HD's one received the update the other has not.
My hacked HD has not received the update yet.
Looks like the roll out has slowed.
Any one else received the update?

StanSimmons
10-08-2010, 11:37 PM
I have 11.0j on one of my hacked HD's, but I haven't allowed it to install yet.

Is there anything I can do to help out? I don't know much of the background stuff, but I can follow instructions.

lgkahn
10-10-2010, 12:11 PM
none of my 3 hacked hd tivos have gotten it.. maybe they pulled the update

T_RJ
10-10-2010, 01:06 PM
My hacked tivo just sh*t the bed.
Hard drive went south.
I had not done a back up for a long time:mad::(:mad::(.
Went to restore my back up from 1.5 years ago and it is bad:eek::eek:.
I have a HDXL backup that is good but my box is not a real XL.
I remember reading that an XL backup could be used but something needed to be changed. Can any one inlighten me?

Thanks

lgkahn
10-13-2010, 10:18 PM
did you ever fix it .. pm me what model is it.. i have some backups but they are for hacked boxes.

T_RJ
10-14-2010, 12:11 AM
I made a copy from my unhacked unit with 11.0j on it and installed on a new drive. Hopefully there aren't any problems with 11.0j. Seems Tivo is not pushing 11.0j any more. I haven't redone my hacks yet. I had to get it up and running quickly.
A virgin image from a new tcd652160 box would be great.
Thanks for the offer.

lgkahn
10-15-2010, 03:17 PM
I made a copy from my unhacked unit with 11.0j on it and installed on a new drive. Hopefully there aren't any problems with 11.0j. Seems Tivo is not pushing 11.0j any more. I haven't redone my hacks yet. I had to get it up and running quickly.
A virgin image from a new tcd652160 box would be great.
Thanks for the offer.

that is why i asked what model i have the 605b or whatever not the same model..

ScanMan
10-20-2010, 03:21 PM
Here are the basic patches I use ported for software version 11.0j

11.0j
0x005d353c "104000aa 100000aa" //noencryption
0x006569f0 "30b000ff 00008021" //cci1
0x00656a14 "00e08821 24110000" //cci2
0x00773acc "00008021 24100001" //backdoors
0x00867e9c "0d2939a5 00000000" //nopromos
0x009bca58 "12400003 10000003" //deletethisrecording?
0x00b935dc "14400026 10400026" //30secskip
0x00b97ca0 "0c2e629f 00000000" //nopauseads
0x01182150 "30b000ff 00008021" //cci3I performed the upgrade and verified patches are good (although I only applied noencrypt,cci,backdors).

Also, completed the bufferhack port, lightly tested and that appears fine as well.

set sys(11.0j) [list 0x114c86 0x114952 0x6c 0x1bd19a 32275728 325F14DAA33CC105AD841D8F73E3E67B7A85EDBF]

lgkahn
10-20-2010, 07:25 PM
thanks will test soon as it is on one of my boxes.. need nopause hack..
(dont use nopromos as it screws up stuff)

also still need to find bufferhack.

assuming your numbers are correct here are the hacks for die hard command line like me in the following order


no encr.
backdoor
30sec skip
cci1
cci2
cci3
nopause

nopromos
deletethis


11.0j
echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1914172
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3619532
echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7943644
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2451952
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2451988
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14164304
echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=7961760


echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=4619932
echo -ne "\x10\x00\x00\x03" | dd conv=notrunc of=tivoapp bs=1 seek=6015576

Thinkdiff
10-20-2010, 11:56 PM
Just installed 11.0j on my TiVo HD and applied the patches. Seems to be working fine. Thanks!

AlphaWolf
10-21-2010, 03:17 AM
Ok so I'm tripping out here or something. I made it this far:

//static/SwSystem/11.0j-01-2/utils-171560075-1.slice.gz
//static/SwSystem/11.0j-01-2/GZcore-171560077-1.slice.gz
//static/SwSystem/11.0j-01-2/GZkernel-Gen06-171560083-1.slice.gz
//static/SwSystem/11.0j-01-2/GZhpk-Gen06-171560085-1.slice.gz
//static/SwSystem/11.0j-01-2/GZlocale-en_US-171560089-1.slice.gz
//static/SwSystem/11.0j-01-2/GZeiger-171560087-1.slice.gz
//static/SwSystem/11.0j-01-2/swsystem-171560093-2.slice.gz.bnd

Yet the address given in my logs returns a "Forbidden" when I request from there. It's as if I can request everything BUT those. Anybody else noticing this? Anyways I can't figure out the bf decrypt key because of it.

Guess I have to wait for tivo to just roll it out to my unit.

lgkahn
10-21-2010, 06:30 PM
strange one of my box has had it for 2 days.. but boxes bought b4 still dont have it

ScanMan
10-21-2010, 11:08 PM
Additional 11.0j patches have been ported and updated above; a "tvapppatches-11.0j.tcl" has been posted in the support thread here (http://www.dealdatabase.com/forum/showpost.php?p=308781&postcount=44).

lgkahn
10-22-2010, 12:15 AM
thanks .. anyone have the bufferhack line yet?

bummer dont want to upgrade till i have it.. if someone can point me some documentation about what hex instructions to look for. ican try to find the patch locations myself.. but currently clueless.

