|
|
|
| Previous | ||
| How does satellite television work? |
Section 1 |
Tell more more about CAM's |
Concepts, Hardware, Software
What is
the jargon?
ACTIVATION is what happens to your cam when you sub to a package from
DISH/BEV. We have been able to read this info off the cam and load it to
different cams. This is very good when loaded; it makes your cam look like
nothing has ever been done to it. You can only get channels that come in a
package. No P. P. V. but you can credit it to the cam the erase it later. This
only works with open Rom 2/3 cards; Rom 10's aren't publicly writable at this
time.
ATMEL The
company that manufactures one of the more popular micro controller families for
EchoStar hacks.
ATR Answer
To Reset. A string of data sent by an ISO7816-compliant smart card when it comes
out of reset. The data tells the host device what communication parameters the
card expects, what type of card it is, and so on.
AUTOROLL Autoroll is the term used for when the public keys change either
your cam, E3M or AVR will write them accordingly. That way you don't lose video.
Auto rolling is the process of determining current decryption keys or other
changing information that a hack requires in order to function
AVR / AVR1 / AVR2 / AVR KEYPAD / AVR3 / AVR6 / Atmega128
AVR is an acronym for AUDIO VIDEO REPLICATOR. This is basically a PCB with a
chip on it that you would plug in to the receiver. You program the chip with HEX
files and EEP files. And hopefully you will be able to watch what's on TV. There
are 4 real versions of the AVR. Some people just call it AVR for short instead
of AVR3 and so on. With an AVR you will need to FLASH the chip about every other
day with the new KEYS. Takes two seconds but that's the price you pay for free
TV.
BEV /
BELL EXPRESS VU / EXVU / EXPRESSVU This is the sister
company to Dishnetwork, owned and operated by Bell Canada Enterprises. They have
the same receivers as Dish, but do not send IRD damaging ECM's like Dish.
BLOCKER / CODEGEN / NAGRABLOCKER This is programming put on the cam to
Block DISH/BEV from looping your cam. Make sure you load it properly or you may
get looped later. Many versions out there use the most current. Also make sure
you get the right one for the type of card you have. Open Rom2/3 only.
BLOCKER BOARD / BLOCKER AVR / BLOCKER These were used back a while ago.
They had programming put on the chips to block the kill packets sent down by
dish when you cancel your sub. You would sub to a package with dishnet work the
plug you cam in to this avr3 looking thing and then cancel your sub. This
filtered out the kill packet and kept your system running with what you had
subbed to.
BOX KEYS This a 16 characters long = 8 bytes long. A BOX KEY should look
something like this, AA BB 11 22 66
FF BB 99. This number is stored in the TSOP in the IRD. It is also stored on the
cam if it is married to the receiver. Everyone's Box key is different. You can
use JTAG to read the info on the TSOP to get the Box
key. It's not necessary to know the box key to test as long as your cam is
married to the receiver. You will need to know the box key on both the cam and
receiver if you are going to use non-married hardware.
CAM / Rom / DISH/BEV CARD Conditional Access Module. This is the card that
came with the receiver. It looks like a credit card, with gold colored contacts
for the chip. There are 3 different cards. A Rom2, a Rom3, and a Rom10. Rom2's
can be read and written to using a card programmer. Rom3 have had security
features added to them. If the have been in the stream after July 2001 they
can't be read or written to. Dealers have had luck at unlocking Rom3's but it
will cost you. Now Rom10's as of this date can't be read or written to, but who
knows what the future has in store for us. There are Rom7's but are bev cams.
