Results 1 to 14 of 14

Thread: 9.2a rollout

  1. #1
    Join Date
    Nov 2002
    Posts
    1,076

    9.2a rollout

    So 9.2a has started rolling out for the s3/HD tivos. Yes, 9.2a is newer than 9.2J. 9.1 introduced an all-video-goes-to-grey-screen bug that remained unfixed in 9.2J. Presumably the re-spin was to address this bug (crosses fingers).

    Anyways, the VMA for the tivoapp no encryption patch somebody found has moved a couple bytes again. It's now:
    Code:
    0x070165c "104000aa 100000aa" 
    aka
    echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp.new  bs=1 seek=3151452
    Works for me with s3tots.

  2. #2
    Join Date
    Jan 2005
    Posts
    1,008

    Superpatch for 9.2a

    Here is the full port of Superpatch for 9.2a

    I ported this from 9.1 and applied it to version 9.2a-01-2-652 (TivoHD)

    I can confirm backdoors enabled, encryption disabled (thanks bcc!), MRV functioning.
    30-sec skip is unknown after 9.1, it appears to be remote enabled - see post here.
    I have not fully tested everything; I did a successful test call to tivo, but I've only been running it less than 24 hours.

    array set patch_9_2a {
    0x0aa9e08 "14400026 10400026"
    0x06d1120 "00008021 24100001"

    0x050bea8 "0c81e670 24020001"
    0x070165c "104000aa 100000aa"
    0x0f7c8bc "0c1b7bb7 3c020000"
    0x0bbdec4 "0c472351 00000000"
    0x0bbdf58 "0c472351 00000000"
    0x0db77f0 "0c470e09 00001021"
    0x0dbdba8 "0c472351 00000000"
    0x0620608 "14400008 00000000"
    0x0dbe6ec "0c470e09 00001021"
    0x0dc0180 "0c4724ba 00000000"
    0x067b7cc "0c1b7bb7 0c4000d1"
    0x100033c "27bdfec8 03e00008"
    0x1000340 "afb40128 24020001"
    0x1000344 "afb00118 8e24000c"
    0x1000348 "afbf0134 8c820000"
    0x100034c "afb5012c 8c850004"
    0x1000350 "afb30124 00451025"
    0x1000354 "afb20120 8c850008"
    0x1000358 "afb1011c 00451025"
    0x100035c "8c830010 03e00008"
    0x1000360 "8c84000c 00000000"
    0x1000798 "0c81e040 00001021"
    0x10007d8 "0c81e040 00001021"
    0x1000b84 "0c81e040 00001021"
    0x1000bc8 "0c81e040 00001021"
    0x11bace8 "0c472351 00000000"
    0x11bad4c "0c472351 00000000"
    0x11c3b78 "0c472351 00000000"
    0x11c3c04 "0c472351 00000000"
    0x11bab14 "0c4724ba 00000000"
    0x11babc4 "0c4724ba 00000000"
    0x11bac5c "0c4724ba 00000000"
    0x11c3960 "0c4724ba 00000000"
    0x11c3a14 "0c4724ba 00000000"
    0x11c3ac8 "0c4724ba 00000000"
    }

    Then add this regexp:

    } elseif { [regexp {^9\.2a-01-2} $sw] } {
    set a "patch_9_2a"

    And you should be good to go...

    md5sum:
    Code:
    bash-2.02# md5sum /tvbin/tivoapp.original
    550369074cf94881d838e89606744569  /tvbin/tivoapp.original
    EDIT: Per Jamie's comment (who knows way more than me), if you don't want the whole patch and just want the backdoors.

    Code:
    0x06d1120 "00008021 24100001"
    aka
    echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp.new  bs=1 seek=2953504
    Last edited by ScanMan; 11-12-2007 at 12:59 PM. Reason: Corrected patch per jkozee; thanks!
    ScanMan --> Just another Tivo hacker...
    Killhdinitrd SA S2 Monte S2 Unscramble Upgrade Tivo Software

  3. #3
    Join Date
    Mar 2005
    Posts
    235
    ScanMan,

    Shouldn't this:
    0x067b7cc "0c1b7bb7 0c400dcd"
    Be:
    0x067b7cc "0c1b7bb7 0c4000d1"

    I think when you ported the patch, you didn't update the target of this jump.