ScanMan
10-23-2010, 12:24 AM
Updated bufferhack port for 11.0j. Lightly tested, but appears fine. Also posted a 'bufferhack11j.tcl' in the support thread here (http://dealdatabase.com/forum/showpost.php?p=308794&postcount=210).

thomb
10-23-2010, 06:33 PM
First time upgrader and I successfully upgraded both of my TivoHD units last night. Thanks ScanMan.

leeclarke
10-24-2010, 01:16 PM
Hi, Would you mind posting the exact steps you used to rehack the TivoHD? Tia.......

lrhorer
10-24-2010, 04:54 PM
On the outside chance anyone is interested, I have created a small script to hack tivoapp on my PC. Many people choose to hack tivoapp insitu, but for the time being, at least, I am still pulling my TiVo drives (they are in external enclosures, so this is easy) and hacking on my PC under Linux. This could also be helpful the first time a TiVo drive gets hacked.


#!/bin/bash
SaveFile=/hack/Saved_Apps/tivoapp.tmp
Archive=/hack/Saved_Apps/tivoapp.sav
HackFile=/hack/hacks.fil
dstring=`date +%m-%d-%y`
cd /tivo/tvbin
echo Creating temporary tivoapp
cp tivoapp $SaveFile

echo Getting the hacking parameters for tivoapp
fail=1
cat $HackFile | while read line
do
offset=$(( $(echo $line | cut -d" " -f1) - 0x00400000 ))
oldword=$(echo $line | cut -d" " -f2)
newword=$(echo $line | cut -d" " -f3)
echo $oldword $newword $offset
B1=$( dd if=tivoapp skip=$offset bs=1 count=4 2> /dev/null | hexdump | grep 0000000 | cut -c11-12 )
B2=$( dd if=tivoapp skip=$offset bs=1 count=4 2> /dev/null | hexdump | grep 0000000 | cut -c9-10 )
B3=$( dd if=tivoapp skip=$offset bs=1 count=4 2> /dev/null | hexdump | grep 0000000 | cut -c16-17 )
B4=$( dd if=tivoapp skip=$offset bs=1 count=4 2> /dev/null | hexdump | grep 0000000 | cut -c14-15 )
testword=$B1$B2$B3$B4
echo $testword
# Check to make sure the bytes match
if [ "$testword" == "$oldword" ];
then
echo Updating tivoapp $( echo $line | cut -d" " -f4)
# Convert the string into a 4 byte number expression
escape="\x"
H1=${newword:0:2}
H2=${newword:2:2}
H3=${newword:4:2}
H4=${newword:6:2}
newword=$escape$H1$escape$H2$escape$H3$escape$H4
echo -ne "$newword" | dd conv=notrunc of=$SaveFile bs=1 seek=$offset
else
echo Failed for $oldword $newword $offset Old value: $testword
test -e $SaveFile && rm $SaveFile
fail=0
break
fi
done
if [ $fail == 0 ];
then
test -e $SaveFile && rm $SaveFile
exit 1
fi
echo Saving old tivoapp
test -e $Archive.$dstring && mv $Archive.$dstring $Archive.$dstring.safety
cp tivoapp $Archive.$dstring
mv $SaveFile tivoapp
echo
echo Done!

Example tivohacks.fil


0x005d353c 104000aa 100000aa //noencryption
0x006569f0 30b000ff 00008021 //cci1
0x00656a14 00e08821 24110000 //cci2
0x01182150 30b000ff 00008021 //cci3
0x00b97ca0 0c2e629f 00000000 //nopauseads

lrhorer
10-24-2010, 05:33 PM
Hi, Would you mind posting the exact steps you used to rehack the TivoHD? Tia.......
If I might be so bold, you might consider checking out this (http://dealdatabase.com/forum/showthread.php?p=297738#post297738) post. I just updated it with some new code and some sample .tar files. Note this will only work as-is on a Linux PC arranged per the notes in the post, but it is intended more as a guide to hacking than a utility for everyone to use. A few minutes scanning the code should make it evident what you need to do yourself, on your system.

whitepelican
10-25-2010, 09:17 AM
Additional 11.0j patches have been ported and updated above; a "tvapppatches-11.0j.tcl" has been posted in the support thread here (http://www.dealdatabase.com/forum/showpost.php?p=308781&postcount=44).

Thanks, Scanman, for your work on these. I really appreciate it. I have finally got to the point where this is about a 15 minute process for me instead of a full day affair. My two S3's are now updated to 11.0j and working perfectly.

thomb
10-25-2010, 12:49 PM
Hi, Would you mind posting the exact steps you used to rehack the TivoHD? Tia.......

I upgraded via telnet, and it was painless.

I mostly used the steps in this post:
http://www.dealdatabase.com/forum/showthread.php?t=48925

I use Jamie's kernal, so I paid special attention to ScanMan's post #2 here:
http://www.dealdatabase.com/forum/showthread.php?t=63182

After completing the upgrade, I soft booted the TivoHD to ensure everything was good and then I applied the hacks using tvapppatches.tcl and then soft booted again. Everything worked right out of the gate.

Altogether it took ~45 minutes to update 2 TivoHDs, could have been even quicker, but it was my first time through an upgrade, and the newness of upgrading had me quadruple checking my work.

lgkahn
10-25-2010, 03:52 PM
here are my notes for doing upgrade inline.. not i do everything manually so if anything fails (no script) i can re-act

1. backup /var and tvbin and bin etc.. in case you need to via ftp to a pc b4
doing the install (sometimes var is wipped after an install but not last 2-03 times)

first got both kernels to make sure i have a hacked one saved
dd if=/dev/hda3 of=hda3vmlinux.px
dd if=/dev/hda6 of=hda6vmlinux.px

no diff on tivo so put them on pc


2. bootpage -p

root=/dev/hda4 dsscon=true console=1,115200 upgradesoftware=false

so new will be installed on 7 ...