News is there maybe a Rom11 coming soon. To tell what Rom type you have you will
need a receiver and a TV. Put the cam in the IRD turn the receiver on. Press the
sys info button on your remote (if you don't have that button look in the menu
for system info) a screen should appear like this:
MODEL ID: 2700 (what ever receiver you have)
RECEIVER CA ID: R00xxxxxxxx-xx
SMART CARD CA ID: S0xxxxxxxxx-xx (Card Rom version)
=> DNASP003 Rev 3xx <== software version
DNASP003 is a Rom
3 card -A2012 or 288-02 great card -programmable and repairable when reliable
public E3Ms are available. Also works with an AVR3
DNASP002 is a Rom 2 card -288-01 Programmable but not repairable and works with
an AVR3
DNASP010 is a Rom10 card and hasn't been hacked. Only good for legit
Subscriptions! (And AVR's if you are subbed and can get the boxkeys off the
receiver)
CAM PUBLIC KEY / ACTIVE KEY This is a set of 16 characters = 8 bytes. It
is one of the Public keys either key0 or key1. One is the active key. This
active key changes every time the keys change in the stream. The active key is
stored on the cam and/ or AVR. If you cam hasn't been in the stream then the key
hasn't changed. You'll have to put the cam in the receiver to get the new keys
put on it. Go to Sattech.net or other key sites to find out what key is active.
If you are using an AVR3 the CAM PUBLIC KEY won't ever change unless you put the
cam in the IRD without the avr3.
CHARLIE The CEO of Dishnetwork. Charlie is also a nickname for Dishnetwork.
CLONE To make a copy of something. You can clone cams and receivers. To
clone a receiver you'll need to read the TSOP and program the TSOP in the exact
same receiver.
DISH / DISH 500 / SATELLITE DISH / ANTENNA This is the antenna that gets the
signal from the satellites in the sky. They mainly come in 2 shapes a 18"
that's only has one LNB and gets about 400 channels depending on what satellite
you have it pointed at. The 20" is a dish 500 and gets about 1000 channels
when pointed at the 110 and 119 satellites. The dish500 has 2 LNB's to get two
different satellites.
E3M / 3M / EASY3M / E* 3M Programming put on the cam that gives you access
to every channel. If you use E3M make sure you use a blocker and lock your TSOP
and EEPROM. There are many Freeware E3M scripts out there. Some work and some
don't. Your best bet is to do a lot of research. Be careful some don't let the
keys roll.
ECM Is an acronym for ELECTRONIC COUNTER MEASURE or Entitlement Control
Message for the tech buffs out there. Basically DISH/BEV doesn't want anyone
getting free TV. They surf the net and see how all of us are doing it. Then the
put lots of research in to find a way to stop you from getting TV. They then
send down a signal in the STREAM that detects what you have in the card slot and
if it doesn't like it then the receiver will either LOOP your CAM or reprogram
your TSOP and/ or EEPROM. To protect your self from ECM's you need to lock your
TSOP, EEPROM, and use an AVR3 protect your CAM. Or Lock your TSOP, EEPROM and
have a good blocker on your cam that you programmed.
ECHOSTAR / E* EchoStar is the company that makes the receivers. DISH/BEV and
Bev buy receivers from them and resell them to us.
EEPEDIT _____ (version) EEPEDIT is a program used to enter your info for
your receiver cam and other useful info. It is used to flash the avr3 with the
MCG306 hex file.
EEPROM The EEPROM is where you keep all of your settings. Like what
channels you have blocked, what your password is and what other settings you
have. This also keep's the info from the switch you are using. This chip must be
locked too. There has been an ECM in the past that put a mark in the EEPROM that
every 15 min you would get a message saying you need to update and to stop it
you just rebooted but back in 15 min you would get it again. Not as bad as the
TSOP ECM but really annoying. There is a fix for this but it's just as annoying
as just having it happen every 15 min. You can reload the software on the
EEPROM, but the proves to be more difficult then re loading the TSOP. There are
about 15 different board revisions for each receiver and you have to find one
that matches your. I haven't even been able to find any on the net.
EMM Entitlement Management Message. A message, which contains the
information, required to transfer subscription information and EEPROM updates to
the CAM.
EMULATOR / EMU A hack, which performs all (or a significant amount) of the
functions of a real CAM. Most emu systems use a computer connected to the card
slot in the IRD.
EPG Stand for ELECTRONIC PROGRAM GUIDE. It's the info that tells you
what's on. Most receivers don't have the option to re-download the guide but the
dishplayer does. With the receiver off press 72250000 the lights will flash to
confirm it took the info.
FBPRG16 This is a DOS based program for flashing the AVR. You use hex and
eep files to flash to the AVR.
