[mili]

The Cookie Monster is back. It seems DTV is hacked also. I take no responsibility for this one I am the parrot as usual.

"Well, it is now confirmed that the control words on Bev are being hashed
against random bytes in the cam's ROM. This means that a working dump of
the 102/SW cam is essential for any hack to continue working. Only
problem is that you can't fit a 102/SW dump into a ROM10/11 or ROM101
card or atmega card due to size limitations. The 102/SW dump is about
96kbytes. The old ROM cards are too small to hold this image. The atmega
only has an EEPROM size of 4K. You could try squeezing all that data
into the atmega 128k flash, but then there won't be any space left to
write code. Too bad, as if the new SHA-1 hashing (speed-up) wasn't
enough. This is a double whammy!

-----------------------------------------------------------------

Got this from the cookie monster!


COOKIE MONSTER ANALOGY - The Cookie Monster learns Quantum Mechanics

Everyone has been wondering of late what the providers are doing to
black out certain channels with the rest to follow very soon. Well,
allow me to explain in terms of our "cookie monster analogy".

If you recall the analogy, it goes something like this:

Nagra 2 is considered a secure fortress (or house) with a cookie monster
as the sole occupant. Nobody is allowed in or out of this house and the
cookie monster's job is to bake cookies according to the secret recipe
given to him by the providers. Without this recipe, nobody else can bake
these cookies.

A subscriber comes to the door and requests video authorization for a
particular channel. The cookie monster checks his books to make sure the
subscriber is paying for that channel. If he is paying, the cookie
monster gives the subscriber a cookie that he can use to decrypt the
signal and watch TV for about 15 seconds. This process is repeated after
15 seconds or every time the subscriber changes the channel.

Now, without the cookie recipe or without being able to break into the
N2 fortress, nobody can get get free cookies (i.e. free TV).

The difference betweeen the Nagra 1 fortress and the Nagra 2 fortress
was that the former fortress had a lot of windows which could be broken
(i.e. glitched) to gain access to the N1 fortress and steal the cookie
recipe or the cookies themselves. With N2, all the windows were
completely boarded up and the cookie jar was moved to the basement for
added security.

So what is No1b4me to do now? If you recall, No1b4me was the kid
breaking all the windows in the neighbourhood. Now there were no more
windows to break and it would be impossible to gain access to the N2
fortress. Or would it?

No1b4me had an idea. Why not enter the fortress through the sewer
system? If the providers hadn't sealed off the sewage system going into
the fortress, it just might be possible to "INTERCEPT" the cookie
monster in the toilet!

It WORKED! You can imagine how startled the cookie monster was sitting
on the throne and all of a sudden No1b4me pops out of the toilet! That
one did not go down too well (no pun intended) with the security
providers who had built the N2 fortress. At any rate, No1b4me was able
to steal the cookie recipe from the N2 fortress. Now with the cookie
recipe known, anyone could decrypt the N2 video stream. Soon enough,
cookie factories all over the slums of East Beijing started baking their
own brand of cookies (i.e. FTA) according to the original cookie recipe!

Talk about being trapped between a cookie and a hard place? What were
the security providers going to do now? For a while, they didn't do
much. They tried modifying the cookie recipe every once in a while (i.e.
key changes) but this proved futile as the new recipe could be gotten
the same way the original one was through the sewer.

Interestingly enough, the security providers recently started to bake
their cookies with chocolate chips! They instructed the cookie monster
to "RANDOMLY" add a few chocolate chips to each cookie prior to baking.
So now, the subscriber needs a chocolate chip cookie to decrypt video!
Since only the cookie monster knows how to randomly place the chocolate
chips on the cookie, the FTA cookies won't work anymore. For you see, it
is still possible to enter the N2 fortress and steal the new recipe and
the chocolate chips too and take them back to Beijing, but by the time
the Beijing factory bakes the FTA cookies with the chocolate chips and
sends them overseas, the cookie monster is instructed to "RANDOMLY"
change the location of the chocolate chips on the new cookies and so on!

You see, now you have to ALWAYS be present in the N2 fortress to know
how the cookie monster will randomly place the chocolate chips. Sort of
like a quantum mechanics thing where all events are statistical instead
of deterministic.

In short, that is why you are all watching black screens on one
provider. The second provider will follow shortly as soon as the cookie
monster is ready.

And that is the story of how the cookie monster learned quantum
mechanics and why you won't be watching free TV anymore.

Whatever happened to No1b4me? He decided to go down the street and play.
There is another fortress on the same street owned by a chap named
Murdoch. Guess what? That bumbling fool forgot about the sewer too!
You'll see... "


mili

[cablecowboy]

So where is the dtv hack?

[studluv069]

LOL Mili,

That is the funniest analogy I've seen. I gotta give it to my boy No1, now he is crawling through sewer systems. Boy, I don't want to be by his side right now. He might be a little smelly, LOL. But I gotta give you props my brother. Like always, keep up the good work No1.

Studluv069

[A-Team]

C is for cookie thats good enough for me!

[scabby]

but fta stbs have the space to put a 102 dump on them they also have card slots (most of them) so a married setup or full emulation could still be possible dont get me wrong i dont realize the fta stb is a limited device......

[tinhorse7911]

Excellent read, Thank You Mili, (I already started dusting off the good ol dtv receivers)

[scabby]

obviously i am just generalizing but you made a simple explaination of atmega having only 4k eeprom and 128k flash and no room for 102 dump etcc then woudnt an external eeprom upgrade like was done in the avr days ie the 24lc256 eeprom for autoroll ? could this not be an avenue to solve 102 dump size?