3. now do upgrade
after copying installSw.sav back to installSw.tcl

cd /tvbin
remount
cp installSw.sav instalSw.tcl

./installSw.tcl 11.0-01-2-648

(change above to the exact version you are upgrading too.. you can fine this in tivoweb mfs/swsystem)
here was the output


make sure you version of installSw.tcl (which was a copy at last upgrade has reboot commented out)
ie

hdbrtivo:/tvbin$ grep -i reboot install*
installNFS: Rebooting in 3 seconds"
installNFS: reboot
installSw.sav: putlog "Attempting reboot..."
installSw.sav: reboot
installSw.tcl: putlog "Not Attempting reboot..."
installSw.tcl: # reboot
hdbrtivo:/tvbin$
hdbrtivo:/tvbin$


12/07:17:18:13: ./installSw.tcl: Installing "11.0-01-2-648".
Installing module utils
12/07:17:18:14: ./installSw.tcl: Executing updateroot /dev/hda /install /var/pa
ckages 11.0-01-2-648
Path prefix is /var/utils/
Sha1hash passed for updatekernel
Sha1hash passed for checkkernel.tcl
Sha1hash passed for messagelib.tcl
Sha1hash passed for buildskeleton
Sha1hash passed for SwInstall.tcl
Sha1hash passed for builddev

Searching /etc/fstab for current root

Old root is on /dev/hda4, new one goes on /dev/hda7

Creating new filesystem on /dev/hda7

Mounting new root filesystem on /install

Installing module core
Installing module hpk-Gen05
Installing module locale-en_US
Installing module eiger
Installing module kernel-Gen05
Building basic filesystem skeleton on /install


Checking /install/etc/fstab

newroot is 7, copying fstab from fstab.alternate
Creating symlinks for /install/etc files
Dismounting /install and checking its integrity


Initializing First Activation Date


Modifying bootparams to point to /dev/hda7

Creating upgrade messages
processing message file: /var/utils//messages/upgrade_73_ptcm.msg
found message
From = The TiVo Team
DateStr =
Date = 14220
Time = 62529
Subject = You have a new service update!
ExpireStr =
Expire = 14280
Priority = 1
Destination = 2
Frequency = 3600
MaxCount = 1
Body = Congrats! You've just received the Fall 2008 TiVo Service Update for your
TiVo DVR. This release reorganizes the TiVo Central menu, making it easier to
access Video on Demand content from TiVo and its partners. If your DVR is conne
cted to broadband, you'll be able to enjoy the latest movies, television shows,
and web videos directly from this menu.

Enjoy!

- The TiVo Team
creating message object...
processing message file: /var/utils//messages/upgrade_73_mb.msg
found message
From = The TiVo Team
DateStr =
Date = 14220
Time = 62529
Subject = You have a new service update!
ExpireStr =
Expire = 14280
Priority = 3
Destination = 1
Frequency = 8640000
MaxCount = 1
Body = Congrats! You've just received the Fall 2008 TiVo Service Update for your
TiVo DVR. This release reorganizes the TiVo Central menu, making it easier to
access Video on Demand content from TiVo and its partners. If your DVR is conne
cted to broadband, you'll be able to enjoy the latest movies, television shows,
and web videos directly from this menu.

There are many more changes 'under the hood' to support new features and service
s in the future. At TiVo we're always working to make your home media experienc
e the very best it can be!

Enjoy!

- The TiVo Team
creating message object...
Flipping root, setting boot parameters to 'root=/dev/hda7 dsscon=true console=1,
115200 upgradesoftware=false'

OK, reboot the system to use the new root filesystem

12/07:17:22:10: ./installSw.tcl: not Attempting reboot...
hdbrtivo:/tvbin$
hdbrtivo:/tvbin$



-------

4. now check boot stuff

hdbrtivo:/tvbin$ bootpage -p
No device name given, assuming /dev/hda
root=/dev/hda7 dsscon=true console=1,115200 upgradesoftware=false

seems ok


5. first put hacked kernel back to both partitions for good measure

hdbrtivo:/tvbin$ cd /var/hdkernel
hdbrtivo:/var/hdkernel$
hdbrtivo:/var/hdkernel$ ls
94hackedhdkernel
hdbrtivo:/var/hdkernel$
hdbrtivo:/var/hdkernel$ dd if=94hackedhdkernel of=/dev/hda6
8192+0 records in
8192+0 records out
hdbrtivo:/var/hdkernel$
hdbrtivo:/var/hdkernel$ dd if=94hackedhdkernel of=/dev/hda3
8192+0 records in
8192+0 records out
hdbrtivo:/var/hdkernel$
hdbrtivo:/var/hdkernel$

6. now put hacks


hdbrtivo:/tvbin$ mkdir /new
hdbrtivo:/tvbin$

hdbrtivo:/var/hdkernel$ mount /dev/hda7 /new
hdbrtivo:/var/hdkernel$


7. rc.sysinit.author

hdbrtivo:/new/etc/rc.d$
hdbrtivo:/new/etc/rc.d$ cp rc.sysinit rc.sysinit.sav
hdbrtivo:/new/etc/rc.d$
hdbrtivo:/new/etc/rc.d$ cp /etc/rc.d/rc.sysinit.author .
hdbrtivo:/new/etc/rc.d$
hdbrtivo:/new/etc/rc.d$

