Search:

Type: Posts; User: tivo4mevo

Page 1 of 3 1 2 3

Search: Search took 0.01 seconds.

  1. Replies
    3
    Views
    3,063

    Have you looked at this thread? ...

    Have you looked at this thread? http://www.dealdatabase.com/forum/showthread.php?27553-Mips-disassembler-v0-1

    Otherwise, some folks have luck with IDA.
  2. Replies
    2
    Views
    930

    AlphaWolf is correct, no one has released a...

    AlphaWolf is correct, no one has released a software or hardware exploit for the Roamio (or any later tivo for that matter).

    Regarding SHA-1 though, Google's SHAttered proof of concept doesn't...
  3. My knowledge of tivoapp focused on the specific...

    My knowledge of tivoapp focused on the specific patches and more generally tivo's underlying security subsystem. Series 3 units have been marooned with an 11.x tivoapp for years now, while s4 and up...
  4. Replies
    1
    Views
    4,177

    No, according to my notes 11.0m is different. ...

    No, according to my notes 11.0m is different. psxboy posted the patches here: http://www.dealdatabase.com/forum/showthread.php?67566-new-sw&p=317574#post317574

    Hope this helps.
  5. Replies
    15
    Views
    27,336

    This has been examined, and tivo paid attention...

    This has been examined, and tivo paid attention to the env vars after Tiger's BASH_ENV exploit. The linuxrc in the initrd checks the entire root filesystem for any unrecognized files (comparing them...
  6. Replies
    15
    Views
    27,336

    Tivo implemented env var whitelisting; however,...

    Tivo implemented env var whitelisting; however, my memory is a bit fuzzy where that occurred (Boot Flash/PROM, kernel, or initrd linuxrc) and exactly when that occurred. You can find the whitelisted...
  7. Replies
    15
    Views
    27,336

    The StageC NetworkKickstart.sh has a if [...

    The StageC NetworkKickstart.sh has a
    if [ $do_stageC_kickstart -eq 1 ] ; then line, and that environment variable is only set in the StageA CheckForPanic script (which sets the panic code by...
  8. Replies
    15
    Views
    27,336

    I looked at this after reading your suggestion. ...

    I looked at this after reading your suggestion. While one can either use a kickstart code or set a flag in /State/Database (as setzaprequestfactoryreset.tcl does) to kick off an MFS operation (e.g.,...
  9. Replies
    15
    Views
    27,336

    For premiere's and earlier, this is true in...

    For premiere's and earlier, this is true in theory. However, Series 5 units have their root filesystems stored on internal Flash, not on the harddisk. Once a mini or roamio unit takes the 20.4.5...
  10. Replies
    15
    Views
    27,336

    Shellshock and Tivo

    Tivo has closed the shellshock vulnerability in the new 20.4.5 software release. So before you upgrade, you may wish to use this vulnerability to get a shell on your tivo and poke around a bit. ...
  11. If you're trying to expand a single premiere...

    If you're trying to expand a single premiere drive beyond 2TB, I'll have to check to see where these tools stand.
  12. Replies
    2
    Views
    12,305

    I don't think there's a good way to do this on a...

    I don't think there's a good way to do this on a Series3 as the only access to the live stream (that I can recall) was to the files as written to disk. The "LiveCache recordings" are problematic as...
  13. Excellent point, one can use TiVo Desktop or some...

    Excellent point, one can use TiVo Desktop or some other TiVo Desktop solution (like kmttg) to extract shows from each unit, and then upload them to the other.
  14. You've run into a tricky problem, as your...

    You've run into a tricky problem, as your premiere isn't hacked, it generates an "Error #86" when it's acting as an MRV client and attempting to receive an unencrypted video from your hacked Series 3...
  15. I don't think there would be any downside for the...

    I don't think there would be any downside for the old Series 2 Combo units other than perhaps increased boot time.
  16. Thread: new sw

    by tivo4mevo
    Replies
    45
    Views
    27,596

    If you are referring to this patch: link...

    If you are referring to this patch: link, then I think tivo made some changes to the code that caused that patch (when ported to newer software) to cause crashes (my notes have it as valid for 11.0d,...
  17. Replies
    3
    Views
    987

    For what it's worth, I took a quick look at some...

    For what it's worth, I took a quick look at some old 6.3c brfs I had lying around. It looked to me that ui/TivoCentral/TivoCentral.brf had the menu names present ("Now Playing List", "Watch Live...
  18. Replies
    3
    Views
    987

    You haven't said what version of software you're...

