it's scrambled
the networks broadcast it in the clear, but the tivo scrambles it
Type: Posts; User: jt1134
it's scrambled
the networks broadcast it in the clear, but the tivo scrambles it
Most of the early hacks were geared towards implementing features that are now available from a stock tivo (extraction/etc). Once tivo began implementing these features themselves future development...
What else do you want to do with it? ;)
I would :
patch tivoapp to disable encryption and enable backdoors (debug info in system info screens) ; look for tvapppatch.tcl in the files section
...
Correctamundo
Grab the host modules and usbnet from jamie's backport package and you'll be set
WinMFS and MFSTools images are not the same format. The hybrid image was created with and is therefor only useable with WinMFS.
Current tivo software distributions can only address partitions 1TB...
You'll also need to set /State/Network/AutoConfigEnabled(?) manually or by using the UI network menus. Remove any references to ifconfig in your startup if you had any.
6.4a is missing dhclient. Snag a copy from an older sw version
some example perl code for a similar purpose
nope
yep
alternatively, you can reinstall from the command line, ex:
export EMERGENCY_REINSTALL=1
tivosh /tvbin/installSw.itcl 9.3.2.xxxxxxx
RubbishObjectByFsId from tivosh can be used to nuke mfs objects (DANGER WILL ROBINSON!!! Use Caution!)
I'm not sure the error you posted (from twp?) is the relevant one however
wipe your logs,...
http://dealdatabase.com/forum/showthread.php?p=306870&postcount=340
From poking through the startup scripts it looks like you can skip the HDCP key initialization if you have DISABLE_HDCP=1 set in your environment.
The startup sequence is similar in this regard on...
also, original bootpage looks like the premiere uses sdaX instead of hdaX like it did on previous hardware
Have you looked at disassembling the bsptest binary? The disassembly is fairly small and not too difficult to follow. I spent a bit last night tracing through it.
That's of course meaningless...
poking through /platform/utils/DeviceList/devlist.Gen07 I stumbled across this :
# usb keyboard
666 c 13 64 event0
666 c 180 96 hiddev0
hmmm...says I...interesting..
looks like someone...
been poking around some of the premiere software today....meh
still using the old apple partition map
00000000 50 4d 00 00 00 00 00 0e 00 00 00 01 00 00 00 3f |PM.............?|
00000010 ...
sorry bout bufferhack, used disassembly to port the patches, but forgot to add 2 bytes to each patch location to make sure the value is patched and not the actual instruction. fixed above. gotta love...
heh, probably should have posted a disclaimer
the nopromos patch above is ported from the one I posted here, and unfortunately will mess with the Netflix/VoD stuff
the deletethisrecording?...
11.0g
0x005d3788 "104000aa 100000aa" //noencryption
0x00656c14 "30b000ff 00008021" //cci1
0x00656c38 "00e08821 24110000" //cci2
0x0077419c "00008021 24100001" //backdoors
0x00868c44 "0d293985...
for x in 3 4 6 7 9
do
dd if=/dev/hda$x | gzip -9n > hda$x.gz
done
:)
I doubt tivoapp changed much, shouldn't be hard to port them. However, the 'N1' in the software version denotes a 'beta' release, and the true "11.0f" release will probably begin soon. There are...
The 'timeout' routerplus hack doesn't touch anything that would result in a reboot loop
Check your routerplus install. On 6.4a, you'll want to use one built for 2.4.20. I just tried the above hack...
the hack posted right before your post should work for 6.4a
not too much to go on there
'TvSyncActivity' ties in largely with the tivo's xmpp services
disconnect the box from your network and see if it still reboots. additionally, wipe your logs, wait...
big no, sorry
Sure, the HR10 was/is a great piece of gear, but how many people out there still feel the same? and still have one in service? I never really quit hacking on mine, but how many others are in that...
it's probably disabled
re-run guided setup (?repeat satellite setup? for dtivos)
hmmmm....
now that I think about it, you may be able to fix everything by simply reloading the swsystem slice
/SwSystem contains pointers to all kinds of objects including the brf files, and...
looks pretty bad to me ; no magic button either :P
I've only seen errors like when I had screwed with my boot params and accidentally set my root partition sw to a different version than what was...
I guess you could try reloading the swsytem slice (see the files section for a link to 6.4a slices) and try an emergency reinstall (see /tvbin/installSw.itcl)
I've nuked just about everything from...
http://dealdatabase.com/forum/showthread.php?t=60016
put the attached script in /etc/rc.d/StageE_PreApplication
when it's done clearing everything, you can delete the script
Feb 1 22:06:38 (none) Activity HandleDataChanged[889]: Tmk Fatal Error: Activity HandleDataChanged <889>: assertion failure
it's crashing in the Scheduler
"Clear program information & To Do...
