NEWS!!! S02 card's are hacked!!

[eric keri]

Found out from another great site that the s02 cards are hacked.
We will start seeing stuff for them.

[Ca$h]

If what you say is true then please tell us more was it payware or was it freeware what rev's does it work on how do you glitch the cam need lots more info or if freeware you could post it here for all to see there are rumors of a payware type of hack but at this time that is all it is a rumor and nothing more there has been no proof of it

[Birdie]

We have had this before and yes SO cards have and are hacked, The big issue is in the blocker. So far it is a one shot deal, Load em watch tv then get a new card next time cause you are not getting back in the second time. 39 bucks a card though is cheap just clone your ird to a sub number and the so card then edit tiers decent without making it a huge target and so can run at least 6 months.
No PM's on the topic, Just verifying that this is correct information.

[Birdie]

Not to excited until I can do more with rom 206@78A, That is my project at this time.

[eric keri]

We have had this before and yes SO cards have and are hacked, The big issue is in the blocker. So far it is a one shot deal, Load em watch tv then get a new card next time cause you are not getting back in the second time. 39 bucks a card though is cheap just clone your ird to a sub number and the so card then edit tiers decent without making it a huge target and so can run at least 6 months.
No PM's on the topic, Just verifying that this is correct information.

Yea but don't you think if it was public that some other mods that didn't know about will get a blocker going for it.

O same here. I have a few 206 @78A!

[Ca$h]

well i have yet to see any software posted in public at this point so for most folks buying a S01 or S02 card would be a waste of money inless they have the know how to make there owen hack

[eric keri]

well i have yet to see any software posted in public at this point so for most folks buying a S01 or S02 card would be a waste of money inless they have the know how to make there owen hack


DID you read this!!!!

We will start seeing stuff for them! it doesn't mean right know!!

[Birdie]

The codespace is completly different and so far blockers cannot be added but since these cards are cheap is is a decent card to use. Just don't get nuts on wide ppv stings and the cards run fine. I push mine 6 months with everything except the 500 movie ppv's and since no blocker they autoroll and take and process all emms just fine. I don't wish to discuss this any farther. Cardcoders has some scoop on it more if you wish to read. I did not hack the so card and someday soon it would be nice to see it public, I think it will be very soon.

[Birdie]

OK, All I can tell you all is they do work, Save them or stockpile while they are cheap, Once public the prices are bound to rise. Remeber getting rom 102 rev 103 virgin for 20 bucks ? I do

[eric keri]

Once it goes public it will definately need a blocker!

[SEARCHY4]

the rom 102 cards are cheap right now and dont see the s01 cards going much higher. this hack has prob been around long time ago. it was kept to the very exclusive crowd.

i understand the code space is differant but unless the card is very small is bytes then i dont see why a blocker cant be made. if this is true. then you can count on if a hack is ever made for n3 then say goodbye to blockers. i dont think so. i just cant grasp the card being that differant. there will always be a otp rom and ram area. unless the card is flipped flopped like ram otp rom ect. then there would be trouble but then it wouldn't pull a normal dish atr from it's standard algo rule. from what i see the atr is normal so it follows the same algo as 102 103 ect.

who knows guys just remember it's all rumors right now.very beleavable one but still one. we dont have much time left on them but very exciting to play with a new toy.

it seems this time around n2 days we have been fed as needed. unlike the past n1 days. hacks came out as fast as the card was updated.

[iczer01]

more than rumors has been verified

[mannybeef]

well it does seem a admin at a site has received
a wide open so2 card hes using with his private numbers.


it is for real, but it may still be a while before its public.
and apps are prepared.

[Wiley-X]

The only time I will consider it verified is when it is working in MY receiver...LOL

[pitbullracin]

they are running blockerless and yes its only payware now. but you know how that goes -- it will soon be freeware -- hopefully. you are sent the card preprogramed and boxkey and ird info to change tsop.

[chemlab]

Before anyone runs out and buys dozens of cards, let's all remember a card swap is comming... so2 cards wont work after that point, and unlike rom102/103's you can't write to their codespace so they wont be useful like rom10's were for nagra2.

[pecker88]

if we can't write to codespace, that also means that DN can't either...hopefully

[cmd82]

The only time I will consider it verified is when it is working in MY receiver...LOL
this is were i stand along with alot more

[MIKEHAWKISLARGE]

Would love to see it public since soon they are no good (or maybe still) after the card swap

[rover1947]

What about emulation for so1 and so2 Would a person get locked out of a aux card?

