Results 1 to 7 of 7

Thread: Nagra2 and rom102 cards using blockers and auto-roll 8/8/06

  1. #1

    Nagra2 and rom102 cards using blockers and auto-roll 8/8/06

    There is alot of stream activity in the dishnetwork stream....it is rumored that they are trying to implement a rom102 card looping tomorrow or by weekend. I would use a blocker without auto-roll . I suggest Pengas 109 blocker 28G... for now. Here's some stream info:

    Originally Posted by dmc
    CODE
    21 00 6D A0 CA 00 00 67 04 65 00 01 82 00 10 8B 73 81 F3 67 D8 9A 97 EF 43 1A 14 0F A1 EF 40 9C 96 D5 7A 09 1A A3 E9 BE F2 1D 44 66 1E D9 B8 E3 06 B4 52 40 2D 8B CB B3 13 C3 99 AA 70 16 AC B7 7E DC 92 88 CD F7 58 95 05 C8 99 EB 6E 20 5A 44 16 B3 84 A2 13 19 0C ED 72 B2 5D F1 C3 C7 6C 19 17 00 A0 48 01 B5 96 ED 7D B6 DB 9E E4 A6 51 02 A1 61 E3 8F B9 31 4B B8 CF 00 01 13 DB 00 01 15 7D 77 89 B1 A6 06 CC 95 69 83 01 01 42 00 10 06 08 00 10 0F C5 21 D1 B6 04 8E 9E 90 CC D3 12 58 E4 B6 9B 42 00 10 46 08 00 10 71 9C 60 71 04 C1 39 AE 88 FF F0 5E D2 4C F3 FC 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00


    The B1 packet is the same for both providers, the blockers are searching for the string " A6 06 CC 95 69 " if found they let it slide....

    The problem with this is, if you do a check of what that executable code is doing, you find some funny things....

    A6 06 = LDA with 06
    CC 95 69 = jump to 9569

    the wierd thing is @ 9569 they do a emm filter check ...not sure how they could use this to thier advantage, but rumour is they may be able to...

    They have 06 loaded in A when we go to 9569 ....

    here is the code at 9569

    CODE
    ROM00:9569; ÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛ S U B R O U T I N E ÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛÛ ROM00:9569 ROM00:9569 ROM00:9569 FILTEROK:; CODE XREF: loc_95ABj ROM00:9569; 9A5Cj ROM00:9569; 9A79j ROM00:9569; 9C14j ROM00:9569; 9DEBj ... ROM00:9569 8D 00 5F 92 ecall #0, BUG_CATCHER; See if there is a PATCH for this routine ROM00:956D CD 59 DA call CLR_ADDR16; Clear ZP from $E0 to $FA ROM00:956D; ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ROM00:9570 00 E0 dc.w $E0 ROM00:9572 1B dc.b $1B ROM00:9573; ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄ ROM00:9573 ROM00:9573; This is the main EMM command loop. Enter with the length of the last- ROM00:9573; interpreted EMM command in A. Previous EMM command will be removed from ROM00:9573; the EMM command stored at $80..$BF, and the next command will be executed. ROM00:9573 ROM00:9573 NEXTEMMCMD:; Get # bytes in last EMM command in X ROM00:9573 97 ld x, a ROM00:9574 C0 03 D3 sub a, EMM_BYTES_LEFT; Subtract from total byte in EMM ROM00:9577 25 03 jrc EMMBYTESLEFT; If still got bytes left, then go ROM00:9577; deal with the next command ROM00:9579 ROM00:9579 EMMABORT:; CODE XREF: 9560j ROM00:9579; 9593j ROM00:9579; 95BDj ROM00:9579 CC 55 D3 jp EMMBAD_RETURN_CLRBUFF; Else finish up, then back to IDLETOP


    So those are the facts on the B1 code as of now.

    I honestly dont see how they can loop yer card unless your somehow they sneak an emm through the blocker...

    There gonna need to make us open up the B1 a little more first IMHO...





    There is "data" in the stream that won't let the older type blockers roll keys or do what we call AutoRoll. So Penga and others now, have the recent new blockers and they have to be applied to the cards now for the autoroll to work for most users.

    So you may seem to think right off hand no big deal but the "New Blockers" do open the doors to the card just a little bit more now. Many are STILL manually entering keys and staying away from the autoroll blockers to keep this so called doorstops in place in case DISH is doing something or decides to do something here with this.

    So the thinking is now if you "Open the Door" a little more what can happen, right? D*sh could sneak in a little "ECM" that can loop your card in theory. Many now in the coding community think its there waiting for them to follow thru on soon in the future.

    Give DISH a couple more weeks and the map routines may change again and today's autoroll may not work and or get disabled as well so we go ahead and fix that again to get back to an autoroll bin again for many......

    Now the door is "Opened" just a tad more now. Can everyone kind of see where DISH may be herding Plastic users to now and where all of this appears to be going?