    You haven't said what version of software you're working with, but chances are that menu item name is contained in a BRF file. So I'd start there.
  19. No, it won't brick the unit. If you can revert...

    No, it won't brick the unit. If you can revert tivoapp it should boot (assuming you haven't modified any other files). At worst you might need to reimage the drive.
  20. Replies
    210
    Views
    215,920

    Something akin to this: link...

    Something akin to this: link could fit inside a premiere. It would need to be reprogrammed to redirect SATA reads after a specific amount of time (that time falling between the two presumed reads of...
  21. Replies
    210
    Views
    215,920

    You've seen bkdtv's review, I presume? It...

    You've seen bkdtv's review, I presume? It provides a nice hardware baseline, so it's a starting point. Link: here.
  22. Replies
    210
    Views
    215,920

    Yes, that's a hazard of the message board versus...

    Yes, that's a hazard of the message board versus wiki, you find yourself poring over conversations germane only to exploiting software 4.0.1b with an lba48 aware kernel and the proper uma6fix to work...
  23. Replies
    210
    Views
    215,920

    Yea, I thought a bit more about a sata injection...

    Yea, I thought a bit more about a sata injection device, and even assuming some sort of inexpensive, embedded device to sit between the tivo and drive (similar to an Arduino), one would have to write...
  24. Replies
    210
    Views
    215,920

    Another approach would be some sort of sata...

    Another approach would be some sort of sata injection device (or computer). It would sit between the tivo and the hard disk. When the BSP code checks the kernel, the device supplies a valid kernel....
  25. Replies
    210
    Views
    215,920

    No disagreement on your points. The board...

    No disagreement on your points. The board facilitates discussion, but is not as good a repository. I believe there was a tivo wiki hosted elsewhere at one point, though unfortunately I don't have a...
  26. Replies
    210
    Views
    215,920

    This thread has the most information. Post any...

    This thread has the most information. Post any other questions you have here, and collectively folks can chime in with available information.
  27. Replies
    2
    Views
    2,011

    I believe that the direct extraction thread...

    I believe that the direct extraction thread (link: here) should still be valid.

    That said, I can't recall if I've ever directly extracted myself.

    In answer to your other question, given that...
  28. Replies
    13
    Views
    15,003

    I'm not a member of slashdot. I tried to search...

    I'm not a member of slashdot. I tried to search for the article/presentation, but had no luck finding it again. I can't even remember the device they were attacking, unfortunately.
  29. Excellent point, Dave20042004. You could...

    Excellent point, Dave20042004. You could alternatively add the rubbishing to 51killer to create a new, "prep drive for imaging" script. But that might be overkill, as your directions are clear as...
  30. No problem. #3 can take a fair amount of time...

    No problem. #3 can take a fair amount of time (e.g., hours). I think that the garbage collection isn't strictly needed so long as Rubbishing completed successfully.

    If I'm correctly about that,...
  31. The MFS partitions are always writable, even if...

    The MFS partitions are always writable, even if the root partition is mounted r/o. You may want to try kicking off garbage collection after rubbishing the objects, as they should no longer appear in...
  32. I assume you're using the updated version of...

    I assume you're using the updated version of 51Killer (as you posted in that thread: link). You might try rubbishing the objects in /State/Keyring. I believe that in the newer software, old keys...
  33. Replies
    13
    Views
    15,003

    This could work. I saw on slashdot some time...

    This could work. I saw on slashdot some time ago, a conference presentation of an Arduino based device (I believe) to sit between a SATA device and the victim, and it would alter a file accessed...
  34. I believe that the "type" of the partition...

    I believe that the "type" of the partition reflected in the apple partition map doesn't really matter (the tivo software won't care), but most just set the type to match what tivo (and mfs-tools)...
  35. Replies
    7
    Views
    6,578

    Tivo enabled dual-core with sw 14.9.x, so you...

    Tivo enabled dual-core with sw 14.9.x, so you should be running with both cores active. That said, I agree that the HDUI is still not "snappy" on the premiere hardware.
  36. Replies
    13
    Views
    15,003

    Thanks. I understood, but might not have...

    Thanks. I understood, but might not have provided enough background. This thread here (link) might be worth a re-read. But the short version is that the "PROM" code (i.e., the boot-loader code...
  37. Aside from MFS schema updates, the guide data...

    Aside from MFS schema updates, the guide data remains unchanged, I believe.

    I should have noted that the OzTivo emulator was shuttered in preparation for the DVB TiVoHD, but could probably be...
  38. All good questions, but ones that aren't allowed...