[gun smoke]

Is there anything I can do with my ROMS01,dish has sent me one but I have not activated it yet.I was waiting to see what the future hold's for them.
http://www.dssftp.com/xcart/images/T/product_18.gif

[SEARCHY4]

still waiting.only 4 months left to use them.

[Wiley-X]

still waiting.only 4 months left to use them.

You are assuming that the only cards that will be useable are the ROM240/241... Sending 20+ Million cards through the mail will probably take longer than 4 months... I don't care how many service centers you have working on it.

JMO

~Wiley~

[Birdie]

A decent half ass interesting conversation thread for once. Want to avoid NAG 127 card swap every 2 minutes, Clone you IRD number to a rom 206 unit thats subbed.
Pretty purple cards, I think they are more dark purple/blue-ish. Much prettier than the puke yellow ones. G3 we are ready leaks are already out.

[eric keri]

You guys really think The S0X cards are going to be no GOOD in about 6 months??? Think about it. Why in the hell would dish send out S0X cams to cardless receivers if they are only going to be changed inless then 6 months.
Rom102 are going to be out No doubt.I believe the Swap is going to be over to S0X, rom206 and rom241's.
But once the S0X script is public soon after the S0X cams are out too.

Rom102's good for another 8 months (estimate)!!

They are only swapping out the IRD's that have ROM102's in them.

As anybody seen or have been swapped from a rom206 YET????????

I'm thinking the rom206 are going to swapped out for the Rom241's. But the S0x's are still going to be around for awhile... Hoping once public we get some good coders to get a blocker up ASAP. Without a blocker on them! They will be mecm'ed/targetted FAST!!!!

[Master_Neo]

I have read on several forums, Including Here, 322 as well other IRD,s that
currently have 103 CAMS are getting SO cards for N3 replacements, so I would say SO cards are here to stay.
As well I have read NO posts saying 206 cards are being swapped period.
N2 and N3 controll words have been in the stream since introduction of 206 cards I was told recently, So if thats correct then SO cards are N3 compatible.
A personal note, I bought 6 311 recievers off ebay last week, 1 has a onboard chip thats SO2 , another has a 206 -onboard card according to SYSTEM INFO on recievers.
So in reflection of that, both SO and 206 are likely to be used for N3 both those recievers are REFURBS

[ruciz]

So the once rumored SOx checksum validations are not so accurate? codespace can be changed on these cards without the checksums hollering? otherwise theres no way to get the tiers altered?

I take it will be freeware soon, the ROM102 cards are nearing an end of run on bev.. would be nice to be able to migrate over to the SOx. Anyone know what processor ST used in this card??

[rg6a]

I don't know what the problem is with Paying for Privates, once it goes public the game is over!

Man are you guys CHEAP, something is worth (most of the time) what one pays for it.

Hey, as long as the price is moderate and it works what's the problem?


PS funny how many here will pay $3+ @ Starbucks for a cuppa' and thing nothing of it!

[Ohms]

Remember, N2 might be hacked on the S0x cards, but not N3. Still, if the cards have been opened, that is for SURE a step in the right direction. int21h said he opened them a long time ago. That's one guy I believe.

[satnutzz]

.............hmmm..............IF.....the northern provider is swapping ALL current roms......102/103-SO1-SO2-206.........to 240.............WHY...would the southern provider...............not do the same???...............SO/206.....WILL.......be swapped to 241 also...........

[eric keri]

.............hmmm..............IF.....the northern provider is swapping ALL current roms......102/103-SO1-SO2-206.........to 240.............WHY...would the southern provider...............not do the same???...............SO/206.....WILL.......be swapped to 241 also...........

Then why are they wasting there time sending out S0x cams??

[Birdie]

Then why are they wasting there time sending out S0x cams??

It's a early christmas gift from charlie.

[fierofan8488]

They are only swapping out the IRD's that have ROM102's in them.

As anybody seen or have been swapped from a rom206 YET????????
Confirmed the 206 in a 301.013 is being swapped for 241. Mine swapped last week. So the once rumored SOx checksum validations are not so accurate? codespace can be changed on these cards without the checksums hollering? otherwise theres no way to get the tiers altered?
Tiers can be altered because they are located in dataspace not codespace. We cant alter codespace because of the checksum, charlie has the correct way of calculating the checksum so therefor he can make codespace changes at will.