    Once all the routines and things are done every few weeks sooner or later the coders will make an error or mistake with our blockers. It will be suddle yet enough for DISH to capitalize on. This appears to be what DISH is waiting for or looking at and or hoping for. A good example of this recently happened in one of the latest public blockers and many users got the "unknown providers" curse, so it appears maybe soon DISH will be going for a loop of some kind....DISh ain't doing this for no reason and that you can count on as truth if nothing else....JMHO.





    In essance, weve said the same thing.....

    the "data" is the B1 emm ...if you dont pass it , no AU....they've filtered it as best they can for now..{see above}

    i also think they wiill need to open the blocker more....they still need to make us execute whatever emm they put in 92....

    So wednesday does seem a little soon, but i know nothing.....

    Ill leave it At that i guess





    CHANNELS DROPPING w/ROM102!

    Reports by Many right now ....

    Date/TIME> Tuesday 8 August 2006 @ 1045 am pst

    DISh is up to some wierd stuff RIGHT NOW...

    -dissapearing, reapearing CNN USA channel and Military channel...

    They are testing something... thats for sure

    So stand by this may be nothing and yet it could be bad for us when done...

    I am guessing nothing will happen for a few more weeks but could be wrong as well... see what the week brings us but for now lets just see what this day brings us as well my friend...




    Is this not traditionally the time they re-jiggle the channels in preparation for seasonal channels? (ie NFL, NHL, etc.)

    In regards to B1 passing ... what has always worried me is the possibility of hiding code in the form of a bogus key. Since we are allowing the keys to be updated/passed, they could make the key data an 8 byte program. Change the pointer or a well placed JMP routine and the fatal code gets executed.


    New posted keys in keys area by the way,,,dam DISh gonna get us yet...by the way pengas latest autoroll worked fine on one card i was testing rolled keys great...the old h21 non roll bloakcer had to do a manual chnage then it oppped back okay so for now all is well...

  2. #2
    New Member
    Join Date
    03-12-2005
    Posts
    6
    Uploads
    0

    Question Re: Nagra2 and rom102 cards using blockers and auto-roll 8/8/06

    how about coolsat reciverc they gona be afected or the cards gona be demaged becose this reciver dont have the locker like the dish netwrk one plese tellus thank you

  3. #3

    Re: Nagra2 and rom102 cards using blockers and auto-roll 8/8/06

    if you're running any rom102 card without a blocker yes it's very vunerable to being looped at any time.

  4. #4
    Senior Member
    Join Date
    02-05-2005
    Location
    New England
    Posts
    125
    Uploads
    0

    Post coolsat

    The rom102 in a coolsat is isolated and is only used for maprom functions.

  5. #5

    Re: coolsat

    Quote Originally Posted by slugworth View Post
    The rom102 in a coolsat is isolated and is only used for maprom functions.
    Not so but you go right on ahead believing that coolsats running 102's can't be ecm'd.

    Here's just a sample of a post from yesterday:

    Ecm?
    I have a coolsat 5000 with a reader and rom 102 something happened lastnight. The screen was black and the diplay on the front of the coolsat had a 0 on the front. I tried powering off with a remote did not poer off. I rebooted the unit.......and now I have nothing the unit will not power up at all. I wonder if it got wacked with an ECM.
    I've read a million more....so if you think you know more than charlie you go right on ahead running that unlocked (and unprotected) 102..hope you have some more bucks.....

  6. #6
    Senior Member
    Join Date
    02-05-2005
    Location
    New England
    Posts
    125
    Uploads
    0

    Wink c'mon

    quote "and now I have nothing the unit will not power up at all. I wonder if it got wacked with an ECM." endquote
    Which has nothing to do with the rom102 card. The receiver should power up even without the card plugged in. The power supply in the coolsat probably crapped out.
    Charlie can't program the flash on an fta receiver like his dishnet receivers.

  7. #7

    Re: c'mon

    Quote Originally Posted by slugworth View Post
    quote "and now I have nothing the unit will not power up at all. I wonder if it got wacked with an ECM." endquote
    Which has nothing to do with the rom102 card. The receiver should power up even without the card plugged in. The power supply in the coolsat probably crapped out.
    Charlie can't program the flash on an fta receiver like his dishnet receivers.

    On these days,, you can expect everything...

    so is posible , unit get corrupted , it don't have to be power supply, at same time you get your card looped, is posible at time is looped your FTA get corrupted

    these engeniers on charlie corporate , they work 24 a day, they have there al units fta on the market making test, so they get paid for think..

Similar Threads

  1. vPlug and NA Auto-Roll 8/31/06
    By CaptainHowdy in forum General Discussions: DVB-PCI Cards
    Replies: 0
    Last Post: 31-08-2006, 09:44:38
  2. T-888 auto roll keys
    By mbenjij in forum Technosat
    Replies: 0
    Last Post: 03-08-2006, 13:42:04
  3. Replies: 0
    Last Post: 02-06-2006, 06:22:53
  4. full auto-roll bin 1.200
    By patrickc in forum Ora
    Replies: 0
    Last Post: 28-01-2006, 09:32:37

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •