Glitching 101

[Pyotr]

Is this right? I run ROM101reader.xvb. I click on Analyze VCC. Starts out with ++--++ or somtimes lines of all + or -. It goes through this routine once then it changes to 12FF12FF.Sometimes more 12 than FF.?Using a t911/6 dips that was premodded.I've tried all different dip settingsThe plastic on the pot is pretty mangled.One thing I'm not sure of is the black switch above the pot.Looking from the front of the loader is this switch set Right or Left for glitching?
Tried differnet vcc and delay settings.Nuthin'. Its been3 days running off and on. I've read and tried most every suggestion from here and ROM10X forum.I'm about ready to ask someone to pop it for me. Thanks.

[lightning0009]

Pyotr, I'd say your are close if you are getting 12's and ff's. I finally popped another 101 with my kickass clone and it took about a week of messing around then it finally had a successful gitch after letting it run for 15 hours and then I clicked on install intercept and then that took another 6 hours, then because it was rev 008 I had to then run the rom101 007-009. xvb to install that intercept and that took another 6 hours, but then I could read it in nagra2edit v7.

[keerg]

Pyotr (http://www.dssftp.com/forum/member.php?u=786)

If your getting a good mix of 12 12"s & FF FF's then your on the right track....also means your black switch is set to glitching !!

I've got one also that I've been beating on for about a week....pain in the @ss....best results so far have been with dips 2 & 5 on and vcc 40 & 35 and keeping the glitching at default values.


Good luck, K1

[Pyotr]

Pyotr, I'd say your are close if you are getting 12's and ff's. I finally popped another 101 with my kickass clone and it took about a week of messing around then it finally had a successful gitch after letting it run for 15 hours and then I clicked on install intercept and then that took another 6 hours, then because it was rev 008 I had to then run the rom101 007-009. xvb to install that intercept and that took another 6 hours, but then I could read it in nagra2edit v7.

Thanks ,
Did you know that if VCC Analyzer pops your card,it installs the interceptor at the same time. So,it looks like your second glitching was unnecessary. So,how far the the left or right do you guys turn your pot?I don't have a meter so I can't tell what it's set to.
BTW,this loader is very sensitive. Believe it or not,I can just wave my hand over it and change the FF and 12 ratio. Magic!!!

[norton]

after quite a while i finally got a 101 to pop...here are the settings for me that finally got it with an orange nexus premod
:
Switch 2&5
PS @ 9v
Pot: 1.46 @ 20k scale
===========================================
********* SUCCESSFUL GLITCH DATA **********
===========================================
Delay: 02A3 VCC: 39
VCCStart: 39 VCCEnd: 36
DelayStart: 0280 DelayLimit: 2B8
TryLimit: 12
Elapsed: 01:41:44




my advice eould be to change your vccstart to 39 and 36 like i have mine, get to the upper limite of 12's and FF's, should be quite a bit more 12's than FF's, then start going down to get more FF's. What finally got mine to pop was that I would turn the pot a very tiny amount then let it sit and glitch for 10 minutes, then just a tiny bit more then wait....and I just kept doing that until it hit the glitch. Without a multimeter it would be impossible to get it to any specific setting with any accuracy. Just be pateint with the loader and just move the pot about as small of movement as you can and wait, then do it again, it should pop eventually.

good luck

Edit: If you change the VCCStart and End dont use the vcc analyzer, just go straight to installing the intercepter

[Devo]

no good with my Mikobu 3 only get XXX and FFF never a 12 no matter what the pot is at

[keerg]

Pyotr (http://www.dssftp.com/forum/member.php?u=786) ,
After posting earlier I tried switching to my old "Crackers URS/Timeshifte" loader. I flashed it with newd11 and tried both of the Rom101 unlocker scripts and both scripts were successful with intercept installed.

The non-007/009 Rom101 reader worked best, without changing Vcc's (default) and without changing delays (default) . The actual glitch time was 22 seconds to 5 minutes. I tried it five times !!!

note: the stuborn card I tested was a Rom101 rev007


ood luck, K1

[maxheadroom]

with respect to the black switch and setting it for glitching, can anyone please tell me if glitching=the 2 wires to the switch are shorted, or is it the other way around???