[Wiley-X]

It's only a matter of time before the dude with the acid wash gets into the ASIC and hooks us up with the MAPROM and the codespace. The methodology is there and there are people that know how to do it...the only question is who is going to pay them?? Electron microscopes and cool lab equipment ain't cheap.

YouTube has a cool video on a dude hacking into a smartcard using liquid plummer and common household cleaners.

[Jerryo]

:rolleyes:This is very easy to answere. FTA got the money to buy anything. It is sad but true. I am sure they ( fta ) got a few millions ready for the right hack. I am not a big fan of fta's but look around they are everywhere.

[ruciz]

Tiers can be altered because they are located in dataspace not codespace. We cant alter codespace because of the checksum, charlie has the correct way of calculating the checksum so therefor he can make codespace changes at will.

Thanks, makes perfect sense. I realized this after posting but your confirmation is appreciated.

FTA may have the money, but money isn't guarantee that N3 streams will be 3M'd. No sense sinking 10 mil into a hack project that turns out a flop if the hardware can't handle the processing required to satisfy the video/audio encryption.

Everything is up in the air right now with all this, B3v only has a few million at most subs to swap cards with, there's only 30 million Canadians and the only satellite subs generally are people who can't get cable (as cable is cheaper and more reliable, and comes with phone and internet bundles). I have my opinions on it all, but I am not going to go PISSING in the pot... When 'it' happens we will all know, and take down mili's servers along with many other info sites I am sure...

[singh60]

In order for FTA to work on N3...the Rom 241 card needs to be hacked first, correct? Since the FTA hack will be based on plastic...so a plastic hack needs to happen before anything comes for the FTA

[ruciz]

not necessarily singh60.

a dump can be read from the physical chip and translated into FTA language - to put simply... this process is very risky = very expensive. Also no guarantees it will work, as you have to code from the ground up...

A card hack already working makes this a much more easier, cheap, and quick, as you are basically translating whats already there...

[alsouthster]

Remember, N2 might be hacked on the S0x cards, but not N3. Still, if the cards have been opened, that is for SURE a step in the right direction. int21h said he opened them a long time ago. That's one guy I believe.

ohms back in da house!!!

[Wiley-X]

not necessarily singh60.

a dump can be read from the physical chip and translated into FTA language - to put simply... this process is very risky = very expensive. Also no guarantees it will work, as you have to code from the ground up...

A card hack already working makes this a much more easier, cheap, and quick, as you are basically translating whats already there...

What are YOU talking about???? Plastic must be glitched to be dumped...if it's glitched, then it's unlocked.

FTA is 100% based on the exploitation of what plastic coders have provided.

There has NEVER been an FTA hack that didn't come from plastic. EVERYTHING that resides on an FTA chip is the result of Plastic hackers.

FTA just EMULATES what the plastic cards does.

I just do NOT see FTA makers investing ONE RED CENT into development of an N3 hack. They will wait until someone else does it and steal the code...just like they have for the past five years+

[Tom2004]

FTA will be first to hack N3, sit back and watch and learn from them. $$$$$$$ t a l k s

[jorge388851]

ok new scrit for sw card`s



'************************************************* *
'* FOR STREAM LOCKED ROM S01 REVISION 640 *
'* *
'* USES ONLY NEWDRS.HEX WITH LOADER * '* * '* *
'* LOADER MUST USE MAX4619 OR ADG733 SWITCHES *
'************************************************* *
Option Explicit
Dim Shell
Set Shell = CreateObject("WScript.Shell")
Dim StartDate
Dim FileName
Dim OutFile
Dim BuffFlg
Dim bytes2
Dim LoopCntr
Dim RstFlg
Dim DlFlg
Dim bytes
Dim Dump
Dim Uflg
Dim Acnt
Dim Mix
Dim VS1
Dim VT1
Dim DS1
Dim LP1
Dim LP2
Dim T1
Dim T2
Dim T3
Dim T4
Dim T5
Dim T6
Dim T7
Dim VG
Dim DD
Dim RT
Dim GT
LP1 = 1
Dump = 18432
BuffFlg = 0
LoopCntr = 0
RstFlg = 1
DlFlg = 0
Uflg = 0
VT1 = 10
DS1 = &h3611
DD = &h3641
GT= 9
RT = DS1 'Do not change any values above this line
'^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^^^

