View Full Version : You have been warned ECM
ozz2001 07-22-2004, 05:57 AM The ECM was not a PPV attack at all. They sent down 2 new embedded $64 emms. If your blocker did not process these then your cam is flagged and they send down another emm that wrote that 3M tier to your cam.
If you read your card and your hit you will notice you have a new $0B datatype on your card that they added.
Anyways next time the card resets or the ird resets. The first thing the firmware does is check for the 3M tier. Boom Serious Error Nag.
This is a hit and run like the last one mostly why ppl posted ppv out of stream.So there will be more to come.
So this tells us what? Something big will be coming are way soon. I say this is just a test before the kill again.Looks just like the same style again when they looped the rom3's. I am have been running my stream locked card and it dont get hit take a loss on the 500's but i wont have a fried card. Time to think about a digital lock ppl
Tomico-ind 07-22-2004, 06:06 AM For sure you are right it's a setup for a massive kill. Soo having no ppv is the way to go for a while or get greedy and be out a card. ozz you are so right on this one.....
ozz2001 07-22-2004, 06:13 AM For sure you are right it's a setup for a massive kill. Soo having no ppv is the way to go for a while or get greedy and be out a card. ozz you are so right on this one.....
Thanks i really think digital locks are going to be needed,or alot more fired cards.There geting hipp to the game quick. :yes: Streaming card sounds funny but it might be a good option if you got extra card but thats just my opinion.
twodogs 07-22-2004, 06:13 AM Would a stream locked ROM 3 no PPV be considered safe? :blink:
ozz2001 07-22-2004, 06:14 AM Mine has been fine i got tiers to 2004 and i still get main events and porn :)
twodogs 07-22-2004, 06:16 AM So you DO have PPV, yours is just stream locked? :wacko:
ozz2001 07-22-2004, 06:21 AM yep i put ppv on it but when they changed the numbers i lost the 500's and still have everything else.But the hits seem to be working off the blockers not stream cards so i have been safe.I am not telling ppl to stream lock there cards thats up to themselfs what they want to do.But i get all i need for now on that card why chance another card frying till i see what happens next!
Now i am not a expert in this i am trying to learn as i go but i believe the new blockers claimed to not let anything in the card but it seems this simple ECM walked right in the door so how safe are you really? Bev still running smooth there not as pissed as charlie lol
twodogs 07-22-2004, 06:42 AM I have 8 ROM 10 cards, I think I’ll give this a try.
Thanks for the help, I’ll let you know if I end up with another 7200 paper weight. :barf:
Tomico-ind 07-22-2004, 07:13 AM 2 things all rom 3 cards that are stream locked rev 383 are marked, but not in the 07
but in another place so rom3's are being set up for something big!!!! Now rom 10 if you stream lock them remember a23 no one can get into so when you go down that card is done for now.
jeffjetli 07-22-2004, 11:46 AM you guy mean that if the card had 3m but no ppv it is safe from charlie ecm
is it right?
thanks
nohash 07-22-2004, 11:53 AM no they just popped me I was running 1 with ppv and 1 without got both
Ctech 07-22-2004, 11:56 AM you guy mean that if the card had 3m but no ppv it is safe from charlie ecm
is it right?
thanks
I think what ozz has posted is a blocker issue for the cards
:yes:
ozz2001 07-22-2004, 01:17 PM Well told you something was up. Now i am not sure whats up with this new one that just came in with out ppv on it.I think its something different have to wait and see a loger to be sure. But i bet its flaging the dam cam again with the blocker on the card in two parts like last one.I would wait and see what happens. I am still up with ppv with no problem on stream locked so it's got to be the blocker causeing the flag just my opinion for right now. Guess ill be the only one watching tv today....Keep yea posted...
ozz2001 07-22-2004, 01:29 PM ok lastest info in this is cut and paste geting nasty now amd tricky blocker just like i said!
New EMMS finally identified.
There are four of them. Two are correct and two are decoys.
The signatures are:
First pair:
89 48 97 33 A8 A8 A6 CD
3A CE 66 AD 61 CA 2F B5
Second pair:
C8 1E 9A 1B 03 81 50 21
7F CB 60 A9 79 06 5B 58
Now the problem is, which pair should we choose? I don't know because they have introduced new opcodes that I don't understand. So we guess! Try adding one pair of signatures to the Magic Card initialization file (Dishnetwork EMM64) and see what happens. If you get hit, then obviously it was the other pair!
Well, that is the solution. Please try programming your cards with both pairs and next time Charlie puts the ECM back in the stream, we will know which was the correct pair and hopefully shed some light on the new opcodes as well.
