[mili]

And I post what I was told. Remember I am only a parrot but a well informed one.

Nagra has changed the format of the decrypted CMD 07 video packet on some channels. Most likely, the rest of the channles will follow soon.

The old CMD 07 decrypted packet structure looked like this:

....09 01 ....100900AAAAAAAAAAAAAAAA110900BBBBBBBBBBBBBBBB.. ..

where AAAAAAAAAAAAAAAA was video control word 0 and BBBBBBBBBBBBBBBB was video control word 1. FTA boxes would simply use these keys to decode the audio/video. Echostar cams would encrypt these control words with the 16 byte session key and the IRD would simply decrypt them (redundant process designed to counter wedge hacks) to decode the audio/video.
The new CMD 07 decrypted packet structure now looks like this:

....09 01 ....100940aaaaaaaaaaaaaaaa110940bbbbbbbbbbbbbbbb.. ..

where aaaaaaaaaaaaaaaa and bbbbbbbbbbbbbbbb are not the actual control words, but some CONVOLUTED FUNCTION of the control words. Notice the cam is being instructed by 100940 and 110940 instead of 100900 and 110900. What this convoluted function is at this time is unknown. Most likely, a simple X-OR with some bytes in the Cam's RAM or IRD's firmware. This will pretty much eliminate all camless and standalone hacks that do not use echostar cards and receivers or possible both. The FTA factories in Korea will be idle very soon. It looks like the free (no pun intended) FTA ride will be over soon.

Expect Dish to implement the same countermeasures within the next few days. They also revised their cards. Only cards with the latest revision actually work now.
If the current revision cannot be unlocked, then it will be pretty much impossible for anything to work.
They are now sending down CMD04 packets whose decrypted payload is being used to X-OR the convoluted control words coming down in CMD 07. Without access to a dump of the latest revision, it is impossible to know how they are X-ORing the data. Even if one can theoretically decrypt CMD 04 (which we still can).

To re-iterate:

1. If the current revisions cannot be unlocked by nob14me, then NO stand alone hack is possible. Only a married-sub type hack will be possible.
2. If the current revisions are opened up, that still doesn't mean everything would work again because decrypting a CMD04 is very computationally intensive. Only the fastest devices would survive.

Rom10,11, Syndrome and Atmega are gone for sure because of speed limitations even if unlocking were successful. Actually, SYndrome may have worked but the designer is now behind the bars, so it is irrelavent. FTA are gone too because I doubt they could handle the speed either. All this is assuming someone can unlock the newest revision, which may not happen at all. Well, people may be watching black screens over the next couple of weeks.


mili

[erratic]

Good read! Looks like the new REV has been compromised though already, and being analysed.

[fubr]

best description I have read yet.
tell the source of this info thanks from us who wanted crow but had none!
And to please keep us posted

[fubr]

Originally Posted by erratic

Good read! Looks like the new REV has been compromised though already, and being analyzed.

Yes but stayed tuned.
SUN TSU also said to see how an opponent will react he must first be faced with an obstacle to overcome to be measured by.

In other words the first rev might be trying to bottleneck us for the kill.
This is a possible guess. I dont have $400 worth of cards to see .

[RoofleChicken]

Well that sure is gloomy...

[mili]

Exactly. What the fuck is to prevent them to loop cards? This is a Marathon not a dash. The usual cat and mouse shit. I think their target for now is FTA. I am not a technical dude only a money grubbing asshole as people like to call me so what do I know. This should be good for business I am sure I will sell many DishNet and DTV subs. With the FTAs eliminated and dealers busted I think they are doing everything they can to cut down on the working hacks. In my humble opinion what will work is:

1, Married sub clones with maybe tiers added
2, MAYBE ex married sub card/receivers and their clones where there is no TSOP mod done
3, I think the AVR-X

I will eat crows if I have to but this is what I feel will come down. Prepare for a TV-less weekend folks.

mili

[mili]

Well good news, some nice people got into the BEV cards at the latest rev, the image its on: http://dssftp.com/files/index.php?m=category&CATID=46

It is being discussed here: http://www.dssftp.com/forum/showthread.php?p=368640

mili

[Crazy1_79]

hmmmmm, I wonder who could of done that???

[kornboy89]

There is an FTA fix out for Neusat recievers, others promised fixes out soon.
cant test for myself since i dont use bev nor neusat.
but i hope we can get over this so when it comes to Dick, we'll be ready.

[ruciz]

By the looks of it there will be a fix out by tomorrow for 102 cards too, there is already one but no ppv... no one can say what will happen when it crosses boarders - hopefully not a whole lot.

[1one]

Some of us see the up and comers crazy. Your efforts do not go unrecognized.

[alsouthster]

Hey, parrots are damn smart animals...
live longer than most humans, can talk but don't talk too much...
nice work on this one Mili

[1one]

Me thinks mili may have been behind some of his own members. Read about crazy1 79. First to gamble, first to glitch, and nerves of steel.

[mili]

Yws yes it is Crazy who gave me the dump, sorry for not giving credit I figured a direct quote to that thread whould make it obvious.

mili

[1one]

check your pm mili.

[mili]

TO THE GUY WHO GAVE US THIS ANALYSIS YOUR MAILBOX IS FULL

mili

[mili]

I got no PM. You got to email me.

mili

[mili]

It has been confirmed. They are using Map functions within the Cam as the second layer of encryption on the control words. Unfortunately, without knowledge of those MAP functions, we will have a problem.

mili

[1one]

Look at my post from last night mili. I was asking for conformation on cam specific info and still have some insight.

[alsouthster]

RE: Parrots

Wasn't talking about the latest dump

Was more referring to Mili's previous prognosticating, the criticism thereof, and the obvious vindication...

[Ohms]

Unfortunately, I believe Harry is completely right on this one. Testing as we know it today might just about be over.

[1one]

Why u say that ohms? I have most map functions. I see no anomilies. Am i missing something?

[Ohms]

I could be wrong, but from what I understand from people a lot smarter than I, the mapprom is not very well understood publicly anyway. I'll let you know more specifically if I can find out more, but some smart guys are talking about doom and gloom resulting from this. Current functions that are in use are not the issue. I'll tell you one thing though, I won't be the one to say never.

[1one]

Headed ug for insight. see you guys tomorrow.

[udntcme]

Supposed to be fix out for fta before it even hit as usual.....

[Ohms]

1one. you must be keeping a good eye on your log. You called cam specific updates as I remember 2 days ago.

[Crazy1_79]

yeah, this isn't good, cam specific updates. my card won't even update to 244 now. I put one back in at 240, and 4 hours later, it is still at 240. I take that back, it finally did update. but I am still getting black channels.

[badger6]

Originally Posted by Ohms

Unfortunately, I believe Harry is completely right on this one. Testing as we know it today might just about be over.

Remember what the cookie monster said in the waining days of N1. Even if we get black screens for a while, thats OK. We cannot adapt til we see how chuckys plan unfolds. He has an uncanny way of fucking things up, and he will PROBABLY again. History usually repeats itself. I don't believe this game will be over anytime soon. It may get more involved, but then again it could get less involved, but doubtful. We have tremendous talent in this game and they have a game plan just like charlie. If charlie ends the game, at least it was a good game. But there is too much money floating around for the ship to sink. And, if and when the ship sinks there will be another boat ride to catch.

peace out

badger6