Is there a way round N3 yet ive heard of

[CG121]

Originally Posted by adder

Are you going to share with us how you managed to get the details from Cisco box? Did you jtag the box? Or is there another method.

Originally Posted by TheCoder

Its easy enough to dump any of the boxes but if you have to ask then you probably dont have the skillset or tools required to do the job.

Generally, the techniques are only for serious electronic/computer hobbyists and are not really suitable for amateurs who are just looking for an easy way to free TV. If you tried this without having the requisite skills then chances are you'd completely destroy your subbed box !

I was trying to find a polite way of answering that and your quote is it

Cheers

[adder]

Originally Posted by TheCoder

Its easy enough to dump any of the boxes but if you have to ask then you probably dont have the skillset or tools required to do the job.

Generally, the techniques are only for serious electronic/computer hobbyists and are not really suitable for amateurs who are just looking for an easy way to free TV. If you tried this without having the requisite skills then chances are you'd completely destroy your subbed box !

What are you saying then I shouldn't have asked, and what makes you think am not a serious hobbyist or trying for a free tv. you don't know my skill level yet you assume I was an amateur, maybe I am an amateur but am not a knob that puts someone down for asking a question.

And I already have Rqcs working with ccam and csp. But you don't see me shoving pictures in peoples faces, that I was somehow better than them.

Originally Posted by CG121

I was trying to find a polite way of answering that and your quote is it

Cheers

I polite way to answer would have been to tell us all how you did it, and share the information, which is what the forums are for, and then it would have been for the individual to decide if they wanted to attempt it or not. You seem to be shoving pictures up, but not share the info when asked.

That is all I have to say, if I can't learn here I don't want to argue.

[CG121]

Originally Posted by adder

I polite way to answer would have been to tell us all how you did it

Nobody told me how to do it...

My posts are general and were uploaded to show a) my progress and b) that it could be done..

How you go about it is your own lookout...

Whether you compare 2 or 3 flash dumps from the new boxes (that have the CAM_N key stored already) or whether you dump an older box (that relies on the card to transfer the CAM_N key to the box) and compare a dump with the card inserted to one when not inserted is up to you..

[TheCoder]

Originally Posted by adder

What ....what makes you think am not a serious hobbyist

I really did try to put it in a polite way but I had a feeling someone would object to a few truths !

The fact that you had to ask such a basic question indicates that you have neither the skill or the equipment to do whats needed on these boxes. If you had the equipment or even just the skillset to use it then you certainly wouldn't of asked how to do it !

As I said previously, if you dont have the equipment/skills then your almost certainly going to destroy your box and the last thing I want to do is give people hope they can do something which they probably cant, and end up encouraging them to destroy their (subbed) box !

Until an easier method comes along, you can effectively consider these boxes closed to your average joe !

That doesn't stop anybody who thinks they are capable of the job from having a go. More than enough info has already been given in this thread so that anybody with any skill in the area should of been able to fathom whats been done. Its deliberately not spelled out to discourage only those that obviously dont have the skill !

[dannyt0812]

Rite lets try and get this thread back on the road again.
Its obvious from this and other forums that extract the rsa keyset can be done as it already has been by some.
Now I know the few that have done it don't want to share how they did which is understandable so its up to the rest of us to work together to try and figure it out.
So ill start with my progress.
Ive been pkaying around with an old 2100 of mine. Ive so far got two NVRAM dumps (with and without card inserted) but from what I have been told im looking in the wrong place. And I should be looking in RAM for what were after. So im in the process of going for a full RAM dump as we speak.
Has anybody else had a go at dumping anything from a box?
Im hoping if there are a few people that have dumps we can compare them all to look for the significant differences.

Lets see how we get on people

Btw if any of you 'pro's' who have already done this fancy telling me where im going wrong or throwing little hints into the thread please do (worth an ask)

[TheCoder]

A Ramdump from a 2100 would seem eminently sensible. Its a box that can be easily played with by most people using only a simple jtag device.

Unfortunately it wont be as easy as just looking for differences (although that will come into it) as RAM is built up in an unpredictable way depending upon how streamdata is arriving. All sorts of stuff from the streamdata is temporarily stored ranging from NIT tables to EPG data to actual mpeg data (both raw compressed mpeg and the resultant 'picture' frames). You may think that not connecting the cable (hence no streamdata) might be a good idea but, alas, the box then wont boot to the point it needs to get to.

If you do dump data, then try to dump at the same point in the boot cycle every time so that you at least stand some chance of having similar data in RAM during dumping. It would be nice if you could breakpoint on a certain instruction but that would require someone to actually disassemble large chunks of the firmware.

Remember what it is that your looking for and how its made up. If you dont know what your looking for and how to use it then you have no chance of finding it. You really need to FULLY understand the DT08 process and have the necessaery tools to be able to manipulate values to reproduce a complete DT08 decrypt cycle !!!