I will udpate the initialization file only after we are sure which signature pair is correct. I would imagine the fix is the same with ROM cards---just change the blocker code to process one pair of signatures and reject the other---the coders will know what I mean.
.................................................. .................................................. .................................................. .
OK, here's the best and latest information I've been able to gather as to what's going on with yesterday's hit:
Charlie sent two EMM's (Entitlement Management Messages) that tried to write to your CAM (card) - ALL public blockers blocked them, which is what Dish was hoping for. Whatever code the MC's use for blocking apparently had the same effect. If the EMM's were NOT written, the stream added a new 0b PPV tier (out of range, so the stream would be sure to notice) to the CAM, which was immediately detected by the stream. Result - an instant ECM (Entitlement Control Message, a.k.a. Electronic Counter Measure) resulting in Location ID 0000001, for nearly all receivers (for some reason, the 6000's seemed to have escaped the hit) - and the never-before-hit 7100/7200's went down for the count, right along with everything else.
The talk about town is that this was one of the primary reasons for this hit....to knock out the 7100/7200.
CAMS (cards) were NOT damaged, other than the new Ob tier written to them. You can check, if you haven't reprogrammed your card yet...there is a new tier in place.
So, it was/is a PPV ECM of sorts...but caused by the presence of a blocker.
Now, the trick will be to devise a blocker that will ALLOW these, and similar, EMM's to transfer updates to your CAM, preventing a similar incident in the future.
For now, rewrite your card with the program you were running before, and pray the same thing doesn't hit the stream again. If it does, we're all going right back down...until a modded blocker is released
.................................................. .................................................. .................................................. .
The problem with this theory is:
ROM2s with no blocker were hit = the blocker theory is shot
My "blocker" protected cards' receivers were hit (it is not blocking ANYTHING by the way it is a spoofer not a blocker) = the blocker theory is shot
Receivers with Magic Cards and Atmegas were hit = the blocker theory is shot
Receivers with cards with no PPV string were hit = PPV theory is shot
Receivers with cards with leagl sub CAM IDs where hit = CAM ID theory is shot
Receivers with cards with different PPV spending limit were hit = that theory is shot
The fact is NOBODY knows what the fuck they targeted as just before the ECM came down they sent this new opcode 52 down which crashed the loggers and they did not run the ECM ever since.
If I had to theorize I'd look into the other normal tiers like Top 150 and such that everyone will have on their cards. I wish someone would be able to read a sub ROM 3 or 10 and see what the tiers are like and compare them with tiers the RTM programs make. I suspect a nice target would be found there.
fatboytrav 07-22-2004, 02:07 PM ECM back in stream
just got mine back up and got hit run with know ppv atleast it works
gypsi3 07-22-2004, 02:54 PM yep i put ppv on it but when they changed the numbers i lost the 500's and still have everything else.But the hits seem to be working off the blockers not stream cards so i have been safe.I am not telling ppl to stream lock there cards thats up to themselfs what they want to do.But i get all i need for now on that card why chance another card frying till i see what happens next!
Now i am not a expert in this i am trying to learn as i go but i believe the new blockers claimed to not let anything in the card but it seems this simple ECM walked right in the door so how safe are you really? Bev still running smooth there not as pissed as charlie lol
Don't know if this means anything but, I sub to bev and it was freezing on and off last sat. like daves on hit day (friday) so they might be up to the same thing ... <_<
Ctech 07-22-2004, 03:24 PM last post was Dang nice there ozz :beer:
good info :D
It weird stuff going on but I got tv
I got hit around 2 then again around 3 I took ppv's off emu and have been up
for a couple hours now
also checksum blocker has new blocker updates today
twodogs 07-22-2004, 05:51 PM Strike 3 with the 7200’s. Just got hit , no PPV or blocker. :beer:
ozz2001 07-22-2004, 06:52 PM Think some one sayed something about 7200 being a target but dont qoute me on it.
Tomico-ind 07-22-2004, 07:33 PM my 7200 still up 2 years now
thechoice2 07-22-2004, 07:54 PM Was any of the 6000s hit?