8. busybox or your tivo tools

cd /new
cp /BUSY* .

hdbrtivo:/new$ tar -xvf BUSYBOX_1_00_PRE3.tar
busybox/
busybox/[
busybox/addgroup
busybox/adduser
busybox/ar
busybox/ash
busybox/awk
busybox/basename
busybox/bunzip2
busybox/busybox
busybox/bzcat
busybox/cal
busybox/cat
busybox/chgrp
busybox/chmod
busybox/chown
busybox/chroot
busybox/clear
busybox/cmp
busybox/cp
busybox/cpio
busybox/crond
busybox/crontab
busybox/cut
busybox/date
busybox/dd
busybox/delgroup
busybox/deluser
busybox/df
busybox/dirname
busybox/dmesg
busybox/dos2unix
busybox/du
busybox/echo
busybox/egrep
busybox/env
busybox/expr
busybox/false
busybox/fdisk

...

hdbrtivo:/new$
hdbrtivo:/new$

9. tivoftpd on other bin
hdbrtivo:/new/bin$
hdbrtivo:/new/bin$ cp /bin/mfs_uberexport .
hdbrtivo:/new/bin$
hdbrtivo:/new/bin$ cp /bin/remount .
hdbrtivo:/new/bin$
hdbrtivo:/new/bin$ cp /bin/s3tots .
hdbrtivo:/new/bin$
hdbrtivo:/new/bin$ cp /bin/tar .
hdbrtivo:/new/bin$
hdbrtivo:/new/bin$ cp /bin/tivoftpd .
hdbrtivo:/new/bin$
hdbrtivo:/new/bin$ ls


10. resolv.conf

hdbrtivo:/new/etc$ cp /etc/resolv.conf .
(resolv.conf not necessary any longer it automatically copies it)

11. install sw... comment out the reboot in /tvbin and copy to installSw.tcl

hdbrtivo:/new/tvbin$ cp ./installSw.itcl installSw.sav
hdbrtivo:/new/tvbin$ cp /tvbin/installSw.tcl .



make sure you check permissions on executables also in /bin

ie

-rwxr-xr-x 1 0 0 95668 Dec 4 18:51 sz
-rwxr-xr-x 1 0 0 219248 Dec 7 17:31 tar
-rwxr-xr-x 1 0 0 66152 Dec 7 17:31 tivoftpd
-rwxr-xr-x 1 0 0 13960 Dec 4 18:51 top
-rwxr-xr-x 1 0 0 39336 Dec 4 18:51 umount


12. also one final check to make sure rc.sysinit.author is sound
ie cat /new/etc/rc.d/rc.sysinit.author


13. cp tivoapp and hack it

hdbrtivo:/new/sbin$ cd /new/tvbin
hdbrtivo:/new/tvbin$
hdbrtivo:/new/tvbin$ ls -al tivo*
-rwxr-xr-x 1 0 0 32115184 Dec 4 18:52 tivoapp
lrwxrwxrwx 1 0 0 7 Dec 7 17:19 tivosh -> tivoapp
hdbrtivo:/new/tvbin$
hdbrtivo:/new/tvbin$ cp tivoapp tivoapp.sav
hdbrtivo:/new/tvbin$

first 2 sare nocso and back door

next 3 are nocso
last is 30 sec
StageE_PreApplication

echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1895284 // no cso
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3598688 //backdoor
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2433020
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2433056
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14123600
echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7912076 // 30 sec skip


above is for 11.0
below is for 11.0b
echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1915420 // no cso
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2451664 //following 3 are cci
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2451700
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14115792

echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3619700

above is backdoors

echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7934352

above is 30 sec



11.0c
disable enc
echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1915412

backdoors

echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3619640

30 sec

echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7941092

cci
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2453056
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2453092
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14147616


11.0d

echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1915412
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3619640
echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7941060
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2453056
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2453092
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14139296

11.0g

echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1914760
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3621276
echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7941976
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2452500
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2452536
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=13924576
echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=7960092

echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=4623428
echo -ne "\x10\x00\x00\x03" | dd conv=notrunc of=tivoapp bs=1 seek=6016084

note i only do the first 7 not the nopromos which screws up the video on
demand
and not the last one cause i dont care about delete

there are in order

no encr.
backdoor
30sec skip
cci1
cci2
cci3
nopause
nopromos
delete this recording?

problem with no promos kills video on demand
the delete this .. gets rid of delete this recording message after
stopping near end

(subtract 0x400000 from patch file to get dd offsets)

11.0h

echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1915084
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3620444
echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7944400
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2452864
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2452900
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=13939052
echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=7962516

echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=4620676
echo -ne "\x10\x00\x00\x03" | dd conv=notrunc of=tivoapp bs=1 seek=6016516

set sys(11.0h)[list 0x115c22 0x1158ee 0x6c 0x1bd52a 32271180 325F14DAA33CC105AD841D8F73E3E67B7A85EDBF]


11.0j
echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1914172
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3619532
echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7943644
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2451952
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2451988
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14164304
echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=7961760


(i dont use the patches below only above)
echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=4619932
echo -ne "\x10\x00\x00\x03" | dd conv=notrunc of=tivoapp bs=1 seek=6015576

no encr.
backdoor
30sec skip
cci1
cci2
cci3
nopause
nopromos

nopromos
deletehis

14. remove bad reboot in busybox

dbrtivo:/busybox$ cd /new/busybox
dbrtivo:/new/busybox$
dbrtivo:/new/busybox$ ls re*
eadlink realpath reboot renice reset
dbrtivo:/new/busybox$
dbrtivo:/new/busybox$ rm reboot


