How to disable tystream encryption to enable extraction

[SR712]

Read the very first post in this thread.

[emyrold]

Hello,

I made a type-O when I Patched my TivoApp on a SAT-T60:

I first entered the following:

echo -ne "\x48\x00\x00\x38" | dd conv=notrunc of=tivoapp bs=1 seek=6493084

But it should have been:

echo -ne "\x48\x00\x00\x38" | dd conv=notrunc of=tivoapp bs=1 seek=4678456

I ran the first command and realized that it was incorrect so I then re-ran the second (correct) echo line.

My questions are:

1. Does re-running the same echo statment with different seek values work, or do I need to restore the TivoApp directory and restart the box first?

2. Where can I download ciphercheck.tcl, I have done a few searches in the forums and could not find it?

3. After running the TivoApp Patch (as a explained above) I am having trouble with TyTool working with the extracted ty file (from a recorded show after the patch).

3a. When I try to Make the Key File(s) I do not get a the standard status 2000.....2100.....2200...ect,,, but it does eventually create a key file, but when I then try to open the key file for editing, it says "input file " ..." is not a GOP editor key file and fails

3b. My only thought at this point is that maybe the TivoApp Patch did not work the way I did it and that the ty is still encrypted. Not sure, but that is why I was looking for the ciphercheck.tcl script AlphaWolf created...

Thanks, -emyrold

[BTUx9]

Originally Posted by emyrold

1. Does re-running the same echo statment with different seek values work, or do I need to restore the TivoApp directory and restart the box first?

You need to restore the tivoapp binary, but you can re-patch it before rebooting (i.e. only 1 reboot)... You still need to move the old tivoapp out of the way first (mv tivoapp tivoapp.bad)

Originally Posted by emyrold

2. Where can I download ciphercheck.tcl, I have done a few searches in the forums and could not find it?

It's at the beginning of the nocso thread, 2nd or 3rd post. Search doesn't work on attachment names, which can make it tough to find some things.

Originally Posted by emyrold

3. After running the TivoApp Patch (as a explained above) I am having trouble with TyTool working with the extracted ty file (from a recorded show after the patch).

3a. When I try to Make the Key File(s) I do not get a the standard status 2000.....2100.....2200...ect,,, but it does eventually create a key file, but when I then try to open the key file for editing, it says "input file " ..." is not a GOP editor key file and fails

3b. My only thought at this point is that maybe the TivoApp Patch did not work the way I did it and that the ty is still encrypted. Not sure, but that is why I was looking for the ciphercheck.tcl script AlphaWolf created...

Thanks, -emyrold

I assume you mean a show recorded after the patch was applied. ciphercheck will tell you if that show is scrambled or not. If the show is watchable, I find it hard to believe that the botched patch would have anything to do with this tytool problem... Sounds like the problem has to do with tytool (if it's a newer version than what you're used to, some things may have changed)

[emyrold]

Originally Posted by BTUx9

You need to restore the tivoapp binary, but you can re-patch it before rebooting (i.e. only 1 reboot)... You still need to move the old tivoapp out of the way first (mv tivoapp tivoapp.bad)

I assume you mean a show recorded after the patch was applied. ciphercheck will tell you if that show is scrambled or not. If the show is watchable, I find it hard to believe that the botched patch would have anything to do with this tytool problem... Sounds like the problem has to do with tytool (if it's a newer version than what you're used to, some things may have changed)

First, the TivoApp Patch I applied did not take, I was not able to confirm that until I got the cipher**.tcl to work. Then the shows that I thought were not scrambled, where in fact still scrambled.

So I re-patched the TivoApp the way you suggested above and now "New" recordings are really not scrambled, thank you so much!

-e

[bbsux]

Has anyone found the patch for the new S1 update? 3.01c?

Just wondering... Thanks...

[psxboy]

Originally Posted by bbsux

Has anyone found the patch for the new S1 update? 3.01c?

Looks like they have...

http://www.dealdatabase.com/forum/sh...ad.php?t=35776

-psxboy

[tfranks]

I didn't see any other posts about this patch and the S2 Dtivo running 3.1.1b-02-2-351 so I decided to post my results. I used Iago's code from this post, http://www.dealdatabase.com/forum/sh...3&page=2&pp=15
Thanks to AlphaWolf, Rubik for this great patch..

Test Drive H (kmem unscrambled)

1. 100gb
2. 3.1.1b-02-2-351 and Monte'd with Sleeper's script 1.2
3. kmem enabled
4. all scrambled shows

Test Drive G (Iago's echo code)

1. 120gb
2. 3.1.1b-02-2-351 and Monte'd with Sleeper's script 1.2
3. kmem NOT enabled (rem'd from .author)
4. all shows scrambled (prior to echo code); shows are watchable after echo code and reboot

Tested on two seperate Hughes SD-DVR40 S2 Dtivos.