[marin001]

isn't a eeprom change possible, i am new to this but if i get the anology given, just like a mother board, bigger hard drive and more memory equals a faster system. more to store, more programs to run.

[DB]

Where and how do you guys plan on putting this eeprom chip on the atmega128? That would be a major mod to the card. You would be better off finding an atmel chip that has the same pin out as the 128 does, but faster and with more memory. Would probably need a new program to program it.

[Crazy1_79]

God I love the cookie monster analogies

[fubr]

Originally Posted by Mili

Whatever happened to No1b4me? He decided to go down the street and play.
There is another fortress on the same street owned by a chap named
Murdoch. Guess what? That bumbling fool forgot about the sewer too!
You'll see... "

How stupid.
Monsters should not bake cookies, thats a Mom's job
Bout time the sewer ratts returned the favor and showed the way to the new factory via the sewer

Cookie monster analogy fact or fiction ????...

[Bugster]

can't wait to start eating DTV cookies

[Bugster]

Originally Posted by tinhorse7911

Excellent read, Thank You Mili, (I already started dusting off the good ol dtv receivers)

my luck. I just went outside to throw out the garbage and found 3 DTV receivers with cards and remote. SWEET

"hope this is real and no BS"

[studmonkey76]

I really dont think there is a directv hack. Normally you can tell by watching ebay. The price of cards goes up really quick once a hack is found. In the past week, there has not been a single price increase at all on the p4/d1 cards on ebay at all.

[DenCan]

The next thing we will hear is: the "COOKIE MONSTER"
will let us use "HU Cookies.

[studmonkey76]

here is more to the story...

The cookie monster randomized the areas of the cookie in which the chocolate chips were placed. In order for the customers to be able to cook up these cookies in their valid cookie monster baking ovens, the oven has to be updated so that it does not burn the cookies, leaving dissatisfaction with the many customers who like the cookies.

However, in the first round of updating, the cookie monster baking ovens didn't take the updates automatically, thus there were many customers who were outraged because they were not able to enjoy their cookies as they were all being burnt, as it was leaving a bad taste in their mouth.

Eventually all the customers baking machines took the update and everyone was happy again. However, the Cookie Monster must now weigh whether or not updating these baking ovens on a period basis is a viable business move or not, since not all the customers baking machines are taking the upgrades..

If the Cookie Monster updates these machines every month changing the random pattern which the chocolate chips are applied to the cookies, and not all the baking machines take the updates, then the customers will be forced to switch cookie companies. The reason for this is because the customers are buying the cookie dough from the cookie monster and once a month the oven is putting out a bad batch of cookies, thus money wasted. Once these customers switch, the cookie monster will have nobody to sell his cookies to. This is where the Keebler Elf starts racking in a fortune.

Maybe a avr-x for dtv coming down the road.

[fubr]

Originally Posted by studmonkey76

I really dont think there is a directv hack. Normally you can tell by watching ebay. The price of cards goes up really quick once a hack is found. In the past week, there has not been a single price increase at all on the p4/d1 cards on ebay at all.

what if the crak does not need a p4.
see what the price is next month if it does indeed exist and comes to pass..

you think ebay would know before these guys would?

[DB]

Originally Posted by studmonkey76

I really dont think there is a directv hack. Normally you can tell by watching ebay. The price of cards goes up really quick once a hack is found. In the past week, there has not been a single price increase at all on the p4/d1 cards on ebay at all.

Maybe after a hack comes out.

[studmonkey76]

we will see..if a hack does exist and it does involve a card, im good to go as i have tons and tons of p4/d1 cards ..as for now im still waiting on mili to respond to what he said in a post before about romcode not being safe to use because the romcode guys said it wasnt safe..

[orra]

come on guys if you don't believe it, its not gonna' happen....

[bigorangekitty]

Originally Posted by fubr

what if the crak does not need a p4.
see what the price is next month if it does indeed exist and comes to pass..
you think ebay would know before these guys would?

typically, at least with the more recent of the dtv hacks, it has to involve the card, due to the ASIC...

[bugger]

wasint milli who said there was a rom 10 t0 102 fix out there before it came public? i for one dont want to get my hopes up, as the other providers are working some.........

[mili]

Guys all the info I got is in the first post. All I know is that the P4 has been glitched into and dumped. I am not sure a full blown P4 hack applied with $100 equipment is possible.

mili

[Trapofmind]

To bad there wont be a p4 on P3 hack.

[studmonkey76]

Originally Posted by mili

Guys all the info I got is in the first post. All I know is that the P4 has been glitched into and dumped. I am not sure a full blown P4 hack applied with $100 equipment is possible.

mili

Can you show us how u know a p4 has been glitched and dumped??? I for one, havent seen this at all and ive been around forever and a day

O yea and like I only spent a 100 $ on this "hobby" Test me and I'll wiggle !!!!!

Sounds like its time to start working on some type of hash table or defeat. Would be nice to just pop the stack.

[sumpin4me]

no1 and fish were looking into some "interesting" new methods to glitch the P4/D1 over at CC few weeks back... and i quoted that word because that was the exact word no1 used when he and fish were basically brainstorming out loud...

just when the thread was getting really juicy and the chatter began to intensify with more testers chiming in on their newly-brainstormed theories, the thread just seemed to stop... no more replies.

next thing you know, it was announced that CC's is closing as of 6-12-2006...

things that make you go.
.
.
.
.
.
HMMMMMM