Search:

For what it's worth, I took a quick look at some old 6.3c brfs I had lying around. It looked to me that ui/TivoCentral/TivoCentral.brf had the menu names present ("Now Playing List", "Watch Live...

You haven't said what version of software you're working with, but chances are that menu item name is contained in a BRF file. So I'd start there.

No, it won't brick the unit. If you can revert tivoapp it should boot (assuming you haven't modified any other files). At worst you might need to reimage the drive.

Something akin to this: link could fit inside a premiere. It would need to be reprogrammed to redirect SATA reads after a specific amount of time (that time falling between the two presumed reads of...

You've seen bkdtv's review, I presume? It provides a nice hardware baseline, so it's a starting point. Link: here.

Yes, that's a hazard of the message board versus wiki, you find yourself poring over conversations germane only to exploiting software 4.0.1b with an lba48 aware kernel and the proper uma6fix to work...

Yea, I thought a bit more about a sata injection device, and even assuming some sort of inexpensive, embedded device to sit between the tivo and drive (similar to an Arduino), one would have to write...

Another approach would be some sort of sata injection device (or computer). It would sit between the tivo and the hard disk. When the BSP code checks the kernel, the device supplies a valid kernel....

No disagreement on your points. The board facilitates discussion, but is not as good a repository. I believe there was a tivo wiki hosted elsewhere at one point, though unfortunately I don't have a...

This thread has the most information. Post any other questions you have here, and collectively folks can chime in with available information.

I believe that the direct extraction thread (link: here) should still be valid.

That said, I can't recall if I've ever directly extracted myself.

In answer to your other question, given that...

I'm not a member of slashdot. I tried to search for the article/presentation, but had no luck finding it again. I can't even remember the device they were attacking, unfortunately.

Excellent point, Dave20042004. You could alternatively add the rubbishing to 51killer to create a new, "prep drive for imaging" script. But that might be overkill, as your directions are clear as...

No problem. #3 can take a fair amount of time (e.g., hours). I think that the garbage collection isn't strictly needed so long as Rubbishing completed successfully.

If I'm correctly about that,...

The MFS partitions are always writable, even if the root partition is mounted r/o. You may want to try kicking off garbage collection after rubbishing the objects, as they should no longer appear in...

I assume you're using the updated version of 51Killer (as you posted in that thread: link). You might try rubbishing the objects in /State/Keyring. I believe that in the newer software, old keys...

This could work. I saw on slashdot some time ago, a conference presentation of an Arduino based device (I believe) to sit between a SATA device and the victim, and it would alter a file accessed...

I believe that the "type" of the partition reflected in the apple partition map doesn't really matter (the tivo software won't care), but most just set the type to match what tivo (and mfs-tools)...

Tivo enabled dual-core with sw 14.9.x, so you should be running with both cores active. That said, I agree that the HDUI is still not "snappy" on the premiere hardware.

Thanks. I understood, but might not have provided enough background. This thread here (link) might be worth a re-read. But the short version is that the "PROM" code (i.e., the boot-loader code...

Aside from MFS schema updates, the guide data remains unchanged, I believe.

I should have noted that the OzTivo emulator was shuttered in preparation for the DVB TiVoHD, but could probably be...

All good questions, but ones that aren't allowed for discussion here. This exact thing happened in the UK for the original Series1 UK units when the new VirginMedia (s4-based) tivo was released. ...

The trouble is that the buffer over run flaw you seek would need to be in the Broadcom Security Processor (bsp) of the tivo's CPU, as a vulnerability in the tivo "boot sector" (code that prior to the...

Nice work chasing those down!

Off topic area for this question, but 51Killer allows you to move a hacked drive to a similar model tivo, and still be able to playback the videos. When restoring a backup image from another box,...