Page 1 of 2 12 LastLast
Results 1 to 15 of 29

Thread: 11.0b sitting in mfs

  1. #1
    Join Date
    May 2003
    Location
    Chicago Burbs
    Posts
    160

    11.0b sitting in mfs

    This is version 11.0b.E2-01-2-652 on my TivoHD. It appeared on 2/10
    Anyone have any info. tivoapp patches...
    Last edited by Vegas; 02-13-2009 at 08:28 PM.

  2. #2
    Join Date
    Oct 2001
    Posts
    1,243
    on mine as well

  3. #3
    Join Date
    Jun 2006
    Location
    Dougal County
    Posts
    1,007
    Quote Originally Posted by Vegas
    Anyone have any info. tivoapp patches...
    Code:
    0x005d39fc	104000aa	100000aa
    
    or :
    
    echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1915388
    untested.

    found this tidbit in /etc/rc.d/StageE_PreApplication/rc.Sequence_650.CleanupPlanetX.sh :
    Code:
    puts "Obliterating PlanetX datum (it obstructs my view of Venus)..."
    
    if {[catch {RetryTransaction { mfs unlink "/Drm/NF/MovieData" }}]} {
      puts "Where's the KABOOM?  There's supposed to be an Earth-shattering KABOOM\041"
    } else {
      puts "KABOOM\041"
    }
    looks like a handful of idl files dealing with MenuItem/Showcases were altered. /tvlib/tcl/tv/DbEnum.tcl has had these values added :
    Code:
    variable DirectvA3 -2147287026
    
    variable NowPlayingLocalList1 24
    variable NowPlayingLocalList2 25
    variable NowPlayingLocalList3 26
    variable NowPlayingLocalList4 27
    
    variable VODClip 10
    variable VODMenu 9
    meh..

  4. #4
    Join Date
    Jul 2005
    Posts
    504
    Any thoughts on what "rc.Sequence_650.CleanupPlanetX.sh" is for?

  5. #5
    Join Date
    Aug 2004
    Posts
    4,075
    Looks to me like it is wiping old NetFlix DRM keys out of MFS.

  6. #6
    Join Date
    Jan 2004
    Location
    n.h. usa
    Posts
    955
    no new version on 650b s3's

  7. #7
    Join Date
    May 2003
    Location
    Chicago Burbs
    Posts
    160
    Quote Originally Posted by jt1134 View Post
    Code:
    0x005d39fc	104000aa	100000aa
    
    or :
    
    echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1915388
    untested.
    Tested on TivoHD

    also
    Code:
    VMA / HEX                  orig value  new value
    0x00773654 / 0x00373b54    00008021    24100001    //Backdoors

  8. #8
    Join Date
    Dec 2004
    Posts
    831

    Time for a sticky?

    Thanks guys.

    Y'know, since TiVo releases a new version of software pretty much every quarter, perhaps it would be a good idea to start a sticky thread dedicated only to posting the hack values, rather than starting a new thread for each release or burying the data deep inside other threads?
    Having trouble with TyTool? Try TyTool Documentation
    Need to hack an S3 / THD? Try S3 Hacking Script

  9. #9
    Join Date
    Oct 2001
    Posts
    1,243
    Anyone played with bufferhack for this?
    Version: 11.0b.E2-01-2-652 Tivoapp size: 32140016

  10. #10
    Join Date
    Oct 2001
    Posts
    1,243
    QAM Mapped channels survived across the 11.0b.E2-01-2-652 update.

  11. #11
    Join Date
    Oct 2001
    Posts
    1,243
    Here is bufferhack including 11.0b.E2-01-2-652.
    I can also confirm Backdoors from above post.
    I'm removing this file as there is a final version 11.0b-01-2
    Last edited by T_RJ; 02-28-2009 at 08:26 PM. Reason: final version 11.0b-01-2 released

  12. #12
    Join Date
    May 2005
    Posts
    8
    I have 11.0b-01-2-652 on my TivoHD and the NoCSO patch has moved to:
    Code:
    VMA/HEX			orig value	new value
    0x005d3a1c/0x001d3a1c	104000aa	100000aa	//NoCSO
    
    or :
    
    echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1915420

  13. #13
    Join Date
    Jun 2006
    Location
    Dougal County
    Posts
    1,007

    bufferhack for 11.0b-01-2

    Code:
    set sys(11.0b)     [list 0x115e4e  0x115b1a  0x6c   0x1bd402  32140016  325F14DAA33CC105AD841D8F73E3E67B7A85EDBF]

  14. #14
    Join Date
    Oct 2001
    Posts
    1,243
    jt1134 did I have it wrong? I tried what I posted and it worked but maybe I did something wrong. I will change it in my post if it is wrong.

  15. #15
    Join Date
    May 2003
    Location
    Chicago Burbs
    Posts
    160
    Quote Originally Posted by T_RJ View Post
    jt1134 did I have it wrong? I tried what I posted and it worked but maybe I did something wrong. I will change it in my post if it is wrong.
    Looks like jt's is for 11.0b-01
    11.0b.E2 didn't last very long.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •