How about a "out of the box" hack?

[unlisted]

Does anyone have an idea of what data is exchanged and what type of encryption
if any is used during the call out procedure? The idea being to reroute the call to a machine emulating the mothership and having received the purchases from the calling ird, clear its purchases. Rerouting the call itself should be easy using a hardware solution to ignore digits and "ring down" to the emulating pc.

[spanga]

problem is that only the ordering commands are sent by the ird.via the phone line....that and a message that the cam is full and perhaps what was ordered (not sure exactly what is sent at that point but it initiates billing)...the activation and cleaning commands are then sent via the stream....the phone communication is likely not even encrypted....the best you could do is possibly get your cam cleaned by tricking the so called mothership into thinking that you had dumped the info about what you ordered....seems to me they could put an end to that, plus it would leave you out there for identification....point is all the good stuff is done by the stream...

[unlisted]

the clean may be sent via the stream but the activation is automatic. Up until several months ago I was using one of the first irds (it didnt look for dial tone)
and when it filled up I just restored it to an empty state- no line involved. Can anyone verify that the clean is not sent during that call, it sure would have been a no brainer when it was all set up.

[smilingjack]

Used them for years in my motorhome with no phone, order new channels, with a phone call,the signal was sent down stream and I had the new channels in minutes.
When the charge $ limit was reached I paid that amount and that amount was taken off the memory by the stream.

It is a one way link, goes in a circle, out on the phone line in by the stream.