15. as good measure comment out the installsw in
/new/etc/rc.d/StageE_PreApplication/rc.Sequence_500.CheckForSoftwareUpgrade.sh
(I dont bother with this anymore)

16. tytools


bash-2.02#
bash-2.02# cd /new
bash-2.02#
bash-2.02# mkdir usr
bash-2.02#
bash-2.02# cd usr
bash-2.02#
bash-2.02# cd /usr
bash-2.02#
bash-2.02# ls
tytools
bash-2.02#
bash-2.02# cd /new/usr
bash-2.02#
bash-2.02# mkdir tytools
bash-2.02#
bash-2.02# cd tytools
bash-2.02#
bash-2.02# cp /usr/tytools/* .
bash-2.02#
bash-2.02# ls
NowShowing mfs_stream tserver_mfs7_mips
NowShowing.tcl tserver
bash-2.02#
bash-2.02# ls -al
total 346
drwxr-xr-x 2 0 0 1024 Jan 6 17:49 .
drwxr-xr-x 3 0 0 1024 Jan 6 17:49 ..
-rwxr-xr-x 1 0 0 111784 Jan 6 17:49 NowShowing
-rwxr-xr-x 1 0 0 15162 Jan 6 17:49 NowShowing.tcl
-rwxr-xr-x 1 0 0 44380 Jan 6 17:49 mfs_stream
-rwxr-xr-x 1 0 0 124616 Jan 6 17:49 tserver
-rwxr-xr-x 1 0 0 48324 Jan 6 17:49 tserver_mfs7_mips
bash-2.02#
bash-2.02#
bash-2.02#
bash-2.02# pwd
/new/usr/tytools
bash-2.02#


THAT should be it and reboot and test and make sure /var is still there
after
reboot etc..

check installSw.itcl in /new/tvbin
change it to have reboot commented out and remove it
after copying it to .sav


hdbrtivo:/new/etc/rc.d/StageE_PreApplication$
hdbrtivo:/new/etc/rc.d/StageE_PreApplication$ remount
Remount by AlphaWolf_HK
Root FS is now in read only mode.
hdbrtivo:/new/etc/rc.d/StageE_PreApplication$
hdbrtivo:/new/etc/rc.d/StageE_PreApplication$ reboot


after reboot run bufferhack11.tcl to reset buffer size and reboot again
remove old tivoapp to save space

lrhorer
10-26-2010, 02:53 AM
Thanks, Scanman, for your work on these. I really appreciate it. I have finally got to the point where this is about a 15 minute process for me instead of a full day affair. My two S3's are now updated to 11.0j and working perfectly.
Fifteen minutes each? Fifteen minutes for the pair is not too bad, although it takes me less. As I mentioned before, what I have done is put my primary drives in external housings and mounted my secondary drives inside the TiVo. On the THD this is really easy, since the SATA cables can be swapped inside the box in a heartbeat. To do it on the S3 required a little surgery on the case. Anyway, I just kill power to the TiVo, run the external drive over to my PC which has been booted to Linux, plug the drive in to an eSATA port, and run this (http://dealdatabase.com/forum/showthread.php?p=297738#post297738) script. 'Takes all of a minute, once the values for the tivoapp hacks are updated in the file. After umounting the drive and shutting it down, I take it back to its TiVo and let 'er rip. While one is rebooting, I can be hacking the other. Without really rushing, I can be done with both TiVos in under 10 minutes, excluding boot time.

Of course, setting it all up took a bit of time, but now it goes like clockwork. I am, however, looking into scripted upgrading insitu, at least on the S3 in the living room.

ScanMan
10-26-2010, 12:22 PM
Updated my post on the Manual Software Upgrade (http://www.dealdatabase.com/forum/showthread.php?t=48925) process to better reflect the steps relevant for Series 3 tivos including some notes on custom kernels and ethernet drivers, etc. With each software upgrade we learn that everyone has their own way of upgrading, I hope my post outlines the basic steps that I think are mostly common to all, regardless of method.

whitepelican
10-26-2010, 03:00 PM
Fifteen minutes each? Fifteen minutes for the pair is not too bad, although it takes me less.

Well, I never really timed it, but I'd venture to say it's actually more like 30 minutes each. The vast majority of that is waiting for the Tivo to reboot 3 times (during which time I'm just surfing the web, taking a bathroom break, raiding fridge, etc). I could also do the upgrade to both Tivos simultaneously if I really wanted, but I choose to be extra cautious and do one at a time. I'm really in no hurry here, and I'd rather not cut additional holes in my Tivos or have to have any other boxes attached to them than I already do.

lrhorer
10-26-2010, 08:13 PM
Well, I never really timed it, but I'd venture to say it's actually more like 30 minutes each. The vast majority of that is waiting for the Tivo to reboot 3 times (during which time I'm just surfing the web, taking a bathroom break, raiding fridge, etc). I could also do the upgrade to both Tivos simultaneously if I really wanted, but I choose to be extra cautious and do one at a time. I'm really in no hurry here, and I'd rather not cut additional holes in my Tivos or have to have any other boxes attached to them than I already do.
Extra time aside, there is certainly nothing wrong with that. I like the speed and efficiency afforded by employing an external drive. Since 1 of the TiVos has to have an external drive, anyway, the question of optionally not having one is moot for that unit. Ditto anyone who has two drives on their Tivo, as many do, and of course as I mentioned, the THD does not require any modification (other than the trivial one of swapping the cables) to make the external drive the primary. The biggest advantage, however, is the fact I only have to type a single, simple command - ./hack_tivo - to do the entire upgrade and don't have to reboot the TiVo (as opposed to powering it up) even once.