    All good questions, but ones that aren't allowed for discussion here. This exact thing happened in the UK for the original Series1 UK units when the new VirginMedia (s4-based) tivo was released. ...
  39. Replies
    13
    Views
    15,003

    The trouble is that the buffer over run flaw you...

    The trouble is that the buffer over run flaw you seek would need to be in the Broadcom Security Processor (bsp) of the tivo's CPU, as a vulnerability in the tivo "boot sector" (code that prior to the...
  40. Replies
    4
    Views
    2,289

    Nice work chasing those down!

    Nice work chasing those down!
  41. Replies
    1,761
    Views
    990,677

    Sticky: Off topic area for this question, but 51Killer...

    Off topic area for this question, but 51Killer allows you to move a hacked drive to a similar model tivo, and still be able to playback the videos. When restoring a backup image from another box,...
  42. What sort of help are you looking for: From...

    What sort of help are you looking for:

    From memory, pdisk (run from a linux PC, with the tivo drive attached as /dev/sdb) would be "pdisk /dev/sdb", once in the interactive mode, you can then do...
  43. Replies
    41
    Views
    44,325

    This is because the lines you added above start...

    This is because the lines you added above start only telnet and ftp, and I believe that you also desire to have bash running on the serial port. In which case, you need to add something like this ...
  44. Replies
    61
    Views
    34,970

    I don't know whether or not you could use the...

    I don't know whether or not you could use the crypto chip trick to clone the TSN. If you just need to know the zip code that the device last called from, you could hook up the drive to a PC, and...
  45. Replies
    11
    Views
    11,315

    Red_Dog might be able to provide a better answer...

    Red_Dog might be able to provide a better answer than I, as the last time I rummaged around the disassembly was in 2008. You might want to look at si9190test first, as I think that utility offered...
  46. Replies
    3
    Views
    591

    The "Error 51" arises when you move a drive from...

    The "Error 51" arises when you move a drive from one unit to another (which is effectively what you've done when you've restored an image from another, albeit similar, tivo). If your unit is hacked,...
  47. I also get a sha1sum of...

    I also get a sha1sum of 118a7c7799ef20d04dd699387d6f91f6d47905e6 on a stock 11.0k tivoapp, so that seems to confirm your running 11.0k (at least the filesystem of it).
  48. Earlier versions of 11.x also had the...

    Earlier versions of 11.x also had the "SwedishChef" as the process name when launched by the tivoApplicationLauncher. I forget which version that began with. *edit* looks like it began with version...
  49. Replies
    200
    Views
    131,192

    Just going off memory, so this could be wrong,...

    Just going off memory, so this could be wrong, but I think that software 6.3e and later bundled the DHCP client into tivoapp. Thus, if you weren't using a killinitrd 6.3e+ kernel as your chainload...
  50. Based on this thread here: link...

    Based on this thread here: link. It appears that MFSLive can do what you want.

    There are other more manual methods, but this is probably the best.
  51. Thread: Wtf???

    by tivo4mevo
    Replies
    8
    Views
    11,124

    I too was hoping to see the new directivo renew...

    I too was hoping to see the new directivo renew interest.
  52. Replies
    5
    Views
    3,469

    Ah, thanks for the clarification regarding the...

    Ah, thanks for the clarification regarding the TIVO_SCHEMA environment variable. I had encountered the script to dump the current schema, but didn't realize that it could be read at runtime (and had...
  53. Replies
    5
    Views
    3,469

    Yes, effectively they are hardcoded. mfs_dumpobj...

    Yes, effectively they are hardcoded. mfs_dumpobj was compiled with what is now, an older (fixed) version of the MFS schema, so it doesn't recognize newer MFS types. I forget if TiVoWebPlus is the...
  54. Replies
    210
    Views
    215,920

    I'll speculate no, based upon the inability to...

    I'll speculate no, based upon the inability to successfully run a TiVoHD XL image on a TiVoHD (see this post here: link). IIRC, the image would appear to work, but unit would run out of guidedata...
  55. Replies
    5
    Views
    3,469

    Yes, the script just needed a tweak (which...

    Yes, the script just needed a tweak (which evidently I had made back in 2009 but never posted for some reason).

    See this thread (link) for the updated script.
  56. Updated version of 51Killer for 11.x+ software

    As jt1134 may no longer be active, attached is a slight revision of the script to work with on all current tivos (including 11.x+).

    Tivo introduced an extra DCKey named DBSOffset into the software...
  57. Replies
    49
    Views
    40,737

    Though slightly off topic, you're correct. You...