FREEWARE This is the best software you can get. FREEWARE is what it sounds
like free programs or free scripts to aid in your pursuit for free TV. If you
have seen some one that has made freeware say thanks. If it weren't for them a
lot of us wouldn't be in this hobby. They put a lot of thankless hours into
creating software for us. To top it off they don't get paid for it so give your
thanks.
Funprom___ (version #) This is a Windows based program for flashing the AVR.
You use hex and eep files to flash to the AVR. Faster then FBPRG16 4
HEX / HEX a DECIMAL Programming language. I don't understand much of it
but it will use 1, 2, 3, 4, 5, 6, 7, 8, 9, 0, a, b, c, d, e, and f and no other
letters.
ISO International Standards Organization. The standards organization that
established the ISO-7816 protocol used by most of the smart cards on the planet
today, including the CAM's used by EchoStar.
ISO-7816 The international standard for interfacing with smart cards. The
ISO-7816 includes standards relating to the physical properties of smart cards.
IRD / RECEIVER IRD is an acronym for Integrated Receiver-Decoder. I think
that's what it means please tell me if I'm wrong. An IRD is your receiver. Your
RECEIVER can only receive as long as you don't plug in the phone line. DON'T
EVER PLUG IN THE PHONE LINE IF YOU'RE TESTING.
JTAG JTAG is a way of reading the info on the TSOP. Most JTAG interfaces
consist of 5 resistors that you connect to pads under the board. If you have a
square hole under your receiver with some spots to solder to you may have JTAG.
JTAG may be very valuable. If you get ECM'ed you should be able to load the old
firmware and be back in business. Not all receivers have JTAG:
KEYS / PUBLIC KEYS These are security keys sent down by DISH/BEV on almost
daily. They are 16 characters long. If the keys on the cam/ AVR need to match
the ones that are in the stream or you wont get video. If you have a sub then
the keys will roll on you cam. The AVR will not yet roll the key safely. Some
E3M won't roll the keys. Keys are a set of bytes used to encrypt or decrypt a
message. The key and is a block of data to be used to either encrypted or
decrypted.
LNB / LNBF The LNB (Low Noise Blocking Filter) is a small, soda can
sized, piece of electronics that sits at the end of the dish boom. A single LNB
allows the use of one receiver. A dual LNB allows the use of two receivers. To
check if you have a single or dual LNB, see if you have to spots to screw cable
to if you have 2 then it's a dual.
LOCKED CAM Back around July DISH/BEV sent down an update for Rom3 cams. This
update locked the cam. You can't read or write to the cam if it has been in the
stream after July 2001. You can still use these cams with the AVR3. If you try
to read or write a cam that has been locked you will put a "mark" in
the write once area. The area of the cam can only be written to only once. If
you get the mark your card can be looped or made so it won't roll the keys.
LOOP / LOOPED When DISH/BEV sends down ECM's to check to see if your
running something your not suppose to they can loop your cam. (this does not
apply if you are running your cam in an AVR; the AVR will protect the CAM from
being written to) A looped cam can't be used unless you get it unlooped. When
your cam gets looped it puts the card in a repeat pattern when the programming
is ran. Most looped cams can be fixed (unlooped).
MARRIED DISH/BEV sends down info to your receiver and cam when you
subscribe to the service. This info makes it so you can only use that cam with
that receiver. You can use your cam in another receiver if you program it or
know the boxkeys and use an avr3
Multi-dish switch A device, which allows one or more IRD's to be
connected to more than one antenna. This is critical for EchoStar, because
EchoStar splits their programming between satellites in more than one orbital
slot such that their core programming can be received from satellites in one
slot, local-into-local programming can be received from satellites in another,
and specialty programming can be received from satellites in a third or fourth
slot. EchoStar offers multi-dish switches that can connect 2 dishes to 1 IRD
(the SW21), 2 dishes to
2 IRD's (the SW42), and 3 dishes to 4 IRD's (the SW64)
NAGRA / NAGRAVISION This is the company that makes the cams.
PCB Printed Circuit Board. This is a board that has metal traces and
components
soldered to.