I also like the control allowed by external upgrades and the fact I only have to disconnect / reconnect 1 cable on the TiVo to remove the drive when it is in an external enclosure. Drive upgrades and replacements are also a breeze. That said, the whole reason I am looking into insitu upgrades is the fact the TiVo in the livingroom suffers from EMP issues if I attach an external drive to it, and entitrely for that reason I have never hacked that unit.

psxboy
10-27-2010, 01:38 PM
I know I'm beating a dead horse here, but why bother with removable drives & hooking them up to your PC or rebooting three times when you can do everything from a telnet session in about 5 minutes with a single reboot at the end?

I finally got 11.0j at the beginning of the week & I completed the upgrade remotely from work.

-psxboy

psxboy
10-27-2010, 06:05 PM
Here's the NoMEK port for 11.0j for those who use it. (It replaces the generic noencryption patch to enable MRV of encrypted content.)


11.0j
0x005d3538 "92220024 27a40028"
0x005d353c "104000aa 0c156cc4"
0x005d3540 "27a40028 00000000"
0x005d3544 "0c156cc4 0c479591"
0x005d354c "8fa20020 106000aa"
0x011e561c "27bdfec8 03e00008"
0x011e5620 "afb40128 24020001"
0x011e5644 "00a0a021 8e230040"
0x011e5648 "0c1b5ff9 10600002"
0x011e564c "00602821 00000000"
0x011e5650 "00408021 8c630000"
0x011e5654 "1200000a 03e00008"
0x011e5658 "00001021 8fa20020"

-psxboy

lrhorer
10-27-2010, 08:55 PM
I know I'm beating a dead horse here, but why bother with removable drives & hooking them up to your PC or rebooting three times when you can do everything from a telnet session in about 5 minutes with a single reboot at the end?

I finally got 11.0j at the beginning of the week & I completed the upgrade remotely from work.

I wouldn't say it is a dead horse. Indeed, as I already mentioned, I am looking into doing just that. There are several reasons one might not wish to do insitu upgrades, perhaps the top one being the fact the very first upgrade cannot be done insitu, so for at least the initial upgrade, or one following a primary hard drive failure, the external upgrade is absolutely essential. Thereafter it is a matter of choice. For two of my three TiVos, the external upgrade is so quick and easy that setting up insitu upgrading hasn't been worth the admittedly small amount of extra one-time effort. Only the fact the third TiVo can't have an external primary drive has finally convinced me to make the additional effort to set up insitu upgrading.

mike_s
10-28-2010, 07:59 AM
http://www.flatsurface.com/pics/Beating_a_Dead_Horse.gif

djl
10-28-2010, 11:55 AM
I know I've seen this elsewhere, so sorry in advance but: what do cci2 and cci3 do?

psxboy
10-28-2010, 12:25 PM
I know I've seen this elsewhere, so sorry in advance but: what do cci2 and cci3 do?

They are two of the three patches that collectively prevent the CCI byte from being set on new recordings. If your cable company marks some (or all) shows as "not copyable", this will allow you to transfer them via MRV/TTG.

-psxboy

lrhorer
10-29-2010, 11:38 PM
Here's the NoMEK port for 11.0j for those who use it. (It replaces the generic noencryption patch to enable MRV of encrypted content.)
I've seen this before, of course, but would you mind detailing the exact differences between this and NoCSO, CCI1,2,3, and NoCSO + CCI1,2,3?

psxboy
11-01-2010, 03:14 PM
I've seen this before, of course, but would you mind detailing the exact differences between this and NoCSO, CCI1,2,3, and NoCSO + CCI1,2,3?

The only thing the CCI hacks do is prevent new recordings from being marked as "not copyable" (if your cable provider does such a thing). Once you apply the hacks you are free to MRV/TTG any new recordings. This has nothing to do with whether or not the shows are encrypted on the drive though.

The NoCSO hack prevents new recordings from being encrypted when they're saved to the Tivo's hard drive. These recordings can be transferred via MRV/TTG (assuming the CCI byte isn't set) or via tserver, msf_ftp, direct extraction, etc.

The problem comes into play when you have existing encrypted recordings that you want to transfer via MRV/TTG: with the NoCSO hack you cannot transfer these recordings (they don't play on the receiving end). The NoMEK hack prevents new recordings from being encrypted AND allows you to MRV/TTG existing encrypted recordings.

-psxboy

lrhorer
11-01-2010, 07:57 PM
The only thing the CCI hacks do is prevent new recordings from being marked as "not copyable" (if your cable provider does such a thing). Once you apply the hacks you are free to MRV/TTG any new recordings. This has nothing to do with whether or not the shows are encrypted on the drive though.
True, but it does affect whether the shows can be transferred. With NoCSO + CCI1,2,3, any recording made after the hack can be transferred between any two hacked TiVos, but nothing works if one of the TiVos is not hacked. For many of us, encrypted recordings are a moot question, since for us anything recorded prior to hacking is both CCI locked and encrypted, and nothing can be done about those recordings in any case.