    Though slightly off topic, you're correct. You can easily "unhack" a drive in the manner you describe: first making an image of the active root partition (/dev/hda4|7) prior to hacking, hacking the...
  58. Replies
    49
    Views
    40,737

    It's been a long time since I've looked at this,...

    It's been a long time since I've looked at this, but the third approach I postulated: was something of a hack.

    But essentially, you modify the script enough to have multiple QAM-mapped headends...
  59. Kudos on the impressive work! I like that you...

    Kudos on the impressive work! I like that you co-opt the NPL to display the information.
  60. Replies
    16
    Views
    19,403

    Thanks for the link, much clearer now. This...

    Thanks for the link, much clearer now.

    This could be a pernicious bug. If tivo hasn't fixed it (evidently) in more than two years, a hack to fix it might not be trivial.

    To boot without...
  61. Replies
    16
    Views
    19,403

    You didn't say what version of software your...

    You didn't say what version of software your TivoHD is running.

    Perhaps MFS is clogged with cruft? Have you tried booting without running TvLauncher (i.e. through etc/rc.d/StageE so that mfsd is...
  62. Replies
    16
    Views
    19,403

    Something's amiss with your tivo. You shouldn't...

    Something's amiss with your tivo. You shouldn't need to manually force loading and indexing. Are you holding your unit back at an earlier software version. You may need to let it upgrade or to...
  63. Replies
    3
    Views
    6,337

    Search the forums for "CCI" and you should find...

    Search the forums for "CCI" and you should find what you're looking for.

    It's not for the faint of heart. On Series 3 units, it requires desoldering the PROM, reprogramming it, and then soldering...
  64. Replies
    7
    Views
    6,702

    As psxboy points out this has been covered...

    As psxboy points out this has been covered before.

    The process to extract CPI/CCI protected recordings using TTG is:

    hack your unit,
    apply the "ignoredrmsig" patches (patches are specific to...
  65. Replies
    3
    Views
    3,423

    The recorded shows metadata lives in the MFS...

    The recorded shows metadata lives in the MFS application partition while the video (streams) themselves live in the media partition. So copying over the root filesystem (partition 4) and the kernel...
  66. Replies
    3
    Views
    3,423

    It's unclear to me whether you have access to a...

    It's unclear to me whether you have access to a Linux system (or Linux boot disk like MFSlive.org) capable of directly accessing the drive from your PC, but I would wager that the simplest thing...
  67. I believe I built a "small" standalone image...

    I believe I built a "small" standalone image once, but the other option would be to install the needed standalone slices so as to be able to upgrade the 62small.mfs to the SA 9.3.2b software.

    The...
  68. Replies
    2
    Views
    1,092

    It's been a while, but there is a tvbus client...

    It's been a while, but there is a tvbus client that registers to receive remote events on behalf of HME applications.

    You can look at the sendkeyplus code for the details. "HmeHost" or...
  69. 51killer.tcl is not required.

    51killer.tcl is not required.
  70. psxboy is correct. RemoveDrmAll.tcl does this...

    psxboy is correct.

    RemoveDrmAll.tcl does this on line 53
    dbobj $drm_part remove MediaEncryptionKeywhich wiped out the encryption keys for your shows. Hence the tivo can't play them back now. If...
  71. Replies
    9
    Views
    8,147

    From that thread: With the purpose being to allow...

    From that thread: With the purpose being to allow you to move a drive between units and preserve the recordings.

    A side effect of those patches might be to allow manipulation of a recording's MFS...
  72. Replies
    6
    Views
    4,515

    I was mistaken about 2), it wasn't a limitation...

    I was mistaken about 2), it wasn't a limitation of tivoapp, but of the Apple Partition Map (APM). From its wikipedia page: So that's a per disk limitation. I believe that MFSlive (and potentially...
  73. Replies
    6
    Views
    4,515

    With a stock kernel, you're limited to the...

    With a stock kernel, you're limited to the starting size of the drive plus an expansion of up to 1TiB (reference here: link). Thus (my math might be slightly off)

    Series 3: 250GB + 1TiB = ~1.3GB...
  74. Replies
    388
    Views
    211,338

    Hello nosignal. I don't think a PROM mod is...

    Hello nosignal. I don't think a PROM mod is needed for what you wish to accomplish.


    1. There's a built-in tivo remote "backdoor" code: SPS30S (URL describing this here: link)
    2. This can be...
  75. Replies
    210
    Views
    215,920

    Yes, there is a trick for your kernel to...

    Yes, there is a trick for your kernel to recognize the partitions on a tivo drive: tivopart.