PPV Pay-Per-View. An event (or group of events), which is presented to the
viewer at a fixed cost for a single viewing (or single day of viewing).
PROGRAMMER / ISO PROGRAMMER / CARD READER/ WRITER / UNLOOPER This is a piece
of Hardware used to read and write to cams and unloop looped cams.
RAIN FADE This problem is caused by heavy rain, often miles away, between
your dish and the satellite. Generally, this is an uncommon. What happens is you
won't get any signal from the sats just wait and it will pass.
RESET / MASTER RESET This will reset you receiver to the factory
settings. Your EEPROM will need to be unlocked for it to work.
REV / REVISION This is what we call when the change the programming on a
cam. Usually we put a call number with it so REV378 would be the revision to a
Rom3. The newer the REV the less likely your card will get noticed for an ECM.
You can see what REV you cam is at in the system information screen.
RG-59 and RG-6 cable RG-59 is conventional coax cable. RG-6 is the higher
quality cabling that you want to use for your dish to receiver runs. The
difference isn't huge, but RG-6 has lower losses and is the recommended cable
for all of the DBS manufacturers. You don't have to use RG-6 but it is
recommended. 7
SATELLITE / SAT / BIRDS These are the satellites that float over the equator
in space. Dishnetwork has 4 main sats.
61.5° West -East Coast local channels and Sky Angel (E* III)
119.0° West -Main Dish Network Programming (E* I/ II)
148.0° West -West Coast local channels (E* IV)
110.0° West -Main Dish Network Programming (E* V/ VI -future use)
175.0° West -32 transponder license (future use) (not sure if this is true)
BEV is using one at the moment (Nimiq 91) but another should be up and running
in very near future.
SLAVE RECEIVER The term "slave" is used to refer to an add-on
or second receiver. DISH/BEV came up with this term. You don't have to have the
master receiver running to make the slave work. So the term isn't that true.
SOLAR OUTAGE A solar outage occurs when the sun passes directly behind the
satellite you are receiving from as viewed from the point of view of your
satellite dish. The sun's RF (Radio Frequency) radiation overwhelms the LNB's on
your dish (as compared to the satellite signal) and causes noise to occur on the
signal. This manifests itself as a signal degradation and possibly loss much
like a rain fade. It lasts for several minutes as the sun passes behind the
satellite. Solar outages occur twice a year (near the autumnal and vernal
equinoxes) and will occur once a day for about a week or so while the sun is in
just the right position. The rest of the year, the sun would appear to pass
above or below the satellite as it arcs across the sky.
STREAM This is a stream of info. This info comes from the satellites in
the sky. If you receiver is plugged in and connected to a sat then it's in the
stream. Same with a cam.
SUB A subscription to DISH/BEV
TALK __ (version #) / FREETALK __ (version #) Talk is a DOS based
program. It's used to program and read CAMS with a card programmer. One of the
best programs for programming. If you use it make sure you are in pure DOS and
not a window in windows.
TIER / TIERS Tiers are kind of like a list of channels. When you activate a
Tier your activating a channel.
TSOP "Thin Small Outline Package(s)" The TSOP is a type of surface mount package. The TSOP holds the
firmware that makes your receiver work and how your menus look and work. It's
kind of like computer software. It maps out all the channels in the DISH/BEV
world. If you don't have the TSOP locked an ECM will come that erases this
software and makes it so you only get 3 channels. It can be fixed by removing
the chip and reprogramming it, but it's cheaper to go buy a new receiver.
Locking the TSOP isn't necessary but your receiver will get killed sooner or
later. Better safe then sorry. You may be able to use JTAG to fix receivers.
TSOP LOCK This is a hardware mod to your receiver. If you are testing you
may want to lock your TSOP. Unfortunately, only the digital lock will work with
Dishnet. Hardware lock currently works with BEV. Some need you to solder a wire
to 2 spots on the board. Others need you to put resistors in there. It's
recommended you use switches so if at a later date you need to take a software
update you won't have to de-solder things.
| Previous | ||
| How does satellite television work? |
Section 1 |
Tell more more about CAM's |