The NoCSO hack prevents new recordings from being encrypted when they're saved to the Tivo's hard drive. These recordings can be transferred via MRV/TTG (assuming the CCI byte isn't set) or via tserver, msf_ftp, direct extraction, etc.

The problem comes into play when you have existing encrypted recordings that you want to transfer via MRV/TTG: with the NoCSO hack you cannot transfer these recordings (they don't play on the receiving end). The NoMEK hack prevents new recordings from being encrypted AND allows you to MRV/TTG existing encrypted recordings.
OK, what about transferring unencrypted recordings via MRV to an unhacked TiVo? Do both TiVos still have to be hacked, as would be the case with NoCSO? As I said, those of us on fully enabled CCI systems can't transfer encrypted recordings, no matter what.

psxboy
11-02-2010, 02:03 PM
OK, what about transferring unencrypted recordings via MRV to an unhacked TiVo? Do both TiVos still have to be hacked, as would be the case with NoCSO? As I said, those of us on fully enabled CCI systems can't transfer encrypted recordings, no matter what.

I don't know. All my Tivos are hacked and my cable company isn't insane. Why don't you try it & find out, then post your results here so others will know.

I just work here...
-psxboy

psxboy
11-02-2010, 02:56 PM
True, but it does affect whether the shows can be transferred. With NoCSO + CCI1,2,3, any recording made after the hack can be transferred between any two hacked TiVos, but nothing works if one of the TiVos is not hacked. For many of us, encrypted recordings are a moot question, since for us anything recorded prior to hacking is both CCI locked and encrypted, and nothing can be done about those recordings in any case.

I did some more digging to try to figure out your situation a little better. Judging from other posts of yours, it appears that all of your Tivos are of the S3 variety (S3/HD). According to this post by tivo4mevo (http://www.dealdatabase.com/forum/showthread.php?p=305795&postcount=4) native S3<>S3 transfers require that both Tivos either have the NoCSO patch or not. In your case, with one unhacked Tivo, it's the NoCSO patch that's preventing the transfer. What if you only apply the CCI patches? Can you then MRV the still-encrypted-but-not-CCI'd shows?



OK, what about transferring unencrypted recordings via MRV to an unhacked TiVo? Do both TiVos still have to be hacked, as would be the case with NoCSO? As I said, those of us on fully enabled CCI systems can't transfer encrypted recordings, no matter what.

I still don't know whether the NoMEK patch will allow this. You'll have to test it & let us know.

-psxboy

tivo4mevo
11-04-2010, 01:06 AM
OK, what about transferring unencrypted recordings via MRV to an unhacked TiVo? Do both TiVos still have to be hacked, as would be the case with NoCSO? As I said, those of us on fully enabled CCI systems can't transfer encrypted recordings, no matter what.An unhacked tivo cannot receive unencrypted video via MRV.

I can't find the post, but this has been covered before. The use of the patches is fairly simple: if all your units are hacked, then use the CCI patches in conjunction with either NoCSO or NoMEK (NoMEK being the better choice, as it prevents new recordings from being encrypted AND allows you to MRV existing encrypted recordings).

If not all your tivos are hacked, then you should just use the CCI patches and leave your videos encrypted. With just the CCI bits neutered, you're able to MRV your encrypted videos between hacked and unhacked boxes.

lrhorer
11-06-2010, 01:59 AM
An unhacked tivo cannot receive unencrypted video via MRV.

I can't find the post, but this has been covered before. The use of the patches is fairly simple: if all your units are hacked, then use the CCI patches in conjunction with either NoCSO or NoMEK (NoMEK being the better choice, as it prevents new recordings from being encrypted AND allows you to MRV existing encrypted recordings).
Except that, as I pointed out, the fact a recording is encrypted to all intents and purposes means it is also copy prohibited. There is nothing on any of my TiVos that is not copy protected unless it is also unencrypted, with the exception of PBS offerings.


If not all your tivos are hacked, then you should just use the CCI patches and leave your videos encrypted.
Then tserver won't work. TTG is far too slow, and I have not found any management tool that equals TyTool.


With just the CCI bits neutered, you're able to MRV your encrypted videos between hacked and unhacked boxes.
No, tserver is a lot more important to me than MRV. Every once in a great while I might like to MRV a show, but I can easily do without altogether.

lrhorer
11-06-2010, 02:10 AM
I did some more digging to try to figure out your situation a little better. Judging from other posts of yours, it appears that all of your Tivos are of the S3 variety (S3/HD).
Yes. (Well, I have an unsubbed S1, but that doesn't count.) I have one hacked THD, one hacked S3, and one unhacked S3.


According to this post by tivo4mevo (http://www.dealdatabase.com/forum/showthread.php?p=305795&postcount=4) native S3<>S3 transfers require that both Tivos either have the NoCSO patch or not. In your case, with one unhacked Tivo, it's the NoCSO patch that's preventing the transfer. What if you only apply the CCI patches? Can you then MRV the still-encrypted-but-not-CCI'd shows?

I still don't know whether the NoMEK patch will allow this. You'll have to test it & let us know.
To find out either one, I would have to partially unhack one of my hacked TiVos. I don't have any great enthusiasm for that at the moment. I know it is not too terribly difficult, though. If I get the urge, I'll do it and report back.