    See this thread for a recent discussion and details: link
  76. Replies
    79
    Views
    43,300

    Typically, it does not matter if you superpatch...

    Typically, it does not matter if you superpatch tivoapp before or after the reboot. It's best to patch before you reboot, in case you've made modifications that depend upon patches (e.g.,...
  77. Replies
    52
    Views
    20,718

    Using TTG to extract a *.tts version should be as...

    Using TTG to extract a *.tts version should be as fast as tserver (link here). Regarding management tools, I can't help you.
  78. Replies
    52
    Views
    20,718

    An unhacked tivo cannot receive unencrypted video...

    An unhacked tivo cannot receive unencrypted video via MRV.

    I can't find the post, but this has been covered before. The use of the patches is fairly simple: if all your units are hacked, then use...
  79. The thread regarding the S4 expansion isn't...

    The thread regarding the S4 expansion isn't germane beyond the general concepts of tivo/MFS partitioning being discussed.

    I concur with mike_s, by having the MFS media and application partitions...
  80. Replies
    36
    Views
    16,049

    Perhaps recent software versions with more...

    Perhaps recent software versions with more advertisements (like those that appear with the "Delete This Recording?" screen) cause this patch to now have undesirable consequences.
  81. Some more recent 11.0x ports added to the post...

    Some more recent 11.0x ports added to the post here
  82. Replies
    14
    Views
    4,139

    Is the FrameChannel an actual software update? ...

    Is the FrameChannel an actual software update? Or is just another provider accessible through the "video on demand" HME UI? I was under the impression that it was the latter, but I haven't looked...
  83. Replies
    49
    Views
    40,737

    There isn't anything that prevents you from doing...

    There isn't anything that prevents you from doing this, but you'll need to modify the script.

    The Provider and Lineup from which the mapped channels draw their guide data are set just after the...
  84. Thread: grabpkg

    by tivo4mevo
    Replies
    10
    Views
    3,891

    I would be interested in a tweaked grabpkg (that...

    I would be interested in a tweaked grabpkg (that can dynamically find the sys_call_table). Do you still have this available?
  85. Replies
    78
    Views
    32,665

    Do those patches actually work? I saw you posted...

    Do those patches actually work? I saw you posted that they were causing reboots? But wasn't sure where it went from there.
  86. Replies
    78
    Views
    32,665

    More recent port of the patch in this thread...

    More recent port of the patch in this thread here: link. The code structure between 9.4 and 11.0x should be largely the same (it was a much bigger jump porting the patch from 4.x to 9.4, which still...
  87. Replies
    210
    Views
    215,920

    Good points, though regarding the point about...

    Good points, though regarding the point about tivo not having a lot to protect, I thought saw mention that the S4 was to be fielded by some cable manufacturers. Who presumably would want assurances...
  88. Replies
    210
    Views
    215,920

    bsptest doesn't check the Flash boot partition...

    bsptest doesn't check the Flash boot partition signature, bsptest checks that secure boot is enabled and the debug interface is locked (based upon bsptest errors and the rc.sysinit notes).

    Errors:...
  89. Replies
    7
    Views
    3,713

    The series2 units (combo units included) had...

    The series2 units (combo units included) had 2.4.18 kernels that lacked lba48, necessitating custom kernels (with lba48 support) to utilize drives larger than 128GiB (details and a representative...
  90. Replies
    210
    Views
    215,920

    Based upon the OTP bits described in the Flash...

    Based upon the OTP bits described in the Flash data sheet, the boot code is likely locked.
  91. Replies
    78
    Views
    32,665

    See this thread (link...

    See this thread (link) and this thread (link) for information. Typically, the guide data problems crop up between major releases but not always. One should also be aware not to continually download...
  92. Replies
    78
    Views
    32,665

    Post on TCF here:...

    Post on TCF here: http://www.tivocommunity.com/tivo-vb/showthread.php?p=7833681#post7833681 indicates that 11.0f is intended to the fix the Tuning Adapter MRV bug. Not sure if any other fixes are...
  93. Replies
    11
    Views
    11,315

    Nice polish!

    Nice polish!
  94. Replies
    2
    Views
    1,524

    You don't say whether the hacked unit is a S2 or...

    You don't say whether the hacked unit is a S2 or S3, but if it's an S3, then you just need to be sure that you're not running the full superpatch on the S3 unit. See more original superpatch...
  95. Replies
    7
    Views
    6,578

    No, not yet. 11.0d is the current software...

    No, not yet.

    11.0d is the current software version for Series 3 units.
  96. I think you'd need a relatively "fresh" XL image...

