ivac soon as PPV is purchased

[Chief]

Sounds like key corruption in that particular bin to me, Sofa..and there are lots of things that are possibly responsible. If the bin was originally an 0700 USW bin and someone forced an 0800 update onto it instead of letting it take a natural update in the stream...that can cause it...tier locks, checking "prevent tier wipes", patching CAM's and ZKT's...all possible culprits. You can spend a considerable amount of time chasing the problem down...and fixing it. One thing you will probably have to do for sure, is put the sub bin back on the card, just by itself, and leave the card in the stream several days to allow it to take natural tier and USW/DSW updates.
My suggestion? Use your other bins for activation, save this one for when you want to 3m the card.

[Chief]

This is long and somewhat technical..but worth viewing. It gave me a much better understanding of the relationship between a bin and an activation script..what affects it..what we can do to improve it...

Cut and paste from another site. Sorry, wish I could take credit for the tech. I'm damn good, but not THAT good. :D

The problem with activation
« on: Aug 23rd, 2003, 11:57pm » Quote Modify

--------------------------------------------------------------------------------
It's about your bin. Does it have the right group keys contained in a USW 0800 update that was taken by the card in the stream?

Here's what is happening now...

Chances are you have corrupted group keys. Bins that have not been updated in the stream when the USW 0800 was added to the bin will have problems with activation when ins42 is normally run. Now DTV is shutting down bins or erasing the tiers completely.

People have been reporting getting 711'ed on clones of subs running activation and even some private 3M's. They are targeting corrupted group keys on BINs which are not otherwise on the "blacklist".


A set of 3 Packet sequences are being sent signed with the Public Key and that clear's bit 2 of the blackout byte at 251Eh. The next packet is signed with the Group Key and sets bit 2 of the blackout byte at 251Eh. The final packet is signed with the Public Key, but uses a group CAM ID filter matching the previous Group Key packet. It tests if bit 2 of 251Eh is set and, if so, opens filters. Then, it flips the state of the filters. On a card with a valid Group Key, bit 2 of 251Eh would be set, the Cmd25 would close the filters and the Cmd75 and Cmd3E that follow would not be executed. However, on a card with a corrupt Group Key , bit 2 of 251Eh would NOT get set by the Group Key-signed packet, so the Cmd38 would NOT open filters. Therefore, Cmd25 would flip the filters state from closed to OPEN which would allow the Cmd75 to wipe the 251Fh guide byte to 00 and on activation and "some" 3M's the Cmd3E to deactivate the fuse bytes to 24 DB.


Here is the solution to the problem.... you must get the USW 0800 group keys from the stream and get the bin updated or you cannot use that bin with activation!!

1. Write bin to card.Use 0700 full update hex if card not at 0700 already.

2. Read card, edit bytes at 3224 to 00. (It is probably 02 right now.) Re-write eeprom to card.

You can do this in extremeHU by reading your bin at USW 0700 then scrolling down to the 3220 address in the eeprom window then right clicking your mouse. Turn edit mode on and change the bytes at address 3224 to 00. Then rewrite the bin to the card.

3. Let card take update from stream. You can verify the update by clicking on checkmark in extremeHU and seeing if USW is at 0800.

4. Read card, edit 3224 bytes back to 02. Save bin.


Some bins are receiving the EOS (end of service) signal through the stream and are being deactivated because the account has been turned off or is scheduled to be swapped. In that case, if the updated USW method isn't working, the EOS is the reason why. The bin should be discarded or used with a 3M until it's blacklisted.

If your subbed bin is updated to USW 0800 in the stream, paid up and a swap has not been initiated, activation will work properly and you will not be having any problems.

Also the reason why you need to manually change the USW to 0700 is the byte at 3224 is normally 02. We are changing it to 00 manually because this FORCES the card to take the USW 0800 update in the stream. ONLY the stream udated USW 0800 will work now.

Before the newest hashing, it didn't matter that much where the 0800 update came from, now it matters. Before it was only hashing local channels and shutting them down, now its also resetting the fuse byte and wiping off channel tiers which makes the card not work at all.

The only way to tell if the USW 0800 key was done in the stream or manually is to compare the bin when it was USW 0700 to what it is now at 0800. If the 12 bytes starting at 2EEC are the same, the update did NOT come from the stream. If the 0800 bin's bytes at 2EEC are different, (the key is 12 bytes long) they were likely stream updated.

I just did one 0700 bin yesterday to see if 0800 was still in the stream and it was because the card took the update. The 0800 update is a rolling update meaning that "groups" of bins are sequenced and take turns in the stream. I don't know how many times per day the rotation is run so it may just be bad timing if the card doesn't update. Keep trying. It will work.

They are also working on a new hex file that fixes the blackout bytes.

None of this implies that if the bin has been deactivated by Dave that it won't go 711 on you. Partially activated subs get shut down regularly in the stream usually because of non-payment. That fix may never happen because 711 bins get blacklisted (745) sooner or later, usually sooner. What they are fixing now is the problem with valid subs that go 711 because of the hashing on the blackout bytes when activation is used.

In the meantime, I suggest that anyone who has a valid subbed bin check the "add tiers only" box when applying activation. Clean bins will not work so DON'T CLEAN THE SUBBED BIN ON THE CARD IF YOU DO IT THIS WAY! You may not get locals to hold but you won't miss anything else.

[quazievil]

This is perfect!

I logged in today to ask for help and low and behold this answer is already here. Of course I'm not at all surprised. I've been having that very problem with the 711 message, read the card and noticed the fuse byte re set to 24 DF form 25 DA.

Chief my question to you or anyone else who cares to answer is how or where do i get the 0700 full update hex.?

[Chief]

Quasi, will this work for ya? ;)

[quazievil]

Thanks Chief. I knew you'd have the meds to cure what ails me.

By the way i have this rash.... :p

[Chief]

Better have a heart-to-heart talk with your sweetie...I'm afraid that my files won't do you a lot of good :p

[cojones]

........and you thought your rash was a problem?
http://ebaumsworld.com/forumfun/misc16.jpghttp://216.40.249.192/s/ups/DeNiro/needs_a_shave.gif