Sub Main()
Setupunlocker()
If CheckChipVer <> 1 then
Sc.MsgBox("Flash Version NDRS needed to run this script" & VbCr & "Flash your Loader with NewDRS.hex")
Exit Sub
End if
' These, AND ONLY THESE , are the variables you can change for rom S01 any revision up to 640/644
LP1 = 80 'Number of tries per delay FROM 20-100 in multiples of 20
VS1 = 80 'YOU CAN CHANGE THIS FROM 02-255 = semi-automatic VCC range - Loader dependent
Mix = 0.1 'Glitch VCC resolution - attempts per VCC = 1/mix
'^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^^
VG = VS1
sc.verbose = 0
Sc.Write("A0") ' turn led off
Clearoutputwindow
Call GetFileName()
If ChkCard() = 0 then
Fs.FileClose(OutFile)
exit sub
End If
If T7 = 1 then
Sc.MsgBox("Card not present or is unresponsive." & VBCr & " Unable to continue.")
Fs.FileClose(OutFile)
Exit Sub
End If
sc.verbose = 0
Sc.Write("06 0E 03 01 03 9A 00") 'reset card
sc.read(02)
bytes = sc.getbyte(1)
sc.read(bytes)
sc.delay(16)
Sc.write("2A 6023 210020A0CA00001A041801018600AA9D9D9D9D9D9D9D9D9DAE 69CC7A9BBE000000000088 0E108500")
Sc.Read(2)
bytes = sc.getbyte(1)
If bytes > 5 then
sc.read(bytes)
bytes = sc.getbyte(0)
bytes2 = sc.getbyte(3)
If bytes = 18 and bytes2 = 132 then
Sc.MsgBox("Revision 640/641 or higher code not active on the card." & VbCr & " Card may be open or revision masked." & VBCr & " Unable to continue.")
Fs.FileClose(OutFile)
exit sub
End if
End If
StartDate = Now()
Print "Initial Parameters = Delay:" & HexString(RT, 4) & " VCC:" & HexString(VG, 2) & " Glitch Type:" & HexString(GT, 2)& vbcr & vbcr
Do
'sc.verbose = 1
Sc.Write("B5" & HexString(VG, 4))
Sc.Write("A0")
Acnt = 0
Do
Sc.Write("06 0E 03 01 03 9A 00") 'reset card
Sc.Read(02)
Bytes = Sc.Getbyte(1)
If Bytes > 25 then
Sc.Read(27)
Exit Do
End if
Acnt = Acnt + 1
If Acnt > 5 then
Sc.MsgBox(" Check Loader Settings. Invalid or no atr. Card may be fucked." & vbcr & " Unable to continue.")
Fs.FileClose(OutFile)
exit sub
End If
Loop
'sc.verbose = 1 'debug the packets
Sc.Delay(5)
Sc.write("09 6004 21C1018869 84 00")
Sc.Read(2)
bytes = sc.getbyte(1)
sc.read(bytes)
Sc.write("09 6004 21C10144BC 83 00")
sc.read(2)
Bytes = Sc.Getbyte(1)
Sc.Read(Bytes)
Sc.Write("39 702E 8D00A7000000000000000000000000011E05007AC400801105 71809CA64BB76B1864CD7C1631768008AE55CC7A9B38 40" & HexString(RT,4) & HexString(GT,2) & "0E20 85 00")
Sc.read(2)
bytes = sc.getbyte(1)
If bytes > 5 then
sc.read(bytes)
bytes = sc.getbyte(0)
bytes2 = sc.getbyte(3)
If bytes = &hD8 and bytes2 = &h55 then
Sc.verbose = 1
UFlg = 1
End If
If bytes = &hD8 and bytes2 = &h6F then
Print "-"
VG = VG - mix
RstFlg = 0
Else
Print "+"
RstFlg = 1
VG = VG + mix
End If
Else
PRINT HexString(GT, 2) & "Rst" & HexString(VG, 2)
RstFlg = 1
VG = VG + mix
End if
If Uflg = 1 then
Print " !!!!!!!" & VBCr
Sc.Write("A1")
Shell.Run "%comspec% /c echo " & Chr(07) & Chr(07) & Chr(07) & Chr(07) & Chr(07), 0, True