    I think you'd need a relatively "fresh" XL image (i.e., backup made before running the unit in earnest) to ensure the loaded loopset slices receive low FSIDs.

    But to understand, after loading the...
  97. Replies
    8
    Views
    4,579

    If you haven't done so already, it's probably...

    If you haven't done so already, it's probably worth attempting to download directly from tivo's https interface using a browser. Though this still invokes TTG on the tivo, it sidesteps TiVoDesktop,...
  98. Replies
    7
    Views
    4,914

    It would be ideal if the NoCSO patch allowed MRV...

    It would be ideal if the NoCSO patch allowed MRV transfers of encrypted shows. I'm not the author of the patch, so I don't know how difficult such a refinement would be (or if it's even possible).
    ...
  99. Replies
    7
    Views
    4,914

    Judging by philhu's posts here...

    Judging by philhu's posts here and here, one can assume his question refers to native S3 MRV transfers.

    So to elaborate upon what Jamie wrote, with NoCSO and the superpatch applied, one should...
  100. That patch applies to both. The S3 and THD...

    That patch applies to both. The S3 and THD tivoapps are identical in the 11.x line.

    In general, tivoapps will be identical except for two circumstances: legacy hardware and new hardware.
    ...
  101. The Intel Pro/100B is one NIC that can flash...

    The Intel Pro/100B is one NIC that can flash SST39's.

    You can find more discussion and details in the PROM socketing thread: link
  102. Replies
    130
    Views
    137,167

    Cool patches!

    Cool patches!
  103. I believe that jkozee posted a patch for the...

    I believe that jkozee posted a patch for the NpkChannelDefinition issue, but it still takes a little while for the season pass to kick in (unless you poke it by fiddling with some other season pass)....
  104. Neat patches. Here they are for 7.2.2-oth ...

    Neat patches.

    Here they are for 7.2.2-oth

    VMA previous new Patch function
    0x00483408 0c1294bf 00001021 -remove TVGuide logo from guide screen
    0x004c21fc 0c1294bf 00001021...
  105. Replies
    125
    Views
    85,874

    You're correct that hacking related to guide data...

    You're correct that hacking related to guide data isn't discussed here.

    If no one has a *.proc file for your specific tivoapp, you may be able to obtain a tivoapp for which the proc file has...
  106. Replies
    125
    Views
    85,874

    There were never very many folks producing *.proc...

    There were never very many folks producing *.proc files to begin with, and the versions that you're asking for are circa 2005 (and 6.1 is for a combo box). So I'm not sure how much of a response...
  107. Replies
    122
    Views
    49,169

    I believe that the parsing of IDL files was...

    I believe that the parsing of IDL files was obsoleted by tivo building a parser directly into tivosh (the tvidl command appeared with software version 6.3x/7.x).

    Here's a recent post discussing...
  108. Thread: crypto -gmc

    by tivo4mevo
    Replies
    1
    Views
    1,594

    I've not seen any reports of this being sighted...

    I've not seen any reports of this being sighted in the wild, and I'm not aware of any modern tivoapp procedures that make use of this.

    Tracing the lineage, these options appeared in crypto roughly...
  109. Replies
    20
    Views
    12,256

    Not that I'm aware of, though I thought that...

    Not that I'm aware of, though I thought that mfs_ftp should still be able to pull the (scrambled) shows off. Perhaps others, more knowledgable can comment more.

    All three of these options draw...
  110. Replies
    20
    Views
    12,256

    You have it correct. The so called "NoCSO" patch...

    You have it correct. The so called "NoCSO" patch is distinct from the "CCI" patches as they serve different purposes.

    Have you tried removing the patch to see? ;) but yes that's correct.

    I...
  111. Replies
    6
    Views
    4,003

    Cool getprom patches, jt. If the goal is to...

    Cool getprom patches, jt.

    If the goal is to lower the profile of hacked units, then correcting the PROM checksum after patching it would go along way as it would prevent logging of the error...
  112. Replies
    27
    Views
    23,435

    I believe that the publicly available PROM...

    I believe that the publicly available PROM patches/versions skip neither the SHA-1 PROM checksum nor the verification of the kernel signature.
  113. Assuming you have cron installed echo "0 * * *...

    Assuming you have cron installed

    echo "0 * * * * /path/to/mike_s's/More_About_script.tcl" >> /var/spool/cron/crontabs/root
  114. Ciper was experimenting with this, though I don't...

    Ciper was experimenting with this, though I don't know how far he got.

    Creating loopset slices is non-trivial; it would probably be easier to forge loopset objects to point to the XL's loopsets.
  115. Assuming that the recordings are unscrambled, any...