Managed to acquire a 1.5TB drive today and restore the hybrid image to it
System information screen reports 237 HD hours / 2072 SD hours
Partition Maps
#: type name ...
I've posted a link to the "hybrid" image here for anyone interested.
edit - download link removed
I've created a hybrid THD / XL image for use with a THD that should theoretically restore to larger drives (ie: 1.5 or 2TB) background thread
edit : link removed
pm me if you would like a copy
kernel log should contain the crash dumps which may hold some clues. tvlog and tverr should also have some information showing where exactly in the code it is failing
there usually is
I would...
I believe you're correct. The XL image I started with contained a full keyring, guide data, etc. It certainly wasn't "fresh." (seems it came from an instantcake image)
yup
TiVo_HD#[/] $...
Got bored today and decided to give this a shot
The only differences (besides a few *.png refs) between the THD and XL images were the *Maroon* loopsets. I extracted these loopsets from a THD...
huh?
"RID" is related to later generation Directv hardware, not some type of recording encryption. link
TTG uses qualcomm encryption
..........
ty-ffmpeg -- file.mpg -> file.ty+
ty+2tmf.pl --file.ty+ -> file.tmf
i doubt you'll find any takers
it would be simpler and less time consuming to extract and reinsert the shows in the fashion tivo4mevo mentioned
also, i doubt that anyone capable of devising the...
I wasn't referring to twp, but the actual tivo ui
I believe its a side effect of the backdoors patch
nope
what kind of effect are you referring to? auto-expire?
the right fsid is listed as the ShowingObjID or Recording ObjID, in your case 821789
that code snippet requires the fsid of the affected recording as an argument
you can find the fsid by using mfs_streams/NowShowing or by pressing info on the recording while in the NPL ;...
in your other posts you've alluded to the 24 hour ppv auto-delete "feature" of 6.4a
while a tivoapp patch would (IMO) be a better approach, you can easily "fix" a ppv recording so that your tivo...
ah ok
the 24 hour auto-delete is a feature of newer software, and unrelated to the old school NoPPV patch
if { [regexp {^6} $tivoswversion] } {
set nowshowingpath "/Recording/NowShowingByBucketTitle"
}
too funny...
you sell "pre-hacked" tivo's and offer "free tech support", but can't even pose an intelligent (read:detailed) question to the forum whose software you've abused? link
I feel bad...
no
there are many, many reasons why it won't work
related linky
tytompg does no decryption whatsoever
it unpacks an unencrypted tystream and repacks it as an mpeg program stream
partially true in some cases
only between hacked & unhacked boxes. 2 hacked boxes will MRV just fine
yup
something like that
1) TD sux...also, tivo to tivo transfers don't suffer the slowdown imposed by TD's re-encoding and encrypting of the stream...it's more or less a straight "copy" from box to box
2) jkozee posted a...
custom kernel + mfs_ftp/mfs_utils
there will be a noticeable improvement
did you read the actual post or just the thread title? (rhetorical question)
op: what you're asking for is completely possible, and yes, some soldering is required. search around for 'cci byte'....
why? I ported it once out of boredom...it doesn't do anything useful
TCD140 I'm assuming?
Since you're using monte, then I'd first try switching to a stock kernel that's been neutered with replace_initrd. I posted a 'fixed' 9.3 kernel way back when, here, stock...
you'll need to either patch & recompile your kernel or use tivopart
here are .proc and .brfstrings files I've been using with 6.4a
http://dealdatabase.com/forum/showthread.php?t=42540
in the 11.0d thread, no less...:rolleyes:
amazing...
you've got an extra space in there after \x08
looks right to me
you can check if the original values match with something like:
hexdump -C -s 1786324 -n 4 tivoapp
if the output matches the original values then you're looking at the...
I know this is an old thread, but I've been digging through this stuff a little bit lately...
It looks like there are 3 possible fields/values for /State/GeneralConfig :
1 = Satellite Guided...
