3M description

[KHJ]

I found this while surfing the net and thought it was very interesting. I am not sure how correct this information is but thought some of you might want to read it.


Method 1: The AI 3M
------------------------------------------------------------------------ -----------------------------------
The AI 3M is a relatively new 3M that lets a hash run on the card, and it remembers the result for the hash, and simply returns the result when it sees it again. That's the "nutshell" idea, now for the more technical aspects of this idea. When the hash packet is seen the card executes the crc algorithm. crc is the cyclic redundancy check, which is often used to authenticate data. It is possible to use a custom algorithm to identify the hash, but crc is proven to be the most effective. crc creates a unique ID based on the hash packet, so that the card can "remember" it. It then lets the hash run, and records the result. The result and the hash ID are then stored in a table to be looked up later. When a hash packet is intercepted by the card, it checks the crc ID against those in the table. If the hash ID is in fact present in the table, it will simply return the hash result, instead of executing the hash. Otherwise, it will let the hash execute and then remember the result. The AI 3M flows like this:

Hash Packet Received -> CRC ID Created -> ID Checked Against Table ->

outcome 1: ID Present In Table -> Hash Result Retrieved and Returned

outcome 2: ID NOT Present In Table -> Hash Executed -> Hash Result Recorded In Table

After reading that, it should be apparent that the AI 3M has several flaws. Firstly, it gets hashed. This is a given, since the hash MUST run to get the hash result, and this may or may not freeze the video on the card. Secondly, there is limited space on the HU for this ever expanding table. You can only store so many hashes before you run out of memory. Poorly written AI 3Ms can be "card-burners" as well. This means that DAVE sends so many hashes (or the 3M does not process them correctly), so that the card re-writes the table so many times that it reaches it's write limit. While it was originally a very novel and clever idea, the AI 3M has some fundamental flaws. In addition, you must cloak a considerable amount of data to avoid hashing.

Method 2: The Fuse 3M
------------------------------------------------------------------------ -----------------------------------
The Fuse 3M is probably the newest and coolest 3M method. This is probably the least hashed publically known method, but not the easiest for coders to implement. The Fuse 3M acts by setting the debug bits on the HU card so that code execution passes through PPV after each complete command packet is executed. This works because the Fuse Bytes are checked with every reset, and thus the debug jump is taken. Since the card resets after every command packet, your code will be reached every time an INS comes down. It is up to you to process all the INS commands correctly (using trap 14, etc...). This is an extremely difficult method of testing, because it is up to the programmer to properly handle all the INS commands. The Fuse 3M essentially transfers control to the 3M, so it is up to you to correctly cover every aspect of the packet processing phase, etc. The flow of the Fuse 3M can be described like so:

Reset -> Command Packet -> Debug Fuse Jump -> Packet Processing -> Reset

The Fuse 3M essentially puts the card into a "debug loop", in which you are in the driver's seat, and are responsible for handling all "normal" card functions. This is a rather tricky method, but it is a VERY difficult method to hash. Some hashing methods that DAVE has implemented put the actual Fuse Bytes under scrutiny. Essentially, DAVE tests to see if the Fuse Bytes are set to debug mode, and if so, they set the Fuse Bytes to 00FF or some other invalid number. This is circumvented via a number of methods, including, but not limited to cloaking or "masking" the Fuse Bytes.

Method 3: The Simple Cloak
------------------------------------------------------------------------ -----------------------------------
The simple cloak is conceptually the easiest to code, but presents many mind-bending challenges. The premise of the simple cloak is to have your 3M stored in a planned place on the card, and to write code to return the proper data when a hash packet checksums your code or performs other tests to see if invalid data exists on your card. The cloak attempts to identify which areas are being checked, and then it stores the correct return for that area, and returns it/places it in the correct location. This is tedious at best, becuase unless you have a very slickly written cloak, almost any morphing 82 will nail you. Morphers are DTV's answer to the Dynaceptor method, a truly incredible method from the H card days. The Dynaceptor method in a nutshell, picks and chooses which opcodes it will execute, thus preventing hash packets from freezing the card.

[KHJ]

I found this while surfing the net and thought it was very interesting. I am not sure how correct this information is but thought some of you might want to read it.


An explanation of a .bin file, a CAM, a valid bin, and a sub bin.

.BIN file: ( dot bin ) This is possibly the truest meaning for the term BIN. All it amounts to is the file extension which is associated to a file which is created by reading a smart card through the use of a loader or programmer. This contains both the card's CAM ID and ZKT table as well as the contents of the card's EEPROM. If there is programming on the card this file will contain that as well.