    Assuming that the recordings are unscrambled, any idea whether s3tots would work with an x-tivo-raw-tts file?

    i.e., one downloaded in this fashion: http://...
  116. Replies
    6
    Views
    5,265

    When you say that you can't send keystrokes with...

    When you say that you can't send keystrokes with sendkeyplus (skp), do you mean that trickeyplus (tkp) doesn't detect keystrokes sent by skp? Or do you mean that the tivo does not receive skp's...
  117. Replies
    3
    Views
    2,943

    The slice files for the new software should be in...

    The slice files for the new software should be in MFS. You can extract all but the swsystem slice using TWP, but GZCore is the slice with most filesystem executables. See here: link

    You can also...
  118. Replies
    58
    Views
    47,942

    An alternate approach might patch around the...

    An alternate approach might patch around the checks in the httpd server. TTG then does the work of decrypting the on-disk encrypted recording and exporting it as a *.tivo file (which can be...
  119. Replies
    1,761
    Views
    990,677

    Sticky: I found this via a Yahoo search, so I can't vouch...

    I found this via a Yahoo search, so I can't vouch for it.

    http://www.rednex.net/Downloads/Utilities/TiVoDesktop2.3a.exe
  120. Replies
    8
    Views
    12,128

    I've not used IDA much, so I can't say...

    I've not used IDA much, so I can't say definitively what it might be capable of, but you can see the base load address of each dynamic library on which tivoapp depends in the backtrace resulting from...
  121. Replies
    58
    Views
    47,942

    Good testing. While you don't state it...

    Good testing.

    While you don't state it explicitly, am I correct that your MRV observations are based on S3 native transfer (S3<->S3)?

    Are there any messages logged when you see the...
  122. Does the hacked unit have backdoors enabled? Or...

    Does the hacked unit have backdoors enabled? Or do you need that patch too?

    If you have backdoors enabled, what does the spigot information UI report?
  123. Looks like the tivoapps are slightly different.

    Looks like the tivoapps are slightly different.
  124. Replies
    49
    Views
    40,737

    Thanks, ciper. I had come across those scripts...

    Thanks, ciper. I had come across those scripts as some point in the past, and collectively, they help explain some of the MFS structure for channels, lineups, and headends.

    What type of...
  125. Replies
    2
    Views
    1,074

    TiVo included what they call "TCP Remote" in...

    TiVo included what they call "TCP Remote" in version 9.1, and this can be used to remotely control tivo units. Read more here, including a link to some handy client software maintained on TCF. I...
  126. Replies
    40
    Views
    22,053

    You may also want to read through this thread:...

    You may also want to read through this thread: (link) as well.

    You can skip over the PROM socketing part, but the remainder of the thread nicely lays out the steps required to hack the software.
  127. Replies
    41
    Views
    44,325

    You can pull the drive and modify the bootpage...

    You can pull the drive and modify the bootpage without tinkering with the kernel. I believe that a stock kernel will still honor that bootpage setting (dsscon).
  128. Replies
    8
    Views
    3,547

    Great post! This works for a many other values...

    Great post! This works for a many other values stored in MFS.


    % tvidl dbtotext 0 {53 50344978 2073756160 -483896316 620756992 0 16777216 419430400 65536 285736960 640985883 5796085 16777216...
  129. Replies
    41
    Views
    17,934

    Updated to version 1.1, which allows operation...

    Updated to version 1.1, which allows operation when running HME applications.
  130. Replies
    33
    Views
    12,887

    To quickly clarify, routerplus doesn't crash, but...

    To quickly clarify, routerplus doesn't crash, but using routerplus to drop/modify messages can cause tivoapp to crash.

    I don't have /MenuItem MFS values handy, but most times are stored in MFS as...
  131. Replies
    33
    Views
    12,887

    Yes, nice work. Good job on exploring things...

    Yes, nice work.

    Good job on exploring things through Routerplus, rather than just disassembly. Making your routerplus application more selective by inspecting the TvPvrMenuItemInfoResponse's...
  132. Replies
    33
    Views
    12,887

    I edited my initial post, as I think that I was...

    I edited my initial post, as I think that I was barking up the wrong tree with the promos. You are right to try to correlate observed log messages with the tivoapp strings.

    I did a bit more...
  133. Replies
    33
    Views
    12,887

    To my knowledge, the patch to disable "yellow...

    To my knowledge, the patch to disable "yellow stars" has not been carried forward and posted.

    Either IDA or the tmesis post processor will allow you to inspect the disassembly. However, the code...
  134. Replies
    49
    Views
    40,737

    I don't entirely understand what you're trying to...

    I don't entirely understand what you're trying to do, but if you wanted to map a given clear-QAM channel to guidedata from a non-OTA channel you could modify these values to draw from a different...
  135. Replies
    7
    Views
    4,045

    The killhdinit kernel goes into partition 3 or 6,...

    The killhdinit kernel goes into partition 3 or 6, while the target kernel (which you "monte" or chainload into) is typically put into a directory in the root filesystem (/chainload, /monte, or some...
  136. Replies
    21
    Views
    5,554

    You should be able to continue to use the same...

    You should be able to continue to use the same killhdinit'ed kernel you were using with 6.2, though you may need a new target kernel (to chainload into) for 6.4a.

    This is covered in more detail...
  137. Replies
    21
    Views
    5,554

    I was under the impression that pytivo (or at...

    I was under the impression that pytivo (or at least the video portion) would not work with dtivo software version 6.3/6.4 because both MRV and TTG/TTCB were stripped out?

    MovieLoader can initiate...
  138. Replies
    6
    Views
    5,265

    Perhaps more fanfare was needed? :) I...

    Perhaps more fanfare was needed? :)

    I actually wrote trickeyplus in response to the wake-on-lan discussion: link, but I've also used trickeyplus with RedDog's zoom-mode script for the HR10-250...
  139. Replies
    15
    Views
    4,546

    Now it's clear. You're correct about the -321...

    Now it's clear.

    You're correct about the -321 and -121, and you have the slices you need already present. You won't see "6.4a-01-2-321..." present in MFS as tivo consolidated software versions...
  140. Replies
    15
    Views
    4,546

    131adb456e5bbef2aa153c4c7b59ae58...

    131adb456e5bbef2aa153c4c7b59ae58 *GZcore-127004584-2.slice.gz
    2a95a4c4bac5f90c24540c8da7001d6e *GZhpk-Gen04-127004592-2.slice.gz
    683f43afad6eb53d8ead365f4aafbeba *GZhpk-Series2-127004588-2.slice.gz...
  141. Replies
    15
    Views
    4,546

    True, though more generally, the new software...

    True, though more generally, the new software version might fail to appear in /SwSystem because some other portion is missing.

    The DTV Loopsets were included with a 6.2 slices, which were...
  142. Replies
    15
    Views
    4,546

    Are you sure that you're loading the correct sw...

    Are you sure that you're loading the correct sw slices for your model? What leads you to believe that a loopset slice is required?

    I thought that DVRUpgrade was hosting the 6.4a slices for all...
  143. Replies
    49
    Views
    40,737

    I've received permission to post the attached...

    I've received permission to post the attached map_qam.tcl script (below). If you appropriately modify the "userMapArray" on line 45 and then run this script, it will create a clear QAM lineup...
  144. Replies
    6
    Views
    2,110

    There are actually two kernels that you'll need...

    There are actually two kernels that you'll need (and all the kernels discussed here are ultimately built from linux 2.4.20 source; so to distinguish, the kernels are referred to by their...
  145. Replies
    6
    Views
    2,110

    a) Yes, you will have to hack it to get USB...

    a) Yes, you will have to hack it to get USB networking to work.
    b) You need not upgrade sequentially, you can upgrade from 6.3c to 6.4a. If you can't get a phone connection to work (you mentioned...
  146. Replies
    130
    Views
    137,167

    To echo what jt said, I think you'll have trouble...

    To echo what jt said, I think you'll have trouble by trying to port the patch using a hex editor.

    With the disasssembly, you can match the strings (which have remained largely the same)...
  147. Replies
    130
    Views
    137,167

    Delete this Recording? Patch

    This patch suppresses the "Delete this recording?" screen encountered when exiting a recording within the last six minutes.



    All Values are Hex

    Sw Version Offset (VMA) Original...
  148. Replies
    7
    Views
    3,098

    This page here...

    This page here seems to lay out the necessary steps as well as providing scripts for the various pieces.
  149. Replies
    388
    Views
    211,338

    I think that some experienced reliability issues...

    I think that some experienced reliability issues with the piggyback socket (coming lose and causing boot failures) and that a more secure PROM socket wasn't that much more involved.

    Removing the...
  150. Replies
    3
    Views
    1,032

    Did you remember to run superpatch (if the Music...

    Did you remember to run superpatch (if the Music & Photos menu entry appears, then you probably have already run superpatch)?
Results 1 to 150 of 413
Page 1 of 3 1 2 3