/etc/hotplug/usb.map
here's a leaner fakecall patch that shouldn't mess with any of the actual modem functions
6.4a
0x008f04d8 "27bdff78 03e00008"
0x008f04dc "afb5007c 24020000"
I always use disassembly dumps instead of hex editors, so I'm prone to post VMA's as opposed to file offsets. Subtract 0x400000 from the values I listed for the actual offset into the file.
yep :
6.2a support was never officially added, you'll need to update the bufferhack script accordingly
0987654321
you could start by posting at least ONE piece of pertitent information
"I have tried now with multiple different walkthroughs..." doesn't give us any idea as to what you've tried so far
did you...
this patch will kill ONLY the pause menu stuff. all other ads/etc are still left intact
11.0d
0x00b9727c "0c2e6016 00000000"
1234567890
ah, ok
i would look into /tvbin/dssappAV
a disassembly of an older version (3.1.5x for example) will yield more information than newer binaries
a lifetime sub via directv has absolutely nothing to do with a standalone tivo, therefore tivo will not acknowledge or honor it as a true lifetime sub
the original fixsub script won't work for...
You'll only see slices show up in /var/packages on a dtivo when connecting to tivo via phone/network. Information from the satellite (AFAICT) is not sent in the same slice format and loaded into MFS...
Here are a few tivoapp patches that can be used instead of fakecall.tcl. These patches prevent a dtivo from dialing out to tivo, yet still report the call as being successful.
6.2a
0x00676734...
http://www.mfslive.org/winmfs/
http://dealdatabase.com/forum/showpost.php?p=298239&postcount=178
MfsRubbishTree /MessageItem
3.1.5f
0x00710dac "50400010 10000010"
0x00710e08 "10400181 00000000"
0x0091ae1c "93a20018 00001021"
6.3a/b/c
0x005b430c "50400008 10000008"
0x005b4338 "54400015 10000015"
0x0049f398...
http://lmgtfy.com/?q=netfilter
Nope. Encrypted files will only playback on the tivo they were recorded on. There are no tools available to process encrypted tmf files.
you could run it thru ffmpeg or the like and throw in -aspect 16:9 flag...
it's not going to work for you
(unless you get a standalone tivo)
you don't need tserver. things take time/experimentation sometimes. consider how much $ you paid for this tool before complaining about the lack of someting.
follow steve's link
use...
When I last worked for Directv (~2 years ago), the cancellation for a 2 year contract was $480. That broke down to $20 per month of the contract. For each month you kept service, $20 dropped off.
...
http://lmgtfy.com/?q=vlc
not if it actually deletes itself
if you hack around the cci byte then those recordings should be fine
there are a few ways to poke tivoapp to keep 0x03 recordings from self-deleting
100% sure ;)
insmod: /lib/modules/router.o: No such file or directory
http://dealdatabase.com/forum/showthread.php?p=213155&postcount=10
as adh points out in that post, you'll need to also use a custom kernel with SYS_CALL_TABLE defined to use it
thanks for the update 7.1 (and the unnamed contributor)! i've been trying to get up to speed with perl so that i could try to implement most of this stuff
here's an updated 11.0d tivoapp.proc...
here's some symbol information from 11.0d tivoapp and libtmk.so, mostly ported from the stuff posted here previously
the tmesis script missed quite a few strings in the 'tivoapp_main()' function,...
doesn't matter what channel/screen you're on
online chat people usually have even less of a clue than the phone drones
I always had to call my local franchise to get ANY cablecard issues...
you need your cards "validated"
call comcast back and use those exact words, and pray that someone who has half a clue answers the phone
(i hate comcast)
this will happen any time you swap...
from psxboy's post:
0x005d3a14 "104000aa 100000aa"
patch format is : VMA offset "original data | new data"
yup. 100000aa is the new data. replace it with the original data.
nope
it's gonna be a bitch to align it correctly without a bird dog
no offense, but that doesn't really mean anything ;)
yep. mfslive iso is preferred
nope. you want killhdinitrd
a good idea, but not a permanent "fix", you'll still need to update your...
well, considering drez hasn't posted in nearly a year and a half, I doubt he's logged in recently
but, i'm feeling generous today
assuming you have routerplus installed and the message structure is the same on your sw version
./promo_killer &
for starters, stuff like :
do you have valid MRV/MAK keys in /State/Keyring on both boxes?
noscramble has been obsolete for years now
have a look around for a '3.5d' thread and you should find the appropriate tivoapp patches to disable scrambling
why ask a question and give NO details?
they're in the mfs database, they're not just stored in the ext2 partitions or something
you'll need to use the mfs_* utils to access mfs, ciphercheck will report your encryption status
responding to the spambots again, eh cap'n?
sure, it boots
is it caching scramble keys?
give this a whirl...