Sc.delay(500)
print
print "******* Good response received! *********"& VbCr
PRINT " " & HEXSTRING(bytes2,2) & VbCr
Sc.Print "===========================================" & VbCr
print " " & HexString(bytes2, 2) & " was hit at: Delay:" & HexString(RT, 4) & " VCC:" & HexString(VG, 2) & " GlitchType:" & HexString(GT, 2) &VBCr
print " Elapsed: " & TimeDiff(StartDate,Now())& vbcr
Print " VCC Resolution: " & mix & vbcr
Print " Delay Range: " & HexString(DS1, 4) & " to " & HexString(DD, 4) & VBCr
print
Call SaveEeprom()
PRINT "EEPROM SAVED AS " & Filename & VBCR
SC.DELAY(700)
PRINT "********************************" & VBCR
PRINT "* Rom S01.. CAM NOW OPEN!! *" & VBCR
PRINT "* PROCEED AS NORMAL *" & VBCR
PRINT "* GOOD LUCK! :-) *" & VBCR
PRINT "********************************" & VBCR
exit sub
End If
If VG < VT1 then
VG = VS1
End If
LP2 = LP2 + 1
If LP2 > LP1 / mix then
ClearOutputWindow
RT = RT + 1
LP2 = 0
print
print "" &vbcr
print "Ram Intercept Installed. Trying to Open the S01.... Delay:" & HexString(RT, 4) & " VCC:" & HexString(VG, 2) & " Glitch Type:" & HexString(GT, 2) & VBCr & vbcr
sc.print "Elapsed = " & TimeDiff(StartDate,Now())& vbcr & vbcr
If RT > DD then
RT = DS1 - 1
End If
End If
If VS1 >= 254 then
exit sub
End If
If VG =< 1 then
VG = VS1
End if
GT = GT - 1
If GT =< 6 then
GT = 7
End If
Loop
End Sub
Sub SaveEEprom()
Dim ByteCount
Dim RcvdBytes
Dim i
ByteCount = 0
sc.verbose = 0
Sc.Write("06 0E 03 01 03 9A 00") 'reset card
sc.read(02)
bytes = sc.getbyte(1)
sc.read(bytes)
sc.delay(16)
Sc.write("56 604F 21004CA0CA000046044401018600AA9D9D9D9D9D9D9D9DCD54 87718092C6BE3CBF26023CBECD45239BB6BEA1C02713A13826 04A680B7BEAE05A6FF4A26FD5A26F920D9CD5492CD5428CC7A 959D3000DF 0E10 87 00")
Sc.Read(2)
Bytes = Sc.getbyte(1)
Sc.read(bytes)
Sc.write("13 0E25 600A 210007A0FF000002480033 55" & HexString(dump,4) & "00")
For i = 1 to Dump step 1
sc.read(1)
RcvdBytes = Sc.getbyte(0)
call Fs.FilePutc(OutFile, RcvdBytes)
Call Sc.ProgressBox ("Reading Eeprom", ByteCount, Dump, "Saving Bin...")
ByteCount = ByteCount + 1
Next
Fs.FileClose(OutFile)
end sub
Sub GetFileName()
FileName = Fs.FileSaveDialog("", "Please select a name for the new bin file", "Default.bin")
If FileName <> "" Then
OutFile = Fs.FileCreate(FileName)
end if
end sub
Function HexString(Number,Length)
Dim RetVal
Dim CurLen
RetVal=Hex(Number)
CurLen=Len(RetVal)
If CurLen<Length Then
RetVal=String(Length-CurLen,"0") & RetVal
End If
HexString=RetVal
End Function
Function CheckChipVer()
CheckChipVer = 1
sc.write("90")
delay(80)
If sc.read(4) <> 4 then
CheckChipVer = 0
Exit Function
End if
If getbyte(0) <> &H4E then CheckChipVer = 0
If getbyte(1) <> &H44 then CheckChipVer = 0
If getbyte(2) <> &H52 then CheckChipVer = 0
If getbyte(3) <> &H53 then CheckChipVer = 0
End Function