The other option would be to partially hack my unhacked TiVo. That's more appealing, but I'm not ready to do it yet. Indeed, the reason I am asking the question in the first place is because I am moving toward hacking the third TiVo, and I want to lay out my strategy before I start hacking.

tivo4mevo
11-07-2010, 04:57 PM
Then tserver won't work. TTG is far too slow, and I have not found any management tool that equals TyTool.Using TTG to extract a *.tts version should be as fast as tserver (link here (http://www.dealdatabase.com/forum/showthread.php?p=290697#post290697)). Regarding management tools, I can't help you.

psxboy
11-08-2010, 12:26 PM
No, tserver is a lot more important to me than MRV. Every once in a great while I might like to MRV a show, but I can easily do without altogether.

If you don't use TTG and you don't need to MRV, then the whole CCI/copy protection issue is moot. All of the extraction tools developed here (tserver, mfs_ftp, etc.) work directly with MFS and simply ignore the CCI value.

So basically, just use NoCSO on your hacked Tivos & be done with it. You won't be able to transfer anything to your unhacked Tivo anyway, so just hack it & apply NoCSO to it when you get around to it. The CCI byte only applies to transferring shows via TTG or MRV - so if you don't use either of those methods then just ignore it. Otherwise, apply the CCI hack too.

-psxboy

lrhorer
11-09-2010, 02:09 AM
Using TTG to extract a *.tts version should be as fast as tserver (link here (http://www.dealdatabase.com/forum/showthread.php?p=290697#post290697)). Regarding management tools, I can't help you.
If you will notice, I participated in that thread. To my knowledge, no one has yet produced a playable / editable stream that can be put back on the TiVo with a .tts transfer. Sans that, we're looking at about 15 Mbps.

lrhorer
11-09-2010, 02:21 AM
If you don't use TTG and you don't need to MRV, then the whole CCI/copy protection issue is moot. All of the extraction tools developed here (tserver, mfs_ftp, etc.) work directly with MFS and simply ignore the CCI value.
I'm well aware. Please re-read the sentence of mine you quoted in your reply. I very specifically said, "Every once in a great while I might like to MRV a show..." Thus, while I am not going to forego a CSO / MEK hack in favor of a CCI hack, I do want to investigate my easiest options that will allow me to MRV once in a while.


So basically, just use NoCSO on your hacked Tivos & be done with it. You won't be able to transfer anything to your unhacked Tivo anyway, so just hack it & apply NoCSO to it when you get around to it.
It's not quite that simple. The heretofore unhacked unit in question is unhacked for a very particular reason. My physical condition makes accessing that unit very difficult and painful. Nonetheless, there is some value over and above but also including MRV in hacking the unit. The other two units I can very easily access, and re-hacking them every few months is no big deal.


The CCI byte only applies to transferring shows via TTG or MRV - so if you don't use either of those methods then just ignore it. Otherwise, apply the CCI hack too.
Yes, I know. The question at hand (which has now been answered) was, "Having done so, will No_MEK or any other hack allow me to MRV to the unhacked TiVo?"

Offspring2099
01-10-2011, 03:00 PM
11.0j
echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1914172
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3619532
echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7943644
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2451952
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2451988
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14164304
echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=7961760


(i dont use the patches below only above)
echo -ne "\x00\x00\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=4619932
echo -ne "\x10\x00\x00\x03" | dd conv=notrunc of=tivoapp bs=1 seek=6015576

no encr.
backdoor
30sec skip
cci1
cci2
cci3
nopause
nopromos

nopromos
deletehis

What are the nopause and nopromos patches? Are promos those annoying ads that come up in the upper right corner? I'm still on one of the first 11 versions, so I'm assuming nopause was for something annoying that came out in later versions?

psxboy
01-10-2011, 03:29 PM
The nopause patch gets rid of the ads that appear when you pause a recording. (I'm otherwise very tolerant of ads but those ones just grate my nerves for some reason.)

The nopromos patch gets rid of the star ads on the Tivo main menu. But it also causes problems the Video on Demand menu causing it not to work, so it's not advisable to use it.

-psxboy

Offspring2099
01-10-2011, 04:12 PM
Awesome. Thanks.

I just updated to 11j, and saw the pause ads, those indeed are annoying. All patches seem to be working but 30sec skip. Maybe I'm forgetting something, but is it the same feature as this -> http://www.weaknees.com/30/
For some reason on live shows in the buffer, when I press http://www.weaknees.com/images/skip.gif button, I just get taken to the front or the back of the buffered recording.

Thinkdiff
01-11-2011, 02:21 AM
Awesome. Thanks.

I just updated to 11j, and saw the pause ads, those indeed are annoying. All patches seem to be working but 30sec skip. Maybe I'm forgetting something, but is it the same feature as this -> http://www.weaknees.com/30/
For some reason on live shows in the buffer, when I press http://www.weaknees.com/images/skip.gif button, I just get taken to the front or the back of the buffered recording.

If you had already activated 30-sec-skip using the remote control macro (SPS-3-0-S) and then apply the tivoapp patch afterwards, I believe it reverts back to the default Skip function. You'll have to re-enter the SPS-3-0-S command to reactivate 30 second skip. It'll stay active across reboots.

Offspring2099
01-11-2011, 04:38 AM
Thanks, all is working.

psxboy
01-14-2011, 05:33 PM
For non-Australian Tivos the 30-second skip patch is irrelevant. In the past you had to enable it with the SPS30S remote sequence every time the box was rebooted, so the patch was used to set the state to "enabled" by default. Now, once you enable it with the remote it stays enabled across reboots and software upgrades. (The state is probably stored somewhere in MFS now.)

On Australian Tivos the SPS30S remote sequence doesn't work at all. (Local law?) So the patch is required to enable it on those boxes.

Just FYI...
-psxboy