VoyForums
[ Show ]
Support VoyForums
[ Shrink ]
VoyForums Announcement: Programming and providing support for this service has been a labor of love since 1997. We are one of the few services online who values our users' privacy, and have never sold your information. We have even fought hard to defend your privacy in legal cases; however, we've done it with almost no financial support -- paying out of pocket to continue providing the service. Due to the issues imposed on us by advertisers, we also stopped hosting most ads on the forums many years ago. We hope you appreciate our efforts.

Show your support by donating any amount. (Note: We are still technically a for-profit company, so your contribution is not tax-deductible.) PayPal Acct: Feedback:

Donate to VoyForums (PayPal):

[ Login ] [ Contact Forum Admin ] [ Main index ] [ Post a new message ] [ Search | Check update time | Archives: 1, 2, 3, 4, 5, 6, 7, 8, [9], 10 ]

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Date Posted: 07:22:25 02/26/02 Tue
Author: ChuckY
Subject: Re: A word of caution
In reply to: Potter 's message, "Re: A word of caution" on 06:27:10 02/26/02 Tue

I am just wondering if there is any way to setup an interface on the header to read the data out of a working box and write back into a completely screwed one.
what ya think?






>One of those projects I've been reluctant to start on
>but would be the best crack for these units.
>IE capture, log and interpret/decipher the data packet
>for entitlement and decoding instructions in real
>time, filter out the bad commands and replace with
>good ones like reset the disable timer and channel
>enable codes. Lot of work here as the internal box
>number needs to be found (could be reset to a default
>one but how?) and I haven't even tried logging the
>data stream as yet. Success with this would bring the
>'fix' down to fitting a small PIC like 12C509 and no
>problems with locking etc but I can imagine myself
>retiring or the service being discontinued in favour
>of a digital (maybe satellite) one before it was
>completed.
>AFAIK once the boxes are fully disabled they need to
>have a dummy signal injected via that 4 pin header
>near the IF chip to reprogram the sram chip - it looks
>like there's sram in the cpu as well (both have
>battery backup) perhaps to hold the 'secret' internal
>ID of the box.
>
>>Ok Kewl.
>>
>>also if you end up killing the info in the box you can
>>still do your mod as far as I am aware as it kills it
>>once you put the tuner mod in anyway so either way you
>>aint losing anything by trying.
>>
>>one of the boxes I have I killed due to the Tuner
>>boards when I took it out the box was dead and shows
>>o5 so all Provider info is lost. I would be interested
>>in finding out how to re program these. if you have
>>any idea on how to do this potter or would like to get
>>together and try and work somthing out I have 3
>>screwed boxes and 7 working ones and 12 others plus
>>maybe more available.
>>
>>also who cares basic service is better than nothing.
>>
>>I have a couple of boxes that actualy recieve Encore
>>and Showtime Anyway so not always the basic service.
>>
>>
>>>I must have been doing it wrong but it still only
>gets
>>>the basic service and you have to get to the box
>>>before any data in the sram is corrupted (provider's
>>>ECM) - may be an internal checksum that makes it very
>>>sensitive to probing and I heard of boxes being
>>>'killed' by simply probing around with a cro.
>>>I'm aware of at least a half dozen happy hobbyists in
>>>the right locality IE ours (All had to go through the
>>>ups & downs of setting up to match the resonator but
>>>none are dissatisfied with the picture)
>>>
>>>>also a not from me is that I found that instead of
>>>>shorting to W502 you can use pin 17 of the tocom
>>chip.
>>>>I have boxes I have reset 30+ times so dont think
>you
>>>>are going to kill it soon and especialy with the
>>diode
>>>>mod it aint gonna die any time soon at all.
>>>>
>>>>also wanting to know how many People have got
>Potters
>>>>Mod Finished and installed and working
>>>>

[ Next Thread | Previous Thread | Next Message | Previous Message ]

Replies:

[ Contact Forum Admin ]

Forum timezone: GMT-8
VF Version: 3.00b, ConfDB:
Before posting please read our privacy policy.
VoyForums(tm) is a Free Service from Voyager Info-Systems.
Copyright © 1998-2019 Voyager Info-Systems. All Rights Reserved.