Function TimeDiff (StartTime, EndTime)
Dim Hours, Minutes, Seconds
Seconds = DateDiff("s", StartTime, EndTime)
If Seconds > 90000 Then Seconds = 90000
If Seconds < 0 Then Seconds = 0
Minutes = Seconds / 60
Minutes = Fix(Minutes)
Seconds = Seconds - (Minutes * 60)
Hours = Minutes / 60
Hours = Fix(Hours)
Minutes = Minutes - (Hours * 60)
Seconds = CStr(Seconds)
Minutes = CStr(Minutes)
Hours = CStr(Hours)
If Len(Seconds) = 1 Then Seconds = "0" + Seconds
If Len(Minutes) = 1 Then Minutes = "0" + Minutes
If Len(Hours) = 1 Then Hours = "0" + Hours
TimeDiff = Hours & ":" & Minutes & ":" & Seconds
End Function
Function ChkCard()
sc.verbose = 0
ChkCard = 1
Print ""
Print " Checking Card's Eeprom Revision ......." & VBCr
sc.delay(2000)
ClearOutputWindow
Sc.Write("06 0E 03 01 03 9A 00") 'reset card
sc.read(02)
bytes = sc.getbyte(1)
If bytes < 27 then
T7 = 1
ClearOutputWindow
Exit Function
End If
sc.read(bytes)
sc.delay(16)
T1 = chr(sc.getbyte(16))
T2 = chr(sc.getbyte(17))
T3 = chr(sc.getbyte(18))
T4 = chr(sc.getbyte(23))
T5 = chr(sc.getbyte(24))
T6 = chr(sc.getbyte(25))
T1 = T1+T2+T3
T4 = T4+T5+T6
If asc(T4) = 0 then
T4 = "000"
End If
Print " Rom " & T1 & ", Rev " & T4 & " found." & VBCR
print
Sc.delay(1500)
If left(T4, 2) = 24 then
If mid(T4, 3,1) > 4 or mid(T4, 3,1) < 2 then
ChkCard = 0
exit function
End If
End If
If left(T4, 2) = 10 then
If mid(T4, 3,1) > 8 or mid(T4, 3,1) < 6 then
ChkCard = 0
exit function
End If
End If
If T1 <> "S01" then
ChkCard = 0
exit function
End If
End Function
Function setupunlocker()
Wx.BaudRate = 115200
Wx.ResetBaudRate = 115200
Wx.Parity = 0 ' 0 = None, 1 = Odd, 2 = Even, 3 = Mark, 4 = Space
Wx.StopBits = 0 ' 0 = 1 stop bit, 1 = 1.5 stop bits, 2 = 2 stop bits
Wx.DTRControl = 0 ' Initial state of DTR 0 = off, 1 = on
Wx.RTSControl = 1 ' Initial state of RTS 0 = off, 1 = on
Wx.ResetDelay = 100 ' In microseconds
Wx.ByteDelay = 10 ' In microseconds
Wx.RxByteTimeout = 3000 ' In milliseconds
Wx.ResetMode = 2 ' 0 = No Resets, 1 = ISO Reset (Expect a ATR), 2 = Device Reset (No ATR)
Wx.ResetLine = 1 ' 0 = Toggle RTS for Reset, 1 = Toggle DTR for Reset
Wx.ByteConvention = 1 ' 0 = Inverse, 1 = Direct
Wx.FlushEchoByte = 0 ' 0 = no flush, 1 = flush - A Phoenix interface will echo each byte transmitted.
Wx.FlushBeforeWrite = 1 ' 0 = no flush, 1 = flush - Flush the receive buffer before each write to strip off Null bytes.
Wx.IgnoreTimeouts = 1 ' 0 = Abort script on a receive timeout, 1 = Ignore all receive timeouts
Wx.ResetAfterTimeout = 0 ' 0 = Don't reset after a timeout, 1 = do a reset after a timeout - Not used if "IgnoreTimeouts=0"
Wx.LogTransactions = 0 ' 0 = Don't log transactions, 1 = log transactions
Wx.DisplayUSW = 0 ' Display USW after script complete 0 = no, 1 = yes
Wx.DisplayFuse = 0 ' Display Fuse after script complete 0 = no, 1 = yes
End function











****** Good response received! *********
55
===========================================
55 was hit at: Delay:31F0 VCC:0A GlitchType:07
Elapsed: 00:01:10
VCC Resolution: 0.25
Delay Range: 31F0 to 3260

EEPROM SAVED AS C:\ Unlockers\Rom S01 Rev602
********************************
* REV 602 CAM NOW OPEN!! *
* PROCEED AS NORMAL *
* GOOD LUCK! *
********************************

[ruciz]

FTA will be first to hack N3, sit back and watch and learn from them. $$$$$$$ t a l k s

I agree, their precious boxes sitting in warehouses ain't worth dick squat to anyone.. historically FTA has taken public hacks and made them work on their boxes.. This sold their units fairly well.. but if no ones buying units anymore no one is making money. Look at what they 'invested' into the Map57 & map3B algos and how much they gained.. Pretty damn good investment. If they know they will be first on the block with a working hack their boxes they are going to FLY off shelves at 200% of their retail value without a blink, even if its only for a few months of support...

This is all spec, as no one knows the future. Hell Rom102s may never stop working just like the Rom10s... but I have a gut feeling an FTA hack will be public long before any reliable cam hacks are. Good thing is FTA can do it its a hell of a lot easier for emunation guys to R&D that bin than a 240.

[Jerryo]

:DLooks like N3 is already here check Es 6 @ 72.7 . Bins right now are only capable of decoding N2 encryption. The bright side is, the coders can now start practicing on a live N3 broadcast! Live long testing!!!!

[singh60]

How many different types of cards are currently being used on d*sh?...Rom 102 are the majority correct?...then there's the S0X, Rom 206.

So are they swapping all these cards with a Rom 241? Also whats the difference between Rom 240/241?

[blazin6969]

I believe in the US the 612's have the 240/241 so their is the 206,sox and 240/241...

[mannybeef]

jorge, ummm

that script is different from all the fakes lol
thats for sure

has it been leaked ? hmmm

[ggjayjay]

Anyone have any good settings to unlock them!! I just see people say I poped 1 or show they poped them but No loader or Settings!

[pecker88]

Anyone have any good settings to unlock them!! I just see people say I poped 1 or show they poped them but No loader or Settings!

Save your S0x cam. All the scripts that have came out to date are nothing but fakes. Think about it...a brand new card hack gets released, its going to be HUGE news, not posted by someone in an OLD thread.

When/if its ever here, their won't be a question as to whether its real or not.

[Jimmy Dean]

:cool:

This hobby continues to repeat itself?

[A-Team]

How many different types of cards are currently being used on d*sh?...Rom 102 are the majority correct?...then there's the S0X, Rom 206.

So are they swapping all these cards with a Rom 241? Also whats the difference between Rom 240/241?
241 = dish 240 =Bev

[BigDawg]

Any new NEWS on this topic? I assume the above script is not the real deal!!!

[eric keri]

Any new NEWS on this topic? I assume the above script is not the real deal!!!

It's still private. Once the S02 script is release I believe the Rom206 script will be too.

Don't kill your S01 cards on scripts that people put up, wait for the real one. You will know when the real script is avaliable. IT WILL BE BIG, NAD CONFIRMED WORKING SCRIPT!

[fatboy2005]

I don't understand why the S01 card hack is kept private. In a few short months N2 will be gone and we will not have a chance to mess up our cards.

[unclekracker104]

dish swaped out my rom 206 322 box today so i dont know whats going on i just had got it a lil bit agao

[JARJOZ]

New 241 cards for 311 - 522 - 510
Just reporting

[BigDawg]

hummm, still no NEWS on this topic.... I guess it has not been hacked????

HD

[NICKY__6]

think the s02 has stayed private. i was told long ago from real source that they were working with them

[Zerokill]

Haven't seen it personally... a few people claim they are hacked...but with the swap so close...if they REALLY were, then we should have seen something by now.

Then again, the A21 unlocker script for ROM10 was released like a day after the closing loops started in the final days of the N1 stream.

[muleman]

Dont use this FOR STREAM LOCKED ROM S01 REVISION 640 that is posted you will loop your card i have loop two with it

[BigDawg]

WITH WHAT????



Dont use this FOR STREAM LOCKED ROM S01 REVISION 640 that is posted you will loop your card i have loop two with it

[vmod32]

Dont use this FOR STREAM LOCKED ROM S01 REVISION 640 that is posted you will loop your card i have loop two with it

swift.... Guess you missed the posts about it being fake..

[pecker88]

yeah, get your S0x cams while they're "cheap" so hopefully something comes out...
LOL, gimme a break!

[rg6a]

yeah, get your S0x cams while they're "cheap" so hopefully something comes out...
LOL, gimme a break!

If they can be spoofed like the Rom10 was, you'll be bustin' yer' arse scoping out eBay! ;-)