Tomico-ind 07-22-2004, 08:32 PM no 6000 and 2200 never got hit.
draziweht 07-22-2004, 11:05 PM Just look at the date they killed the 7200 what was it around 4pm EDT, or 7.20.04 just a little to coincedental for my taste. Cant say they dont have a sence of humor though, the whole tech dept must be just yucking it up. Im thinking that the 7200 might be over. unless you have a sombrero and a private version of the hat software that you can re-write your eprom with. BTW an older software version would also be required. I am not 100% sure but I am betting that inorder to get your other(jtagable) IRD's up you will need to go back a software version and an older cam image combined w/o blockers or ppv. Stream locking your card w/ valid cam IDs. I believe that this is not just a ppv or blocker but checks somthing in the current software version. They still have to leave that door open other wise they would kill ligit customers who had recivers down for long periods of time(Movers, Snowbirds, long Vacationers). I havnt had time to test my theory but Im betting thats got to be the key till some wiz kid comes up with a real fix.
dalerulesu 07-23-2004, 12:32 AM This is a C&P from another site.
Watch out for 0C spending limits!! Of all the cards that went down on me today (none of which had ppv) all had the 0C spending limits.Had one that I removed the OC spending limits from last night, and it hasn't flinched since. Its very simple to remove just read card in nagra, go to data editor, highlight 0C spending limts, right click then select remove, consolidate, then write to card.
merdemerde 07-25-2004, 09:01 PM Anyonne know what the instruction 0x52 actually does on 6805 hardware? I heard of someone fixing an emulator and named it "52mul" but is it just a multiply? Looks similar to the 0x42 mult opcode, but it couldn't be the same? What registers and condition codes are changed and with what? Good places to find out more?
draziweht 07-26-2004, 10:25 PM Found my problem. Hope this helps others.... I have been using a subbed cam ID. Sub is a rom3 the cards that have been going down were rom2's or rom10's. When I used a rom2 camID on the rom2 I stay up. Ditto for rom10 on rom10. I havent had a problem with this in the past but as always the rules change.
Buddy Lee 07-28-2004, 09:40 PM there are several things to check with this ecm. It was a blocker + ppv hit. Lot's of people using checksum blocker without ppv were still getting hit with the embedded $64 command.
It is also checking the high-low id's of the ppv tiers. If they are too long/wide or out of range it flagged the cam and the blocker allowed an 0B tier write. On reset the ppv tier checks the new 0B tier and causes ecm.
I have tsop locked my 7200 and no ecm's with it.
I do have ppv's running, almost all the channels including events, the high low just have to be tight. Have to split them in groups, use multiple 0B tiers.
Still unsure about the 52 opcode but it certainly did hit the atmega/emu's. It didn't effect the Magic cards, but the ppv's did go invalid on them.
This was definitely a big hit and the main target was probably the 7x00's. some 6000's got hit, too. Basically, imo this was targetted to discourage any new dave testers from migrating, because charlie just made testing a little tougher.
newbie09 07-28-2004, 10:18 PM Sweet post, you got reps from me!
harrybuckman 07-31-2004, 10:17 PM 2 things all rom 3 cards that are stream locked rev 383 are marked, but not in the 07
but in another place so rom3's are being set up for something big!!!! Now rom 10 if you stream lock them remember a23 no one can get into so when you go down that card is done for now.
Bev rom3 and dish rom3 got a different mark.
HHHMMMM i wonder why??
Just a heads up for you guys.
olimpias 08-08-2004, 10:50 AM hey guys so what you are saying is that even with the blockers on the card, my card will still get screwed if I get hit? I'm totally lost now i thaught the blockers were to prevent your card from getting screwed?
Nintendo Master 08-08-2004, 11:35 AM Blockers only spoof the rev version of the card so you won't be stream locked. This doesn't mean your card/IRD isn't open for a ECM target. You are never 100% safe using anything!! I would suggest buying a atmega128 card or magic card. They ROCK!!
digmonte 08-09-2004, 05:34 AM Blockers only spoof the rev version of the card so you won't be stream locked. This doesn't mean your card/IRD isn't open for a ECM target. You are never 100% safe using anything!! I would suggest buying a atmega128 card or magic card. They ROCK!!
:D Well said my friend, words of wisdom and "100% FACT". Throwing you some REP for keeping it real with no false hope and making it easier for this tester to have a backup sollution handy for "WHEN" that day comes. One thing to always keep in mind is have a second testing method as its always only a matter of time before you will need it. Nothing is forever in the realm of testing, and thats just the way I like it. :yes:
To all a good day,
Digmonte
draziweht 08-09-2004, 08:57 PM I have found one 100%. 100% of all fixes go down eventualy. Nothing lasts forever.
SKUNKER 08-10-2004, 05:27 PM wow a back up i can only hope for the day when i have one
im flying by the seat of my pants
you guys keep doing what your doing
thanks
|