It would be trivial to compile a Gen04 kernel, but I doubt it would work. As ADH points out in the first post of this thread, the TiVo ASIC's scrambling functions were moved to the main processor in...
doesn't matter where you put your bins, you can put them in /poop so long as you set the PATH correctly
when a sw update occurs, the root and kernel partitions are swapped, nothing is actually...
mount tivo root partition
cat /etc/build-version
sleeper is HORRIBLY out of date
it never worked with your model tivo anyways, you need to start with a prom mod
search, read, search, read some more, repeat
where to start...
you don't give any details...no harddrive model #s, not even the model # of your dvr...
it's NOT a tivo (which is what this forum is for), has nothing to do with extraction,...
nope
there's actually no way to do what the op wants
there's no one single server that will work with dtivo's and new sa software
different forum
same answer
sorry
no
the prom checks itself on bootup, the root fs isn't even mounted yet
if this was a full-blown sw exploit, I probably wouldn't have even posted it :P
yep
all of tivoapp's subprograms will show up as swedishchef
This patch is not quite as ugly as the one above:
11.0d
0x0079b6c4/0x0039b6c4 "0c21a33d 24020000"
0x00868d68/0x00468d68 "0d293985 00000000"
or:
echo -ne "\x00\x00\x00\x00" | dd...
This tivoapp patch will nuke both the Yellow Star menu items as well as the "More about..." pause pop-ups. Rhapsody, YouTube, and all the other "Music & Photos" stuff still works, but the "Video on...
SA units running recent sw don't need the full superpatch for MRV between units that have the same MAK. If all boxes have encryption disabled, then they can still MRV with eachother just fine.
Thanks. First time I came up with a binary patch that didn't cause "Bad Things"/nothing to happen, so I thought I'd share :p
Changing the checksum inside the PROM was my first thought, however...
Got bored today, and started disassembling getprom from 11.0d. I was surprised that I came up with some stuff that actually worked, so I thought I'd post it. Not that this hack is of any great...
ServiceInterfaceType appears to represent either phone line or broadband connection to the tivo service. I believe the opt status is tied in with the SpigotMaps. If you have backdoors enabled, take a...
Nope no internet video for Canada.
In my experience it takes a few days for some of that stuff to start working. Screwing around with stuff in /MenuItem or /DataSet seems to cause issues also.
Lame. What model tivo are you working with?
Have you tried the updated mfstools on mfslive?
For reference, this thread has an unmodified copy of the image T_RJ linked to.
AW, if you want a v1.05 image, I can yank a copy off of one of my boxes.
killhdinitrd hasn't been updated for newer kernels. if you're wanting to use monte, then just use replace_initrd on your 9.x kernel, boot any other killhdinitrd kernel, and use monte to chainload the...
it's a closed source driver, so no. judging from your previous inquiries in the killhdinitrd thread, I would recommend that you use monte to chainload a 9.x kernel and just use the stock drivers...
winmfs, mfslive, mfstools 2.0...
there are many guides (hinsdale, etc) that people have been using for years
give some details other than "I followed that stupid guide that didn't work" and...
tivoapp has been identical for the S3/HD for some time (always?). the only filesystem differences between them consists of the kernel and hpk (/platform) slices. the goal is simplicity. i highly...
did you miss the second post?
don't worry about it. you don't receive any channels from 110.
rerun guided setup and select dual-lnb dish and it will ignore the 110 completely.
as to what the actual issue is, I have no idea...
if you own both properties then it's probably not a big deal. directv has a problem when you're sharing one account between two addresses simultaneously. if they didn't know where the receivers were...
you could patch and recompile your linux kernel, or take the easy way out and just use tivopart.
yep. aside from physical evidence, the tivo often invokes 'getprom' which checks the prom's hash value against the value stored in the prom itself and logs the result. the logging can of course be...
of course they check. that's the main reason directv has always insisted on a phone line connection on all receivers. they definitely want to know where the equipment is located.
every time your box calls in (ie: every day) logs and other info is uploaded to tivo
read through your tivo's logs and you'll see your hard drive's model number among other details
the tivo is full of tcl scripts and shell scripts. much can be learned by simply reading thru these scripts
my comments apply to both the tivohd and original s3
sa == standalone ; ie: not a directv combo box
I find the warning ironic :p
Serial port is mapped to /dev/ttyS1 on S3 tivos
SA tivos get their guide data from daily calls so it would be a good idea not to run fakecall.
If all you want is to get rid of cci protection and you don't care about pulling the drive after an update, then you don't need to do much past the PROM hack.
mfslive boot cd
replace_initrd &...
source/ contains source code, binary/ contains binaries. If you do not know the difference, I would suggest some heavy reading, since at this point, the compiler will be of no use to you.
use the file from this post.
just remove the .zip extension, don't actually unpack it.
prom hack needed to change sw
NO recording without subscription unless you hack around it
hacks to circumvent subscription not publicly available nor are they discussed on this site
google...