Posts by barry.grogan

    At present, following the channels going dark, when a scan is done with ABM the movies category is not showing sky cinema channels, and sports was failing to show sky sports channels until it updated to being sky sp pl etc.

    now ABM finds sports but still not movies.

    this means even if a fix is sorted theres no point if the ABM is not brought inline with the new setups.

    Good morning everyone.


    As most of you know i have been working on a fix for the currently dark channels.

    well its been nearly 4 months, and in excess of £5000 outlays for various hardware, Boxes etc BUT:


    I am proud to announce that the team behind this fix who will be known as T3am 3ncrypt, have got to the final stages.


    We have the full details needed, The updated version of Oscam ready to accept the new pairing method keys but we lack the final piece of the puzzle. once we have this final piece of the puzzle we can then unveil the final version of the fix.


    This is a call for help if anything. Basically im calling on anyone that has created custom firmwares for vu boxes, zgemma boxes etc or even anyone that knows about compiling custom firmwares to help get this last piece to fit. we need to get the bootloader modified or a bin file created from the actual sky open source firmware to put this final nail in the coffin.


    If you can help at all or think you know anyone that can help please inbox me as soon as possible. the end is very near now and once we have this piece it is literally 1 hour from final rollout.


    I am also calling on the devs who make the ABM and the channel lists for the openboxes and enigma 2 receivers to restart the rollout of the channels that are dark currently into the correct bouquets as testing this has been hard with having to full scan the whole satellite feed which as you can appreciate takes time.


    So please if you know any further information or can help please get in touch.


    i will be happy to give away lines from my own private server not pay server to anyone that can help nail this.


    Kindest regards,

    Barry.Grogan

    Good afternoon everyone.

    I have a problem which to me sounds complicated but im sure someone may know the answer or be able to help in some way.

    Basically, ive compiled the Open Source Software from sky for the sky HD box.

    However, its only giving out 5 files after compile finishes successfully:

    VMlinux 4.5mb

    VMlinux.unstripped 27.1mb

    Rootfs.mips.tar 6.4mb

    Rootfs.mips.tar.bz2 2.4mb

    Rootfs.mips.initramfs_list 28kb

    i have dumped the original nor chip which is spansion s29gl512p10ffcr1 (512mbits / 64mb) and that is currently sat as a .bin file on my desktop.

    what im looking to do is create a bin file out of the source code that i can flash directly to the chip. there is no access to usb to update, nor is there access via ttl or com port. my only option is literally to flash the bin and refit bga64 chip back to board.


    Is there anyone that has experience of compiling firmwares that can advise possibly how to turn the 6 files into 1 main bin file?


    Hope someone can help ive been bashing my head against a brick wall for the last 3 months on this.


    Kind regards.

    Barry.Grogan

    there is a team working on this over on another forum, and were making very good progress, they have now gone to private forum

    Seems due to one of the team making public there names at least one of the main guys who was working on a fix has dropped out!

    I can confirm that there was a team working on the fix in the background, i can also confirm that there was a leak of names and information into a facebook group, I can also confirm that the person that left the group is myself and also that the group has been disbanded as it is not safe to continue at the minute after a leak of such information. we all apologise for this and IF we decide to regroup at some point, (we have discussed individually about things) we will not be releasing anything until the fix has been found and even then there will be strict rules for release as oscam devs have stated they are not interested because of the fact that payservers are using the fixes as and when they release for personal gain and it takes alot of work to find the problems and fix them which they do for free.

    I can state that in the 2 weeks prior to yesterday i put in a staggering 18 hours a day for everyday working on various aspects of the problem.

    Apologies if people do not want to hear this but unfortunately it has had to happen.

    I think there wont ever be a patch, ppl need to get to grips with the party is over. If a soloution is found it will be some chinese or Arab payserver. And if someone does come up with a soloution then Sky IT also opens and there will be a knock at the door in the middle of the night! :rolleyes:

    At the minute it may look like a patch will not ever be available, however if you take a look at the work going on behind the scenes you will see solutions are being trialled and tested to find the workaround. if the Chinese or Arabic payservers find a fix then thats fine, however there is a lot of work going on for the hobbyists that arent into running big payservers. today for example 3 patches have been built and tested including by myself. unfortunately it is a slow process as with anything security related but dont be put off. I was always taught that if man can make it man can break it ;). This certainly wont be the exception to the rule.

    Ok the main page link I have is http://beecrypt.sourceforge.net/

    On that page it gives 2 links for the api documentation and the c++ api documentation.

    Sky open source firmware is built using c++ mips toolchains, that much I know, I am still in process of building the firmware but as soon as I have any further information from the box, I will disclose it.

    I am still waiting on delivery of the chip adaptor for my up818 to dump the chip further I have dropped a few bits via the rs232 port.

    If anyone wants to replicate the rs232 read, it's simply a case of setting putty to use 57000 baud rate. Then power the box from the mains.

    Having been looking deeply into the open source software for a little clue for something else, i found reference to BEECRYPT.

    now i know they use videoguard, but would they be using beecrypt as an onboard algorithm similar to virginmedia RSA key sets?

    ive been reading through the beecrypt details on their website and they deal with alot of different encryption techniques. maybe this is what we need find out what the actual icam is generating its coding sequence from?

    is it ok for me to post a link to the beecrypt page then if anyone who is fairly fluent in security algorithms can see if they can spot anything likely? also the open source firmware will allow you to make a firmware with console access and install custom firmware through the cfe in configuration.

    I am prepared to give that a shot and see what comes up if i can get a build and console opened on the box.

    just a side note, I've now set my cards up with the SD box after it was delivered this morning.

    Couple of interesting things I noticed:

    1) I activated a brand new card in the SD box, and when put into omnikey reader without any changes to boxkey in oscam (it was in a reader that previously had a HD box card in it) it miraculously gave ecms out and cleared channels.

    2) the payload of 0F06 on on card was all 0's, on another card that was expired completely the payload ended with 02, but with my original card, after pairing with the SD box the payload started 00 10.


    I'm not sure if this is relevant to anyone but it may hold the key somewhere maybe, then again it may be completely irrelevant.

    is there any idea on the location of this area? I will be willing to test that and report back.