During initial test only one Dtivo (driveG) was patched with Iago's echo code (the other had kmem enabled). I was successfully able to mfs_ftp (tmf) a show (recorded after the echo patch) from the echo enabled Dtivo to the kmem Dtivo (driveH). This show was watchable during the ftp as well as after.

I have since removed kmem (commented out) from the .author of the second Dtivo (driveH) and applied Iago's echo code to it. Once again I was able to mfs_ftp a show from the driveH to driveG. The show was also watchable during ftp as well as after.

Unfortunately I still have a bunch (32gb) of shows that are scrambled and from what I have read here am SOL as far transfering until someone learns how to de-scramble S2 Dtivo shows.

Oh well at least I can transfer new recordings from here on out between Dtivo's.

[jerrymc]

I haven't seen any reference to this in this thread. Forgive me if it's been mentioned elsewhere.

I have a SAT-T60 running v3.1.0b with Todd Miller's LBA48 kernel for big disk support. The patch in this thread has been described as a "kernel patch". Does that imply potential conflict with the LBA48 kernel I've installed?

Thanks,
Jerry

[Sleeper]

Originally Posted by jerrymc

The patch in this thread has been described as a "kernel patch". Does that imply potential conflict with the LBA48 kernel I've installed?

This is not a kernel patch. It is a "tivoapp" patch. The only way you would have a problem is if your kernel has a noscramble patch in it.

[tivosohn]

Has anyone figured out the problem Miles posted a couple of months back of the ciphercheck doesn't show any listing even there are movies recording and listed in the "Now Showing" screen? I am seeing this problem as well. Here's the output.


tivo:/var/hack$ ./ciphercheck.tcl

TyStream encryption is currently disabled.

Here is the status of your current recordings:

Encrypted CSO Set Stream Name
--------- ------- -----------------------------------------------------------

tivo:/var/hack$ exit


Thanks.

[AlphaWolf]

Originally Posted by tivosohn

Has anyone figured out the problem Miles posted a couple of months back of the ciphercheck doesn't show any listing even there are movies recording and listed in the "Now Showing" screen?

My guess is that the reason it is doing this is due to differences in the MFS directory tree structure. Unfortunately, I don't run 4.0, so I don't know exactly what to look for and what changes to make for compatibility. Somebody else will have to document this to me so I can make the necessary changes.

BTW mods, what happened to the adhesive tape on this thread?

[BTUx9]

Originally Posted by AlphaWolf

My guess is that the reason it is doing this is due to differences in the MFS directory tree structure.

Absolutely correct. Changing "/Recording/NowShowingByTitle" to "/Recording/NowShowingByClassic" fixes the problem. Here's a modified version that runs on v4.x

[scr33n]

Hi there, this is my first time posting and I hope this is the right place.

I'm running a monte'd HDVR2 with the tivoapp hex edit for 3.1.1b and I'm trying to play an pre monte scrambled recording. I extracted the recording from my original tivo disk using mfs_tmfstream and restored it to the tivo using mfs_ftp. The stream will not play on the tivo. It's my understanding with this hack that I should be able to play shows that were scrambled on this tivo prior to the monte as long as my DiskConfiguration key is the same,the CSO Key is present (which it should be thanks to tmf), and the crypto chip is the same. I've verified the diskconfiguration key and the CSO key to the best of my ability and all looks in order. I've run the csosout.tcl script and verified with ciphercheck.tcl. Am I missing something here?

[BTUx9]

Originally Posted by scr33n

I've verified the diskconfiguration key and the CSO key to the best of my ability and all looks in order. I've run the csosout.tcl script and verified with ciphercheck.tcl. Am I missing something here?

Have you verified that the kmem line has been removed from your rc.sysinit.author (if it was placed there by sleeper's script). That would lead to the problem you've been describing.

[scr33n]

Originally Posted by BTUx9

Have you verified that the kmem line has been removed from your rc.sysinit.author (if it was placed there by sleeper's script). That would lead to the problem you've been describing.

Thanks for the quick reply. I commented it out myself (as I inserted in myself when I built the rc.sysinit.author file) and have since rebooted. I'm pretty positive it's not running as I log each entry in this file.

/etc/rc.d/rc.sysinit.author

date>>/var/hack/hackinit.log
echo starting tserver_mfs7. >> /var/hack/hackinit.log
tserver_mfs7 &
#echo starting kmem. >> /var/hack/hackinit.log
#kmem 800b23b4 00001021
# Call the Tivo Package Manager Startup Scripts
echo starting rcS.d packages. >> /var/hack/hackinit.log
/etc/rc.d/rc.sysinit.tpm

/var/hackinit.log

Tue Apr 20 08:53:09 UTC 2004
starting tserver_mfs7.
starting rcS.d packages.

I'm assuming then my assumptions are correct then and there's something awry. Any other ideas?