CAM: (Conditional Access Module) The technical name for any DSS smart card/access card. Your Access Card is technically known as a "Conditional Access Module," or CAM. The CAM ID, therefore, is the unique identification number of the card. Think of it as the card's license plate number. The CAM ID is digitally stored within the memory on the card itself and is also written in plain ink on the back of the card right above the bar code.

Valid bin: What this is usually referring to is not the .BIN file at all but the CAM Id in that file. As long as the CAM Id in that file is not on DTV's blacklist ( 745) then it is a Valid CAM. Where the misuse has likely come from is that if the CAM is valid then, I guess, the file itself is technically valid!?!

Subbed bin: Much like the “Valid bin” except this CAM is not only not blacklisted (745) but is from a card which is currently part of a paid subscription. This is the best CAM to have as it should not become 745 as long as the subscription is paid up!

Patch a Valid or subbed bin: What is meant with this is that you need to patch a valid or subbed CAM to the script you are currently running. Although the 3M or activation that you might be using has been working fine and not getting hashed, it will go 745 if the CAM becomes blacklisted. (Search for “Patch Valid bin to 3M”)

What the misuse of the above terms does is causes confusion, especially with newer people to the hobby. Someone loads a “Valid” (not being hashed, no freezing, etc) 3M to their card and it happens to be a .BIN file. They figure the script is ‘valid’ so the ‘bin’ must be valid, yet everyone is telling him or her to load a valid bin to their card. Can be very confusing!

[KHJ]

sorry Mark, and Mili if these thread offends you but I thought some of this info would help clear up a few things for the new guys

[KHJ]

I found this while surfing the net and thought it was very interesting. I am not sure how correct this information is but thought some of you might want to read it.

Call Extension Meanings and Remedies

Directv On Screen Messages

Meanings and Solutions

==============================================
For ordering information, please call customer service, ext. 721

What it means: The Channel this Message is appearing on either does not have its tier on the card or the Tier is on the card, but has been wiped.

What to do: For HU Cards. If the file was an Extreme Hex File then use the "Add Tiers Only" Option in ExtremeHU. If it is a .bin or .IMG file, then you will need to reinstall. If you are a legit Subscribed Customer, you will need to call Dave and have them add the Channel(s) to your lineup.

=============================================
Please stand by

What this means: Your card is not currently at DSW0006, this usually happens during a hashing, this happens because DTV wants you to have the Card at DSW0006 so it is ready to execute Dynamic Code.

What to do: Simply let it Update to DSW06 in the receiver. This should take no longer then a few minutes to do. Unlike the USW's, the DSW's are always in the stream.

==============================================
Please insert a valid Access Card

What it means: These Days. this message can mean a Large amount of things.

HU Card directly in the receiver:

In this case the card is most assuredly looped seeing as there is no outside factor involved to think otherwise.

What to do:

HU Card directly in the receiver:

HU Cards can be Unlooped Publicly. Use either Of the new HU Unlooping Flash/Scripts (HUFF or Ul4s) or any other publicly released unlooping file.

==============================================
Program not available in your area. Check Program Guide for alternate programming

What it means: The program you are trying to watch on this channel is blacked out in your area. This could happen with sports games. This message also appears if you tune to another Cities Local Channels that is not within your area.

What to do: With the Arrival of the new Spot Beam Satellite, All Channels outside of your range with give you this message. If your using Activation, make sure you have the optional sports tiers checked when you install Any Activation Hexfile. Check for the latest tiers as these change often.

Optional Sports Tiers:
NFL - 62E8(Off Season)
NBA - 62E3
ESPNFC - 6322
ESPNGP - 630D(Off Season)
MLB - 62EB(Off Season)
MLS - 62F1
NHL - 62E7
WNBA - 62B8(Off Season)
ESPN2 - 3375

=============================================
Searching for satellite signal. Please stand by

What it means: Your receiver cannot pick up a signal from The satellites. This also may happen when you do a reboot or reset of your receiver.

What to do: Check your dish's position to be sure it has not moved. Test the signal strength using your remote control and on-screen menu. Your owner's manual explains how to run a signal test. Make sure the cables that run from your dish to your receiver are securely connected. If you have had severe weather conditions, you should inspect your dish for tree limbs, leaves, or other items that could interrupt a signal. You may have a Transponder Problem or an LNB problem. If you had to reposition your dish, turn off the receiver and then unplug it from the outlet or power strip. Wait 15 seconds, then plug your receiver back in and turn it on. Even if your dish has not moved, try resetting the receiver to see if this clears the message. If inspecting your equipment and resetting your receiver do not correct the problem, and there is no visible weather problems or foliage in your way, then you may have to replace your LNB.

=============================================
Your Access Card is full. Please call customer service, ext. 731

What it means: Your access card has exceeded its pay per view limit. This happens if you have ordered more then 25 PPV's which is the limit for An Access Card which has 25 PPV Slots (8 Bytes Each).

What to do: Wipe of the PPV's using Extremehu 3.2 or higher.

==============================================
Channel Limit is in effect. Press SELECT to override this limit and enter password/key

What it means: The parental control Locks and Limits function is preventing access to this channel.

What to do: Clean the card in Extremehu 3.2 or higher. This should clear the password from the card. and if you want make a new password that you know.

==============================================
Channel not available

What it means: Your account is not authorized to receive the channel, or programming is not available for this channel when you are trying to watch it.

What to do: Check the Program guide or Refresh or add your tiers using the Activation script.

==============================================
Channel off the air

What it means: This channel is not being broadcast at this time.

What to do: Not all channels broadcast 24 hours a day. Refer to your on-screen guide. This message also may appear when DTV is experiencing technical difficulties with a station's broadcast. If programming is scheduled for this channel, the broadcast will resume as soon as the technical difficulties are corrected.

==============================================
For ordering information, please call customer service, ext. 722

What it means: The Tier for this Channel Has Expired (Not Wiped) usually after a few Days.

What to do: Reapply the Activation Script to your card resetting your receiver can also fix the problem. To do this, turn off the receiver and then unplug it from the outlet or power strip. Wait 15 seconds, then plug your receiver back in.

==============================================
For ordering information, please call customer service, ext. 732

What it means: You've gone above the PPV purchase limit.

What to do: Set your PPV purchase limit higher.

==============================================
For ordering information, please call customer service, ext. 745

What it means: This Message can mean a few things.

In a Straight Access Card to Receiver setup this message alone can mean that the Card has Failed the IRD's ZKT Test because the ZKT is not Valid for Said CAMiD on the Card. If you got some other message (see Your Access Card is no longer Valid, Please insert you new Access Card) Followed by ext 745 upon reinsertion of card into IRD, then it is almost certain that your CAMiD# has been Blacklisted.

This can also occur if you take out a Non Blacklisted Access Card to clean or whatever and reinsert it without resetting or rebooting your IRD.


What to do: Turn off the receiver and then unplug it from the outlet or power strip. Wait 15 seconds, then plug your receiver back in and turn it on. If the message appears again when you reconnect the receiver, Apply a new Valid bin/image to your card. .

If a Blacklisted bin/cor is your problem, then you are going to need to get a Non Blacklisted bin to apply to your card or Floppy Disk.

==============================================
Please insert your Access Card

What it means: Your receiver doesnt see your Access Card/Emulation Board.

What to do: Make sure your Access Card, or Emu Board is facing Contact pads down in the receiver, if it still doesnt work
Then

1. Emulation Board may not be fitting correctly in the receiver.
2. The contact pads in the receivers card slot may be worn out.

==============================================
Program exceeds the rating limit you set. Press SELECT to override this limit and enter password/key

What it means: The rating for the event you are trying to watch is higher than the rating limit allowed by the parental control Locks and Limits.

What to do: Set the ratings Limit higher so you can watch good stuff like 598

==============================================
Purchase exceeds the spending limit you set. Press SELECT to override this limit.

What it means: The purchase has exceeded the Per purchase spending limit

What to do: Set the per purchase spending Limit higher.

=============================================
Searching for Program Guide. Please stand by


What it means: The system has lost the signal for the on-screen guide. It may take several seconds for the on-screen guide to return.

What to do: If the guide does not come up after a few seconds, turn off the receiver and then unplug it from the outlet or power strip. Wait 15 seconds, then plug your receiver back in and turn it on. If the message appears again after you reconnect your receiver, check your dish's position and verify that the dish has not moved. Make sure the signal is not being interrupted by severe weather conditions or objects such as tree limbs, leaves, or other items. If you need to reposition the dish, turn off the receiver and then unplug it from the outlet or power strip. Wait 15 seconds, then plug your receiver back in and turn it on.

=============================================
This Access Card is no longer valid. Please insert your new Access Card

What this means: This Message will appear what Directv has either Swapped out the Version card that you are attempting to use or in most case this will appear when Directv Blacklists the CAMiD# that is on your Access Card.

What to do: If the latter is the reason for this, then you will need to apply a Non Blacklisted bin to your card.

==============================================
This showing is no longer available. Check Program Guide for other showtimes

What it means: You are trying to buy a pay per view event that has already run for more than half its broadcast time.

What to do: Check your on-screen guide for more showtimes, or use a 3m script to open all the PPV Channels.

==============================================
To request PPV capability, please call customer service, ext. 734

What it means: Your account is not set up to allow you to make pay per view purchases with your remote control.

What to do: Make sure you have 69 as your PPV Ordering Code.

If your a Legal Subscribed customer with a non hacked card call DTV and request that you be enabled to order via your remote.

==============================================
To start service, please call customer service, ext. 711

What it means: For HU Cards this may mean that Directv has Deactivated your card with an EOS (End Of Service) packet. If this is true then your Fuse byte will be 24 DB so check for that.

What to do: For HU Cards, either set fusebyte to 25DA if it is a partial Activation problem or if it is a Deactivation Problem, you will need to make sure you have no Corrupted Group keys on your card (Tier Wipe Blocking, CMD90/80 Blocking, Prevent Area Blackouts, etc...)and that the card was not Deactivated because of its NON Subbed or never subbed state. So if possible use a Subbed Bin.

==============================================
You are authorized for this program

What it means: You have successfully applied a 3m script and are able to get Sports Subscriptions or you Have applied the optional sports tiers in activation.

What to do: I dont need to tell you what to do, GO WATCH SOME T.V.

==============================================
You have inserted the wrong card

What it means: Your card has become married to the first receiver it was inserted into after it was programmed Usually this Happens with Activation Files as 3M Files have an Auto Remarry Function on them.

What to do: Unmarry the card using Extremehu 3.2 or higher.

==============================================
Your receiver cannot accept a software download or new data updates with the current access card. Please call customer service, ext. 752

What it means: You have inserted an H card into a Winked receiver.

What to do: Place an HU CAMID and HU ZKT (Winkfix) on the H card and it will work in the Winked receiver.

==============================================
Your Access Card has expired, please insert new Access Card

What it means: On HU Cards You are getting that message because you do not have all the updates to the card yet. Both the DSW(Dynamic Status Word) and USW(Update Status Word) need to be at the proper update.This can also occur when an HU card's tier checksums don't match the proper hash result of that specific tier and tier date. Also this can Occur if the Card does not have a Correct or expired Activation Date. Also at this time, this is one of a few messages you may get when Directv Blacklists your CAMiD#.

What to do: For HU Cards leave the cleaned card in the receiver and get the updates from DTV. This could take anywhere from a few hours to a week or 2 seeing as Directv does not have the USW's in the stream right now.

If you have a card that is stuck at some USW level and will not update, the fix is as follows:

==============================================
Load a copy of the .bin that will not update into ExtremeHU and in the edit mode, change the value at 3224h from 02 to 00.

Write this .bin back to the card.

Insert the card into the stream to take updates.

Use the check mark feature in ExtremeHU to verify the updates are at USW 0800 and DSW 0006. If correct, read this .bin in ExtremeHU and in the Edit mode, change the value at 3224h back to 02.

Save a copy of this .bin and write it back to the card.

If you did this and it still doesnt update then you might have CMD90 or CMD80 Blocking On and youll need to clean your card.

==============================================
Please tryagain, or call customer service, ext. 741 / 742

What it means:vice you are trying to order is not
transmitting correctly.

What yo do: Carefully repeat the service order by following the instructions shown on your television screen.

[KHJ]

I wander after all of this if I will go from "junior member" to "head copy and paste member" LOL

[mdeven]

Why would I be offended? It may help some folks....
While most of the information is correct, I disagree with some of it....
The first post is a bit outdated.... A fuse 3M is probably the easiest to write (hell, if I can do it).... It has become the major target of ECMs (in fact, most of them).... They are getting hit about twice a week.... Cloaking works great, but let's understand that, as with all methods, there is limited space on a card to write and store code to.... Every time we find a new place to hide, they're finding us.... At some point, there won't be anywhere left to hide....
The second post is gospel ;) Read it and commit it to memory....
Also good info on the Nags....
Good post :)
Don't worry about your member.... if you leave it alone, it will grow on its own :D
Mark

[mili]

Great post. Fuse is easy to write gets killed left and right though, AI is the way to go.

mili

[slimthugga]

wtf was this^^^^^^^^

[cojones]

His first post i guess he didn't know where to put it.

Anyway i have had a 4th gen ird that i think has the parent password in it and can only get around it by always starting it on channel 100 and wait for the nag to say insert your access card then put the card in and no problem. Any other way and it wants that password.