  4. #4
    Join Date
    Aug 2004
    Posts
    4,075
    Also, as far as I have been able to determine, beyond the nocso and backdoors patches, the superpatch patches don't do anything useful on a Series3 or TiVoHD. MRV on unencrypted recordings works without them.

  5. #5
    Join Date
    Jan 2005
    Posts
    1,008
    Quote Originally Posted by jkozee View Post
    ScanMan,

    Shouldn't this:
    0x067b7cc "0c1b7bb7 0c400dcd"
    Be:
    0x067b7cc "0c1b7bb7 0c4000d1"

    I think when you ported the patch, you didn't update the target of this jump.
    You're absolutely right; I missed that, sorry. I updated the location of the jump.
    ScanMan --> Just another Tivo hacker...
    Killhdinitrd SA S2 Monte S2 Unscramble Upgrade Tivo Software

  6. #6
    Join Date
    Jul 2005
    Posts
    228
    Quote Originally Posted by Jamie View Post
    Also, as far as I have been able to determine, beyond the nocso and backdoors patches, the superpatch patches don't do anything useful on a Series3 or TiVoHD. MRV on unencrypted recordings works without them.
    Jamie,

    Is this the same thing for Series 2?

    Shutterfriend

  7. #7
    Join Date
    Aug 2004
    Posts
    4,075
    Quote Originally Posted by shutterfriend View Post
    Is this the same thing for Series 2?
    I haven't tested it. I have the full superpatch on my S2's. They are running 9.1. I'll test it when I get a chance, unless someone beats me to it.

  8. #8
    Join Date
    Sep 2001
    Location
    West of Bermuda
    Posts
    1,017
    this may not be the best thread, but... on the series 2 9.x boxes, does the "new" mrv use program streams like the "old" mrv/pre-9.x, or does it use ts like series 3?

    ronny

  9. #9
    Join Date
    Aug 2004
    Posts
    4,075
    Quote Originally Posted by ronnythunder View Post
    this may not be the best thread, but... on the series 2 9.x boxes, does the "new" mrv use program streams like the "old" mrv/pre-9.x, or does it use ts like series 3?
    I'm pretty sure that S2 <-> S2 MRV uses S2 native ty streams. S3 <-> S3 uses S3 native ty streams, and S2 <-> S3 goes through a TTG/TTCB conversion.

    There's more discussion here about the new MRV. If you have a Series2 with 9.x, you can sniff the network and see if you can find a raw retrieval URL like was seen on the Series3.
    Last edited by Jamie; 11-15-2007 at 08:31 PM.

  10. #10
    Join Date
    May 2005
    Posts
    8
    Quote Originally Posted by Jamie View Post
    Also, as far as I have been able to determine, beyond the nocso and backdoors patches, the superpatch patches don't do anything useful on a Series3 or TiVoHD. MRV on unencrypted recordings works without them.
    Can you MRV encrypted shows if the NOCSO patch is applied?

  11. #11
    Join Date
    Jul 2005
    Posts
    347
    So did we ever figure out if any of the patches other than the "No Encryption" and "Backdoors" are actually necessary or even functional?

    I like to keep my patching as lean as possible and so far I haven't been able to justify all of these other misc patches.

  12. #12
    Join Date
    May 2004
    Posts
    29

    35

    An excellent question ... has anyone verified that all of those patches are necessary ?

  13. #13
    Join Date
    Dec 2004
    Posts
    831

    9.3 Patch

    Well, the question now is, what is the VMA for the no encryption patch for 9.3?

    I've got a TiVo HD waiting to upgrade to 9.3, but I can't let that happen until I'm sure I can get encryption disabled when the upgrade goes through.
    Having trouble with TyTool? Try TyTool Documentation
    Need to hack an S3 / THD? Try S3 Hacking Script

  14. #14
    Join Date
    Jan 2005
    Posts
    1,008
    Quote Originally Posted by lrhorer View Post
    Well, the question now is, what is the VMA for the no encryption patch for 9.3?

    I've got a TiVo HD waiting to upgrade to 9.3, but I can't let that happen until I'm sure I can get encryption disabled when the upgrade goes through.
    It's in the 9.3 thread; the last note by Jamie indicates tivoapp is the same for s2 (9.3) and s3 (9.3a) versions so the patches for the final rollout of 9.3a are the same as the experimental [9.3a.Y, etc.] releases.
    ScanMan --> Just another Tivo hacker...
    Killhdinitrd SA S2 Monte S2 Unscramble Upgrade Tivo Software

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •