[mili]

Let me be the first one to post here.
For XM Radio you need a DishNet (or BEV) receiver, one that has a JTAG port and a JTAG programmer. You basically clone XM Radios or subscribe to XM radio, then install a TSOP lock then cancell service and since your TSOP is locked you are keeping the service. If you have a friend with a subscription who will let you massacre his XM radio a bit you remove its TSOP, put it into an Echostar (DishNet or BEV) receiver and use a JTAG to read then save it, put a blank TSOP in the receiver and clone the read BIN onto it then put it into the new XM radio. Simple shit. The How To is here:

http://www.dssftp.com/filedownload/download/xm-hack.zip

mili

Sounds great! Any idea where I can get the equiptment and blank cards?

[mili]

JTAGs are for sale on my order page, and what blank cards?
It you meant TSOP chips look on www.digikey.com

mili

Perfect! Yes, I was talking about the TSOP chip (I thought it was card!) This is very new to me. I didn't even know it was possible to hack XM. Once I gather everything I need I'll post my results. Thanks again Mili!

[airzimzerker]

Is there a TSOP file for this anywhere. Would anyone sell one. Just trying to skip the subscritpion part of this.

From what I have read, only the Sony Plug N Play's have the TSOP style chip. I took apart a Pioneer XM and theres no TSOP to be found. I'm sure they stuck it in some other kind of eprom just to prevent an easy way to clone it. If anyone else can add to this feel free.

jkeys, just like reading/writing the dishnet TSOP only you'll be doing the XM TSOP.

[mili]

If any one of you could email me a TSOP dump of a valid XM sub I'd appreciate it. I will keep is confidential and for own use only.

mili

LOL...you guy make me laugh. the hack sounds somewhat feasable but shit, let's be honest. let's say u sub to xm radio just like u do to dave and u stop paying..don't you think you dump will be disabled? best thing to do is get a dump from someone who is paying and then you can talk about "attempting to hack this shit"

falconhack, don't mean to be rude but don't be a part of the problem..be a part of the solution. if these guys don't know what they are doing tell us why it wont work and your opinion. nobody here is gonna get a nobel prize for this shit but it would be cool to get free music don't u think?

[borg1]

Best I understand, activation is a stream of packets directed at one receiver ID# that, because of the limited bandwidth XM has to work with on top of 100 channels, only lasts 36 hours.

If you did not have a subscription and had already cloned the IRDs, you call, activate, and both your reported IRD# and your clones would be activated.

If you alredy have service, and then clone an additional unit, you must lapse service for some period (probably at least 30 days) in order to get the activation signal sent back down, which would activate both units.

This coincides with the facts I have on activating one unit, and is the theory I shall work with if successful in cloning another unit.

I agree, if there is a reputable person who needs funding to do research on XM testing, I think we need to set up a paypal fund or whatnot. Possibly even set up a strictly XM radio testing site where everyone can come forward and share ideas/findings just like the dss/xbox scene has.

I believe this is the only way to get somewhere with XM testing. Let me know your thoughts.

[borg1]

OK, All reputable hackers take one step forward.

borg1, step down

Well I think any real (Hacker) will tell you its just Zeros and Ones....

Any information on the chips used will lead us to the answers.....