Free Web Hosting by Netfirms
Web Hosting by Netfirms | Free Domain Names by Netfirms

Previous

Table of Contents

Next

How does satellite television work?

Section 1

Tell more more about CAM's

Concepts, Hardware, Software

What is the jargon?

ACTIVATION is what happens to your cam when you sub to a package from DISH/BEV. We have been able to read this info off the cam and load it to different cams. This is very good when loaded; it makes your cam look like nothing has ever been done to it. You can only get channels that come in a package. No P. P. V. but you can credit it to the cam the erase it later. This only works with open Rom 2/3 cards; Rom 10's aren't publicly writable at this time.

ATMEL The company that manufactures one of the more popular micro controller families for EchoStar hacks.

ATR Answer To Reset. A string of data sent by an ISO7816-compliant smart card when it comes out of reset. The data tells the host device what communication parameters the card expects, what type of card it is, and so on.

AUTOROLL Autoroll is the term used for when the public keys change either your cam, E3M or AVR will write them accordingly. That way you don't lose video. Auto rolling is the process of determining current decryption keys or other changing information that a hack requires in order to function

AVR / AVR1 / AVR2 / AVR KEYPAD / AVR3 / AVR6 / Atmega128
AVR is an acronym for AUDIO VIDEO REPLICATOR. This is basically a PCB with a chip on it that you would plug in to the receiver. You program the chip with HEX files and EEP files. And hopefully you will be able to watch what's on TV. There are 4 real versions of the AVR. Some people just call it AVR for short instead of AVR3 and so on. With an AVR you will need to FLASH the chip about every other day with the new KEYS. Takes two seconds but that's the price you pay for free TV.

BEV / BELL EXPRESS VU / EXVU / EXPRESSVU This is the sister company to Dishnetwork, owned and operated by Bell Canada Enterprises. They have the same receivers as Dish, but do not send IRD damaging ECM's like Dish. 

BLOCKER / CODEGEN / NAGRABLOCKER This is programming put on the cam to Block DISH/BEV from looping your cam. Make sure you load it properly or you may get looped later. Many versions out there use the most current. Also make sure you get the right one for the type of card you have. Open Rom2/3 only.

BLOCKER BOARD / BLOCKER AVR / BLOCKER These were used back a while ago. They had programming put on the chips to block the kill packets sent down by dish when you cancel your sub. You would sub to a package with dishnet work the plug you cam in to this avr3 looking thing and then cancel your sub. This filtered out the kill packet and kept your system running with what you had subbed to.

BOX KEYS
This a 16 characters long = 8 bytes long. A BOX KEY should look something like this, AA BB 11 22 66
FF BB 99. This number is stored in the TSOP in the IRD. It is also stored on the cam if it is married to the receiver. Everyone's Box key is different. You can use JTAG to read the info on the TSOP to get the Box
key. It's not necessary to know the box key to test as long as your cam is married to the receiver. You will need to know the box key on both the cam and receiver if you are going to use non-married hardware.

CAM / Rom / DISH/BEV CARD
Conditional Access Module. This is the card that came with the receiver. It looks like a credit card, with gold colored contacts for the chip. There are 3 different cards. A Rom2, a Rom3, and a Rom10. Rom2's can be read and written to using a card programmer. Rom3 have had security features added to them. If the have been in the stream after July 2001 they can't be read or written to. Dealers have had luck at unlocking Rom3's but it will cost you. Now Rom10's as of this date can't be read or written to, but who
knows what the future has in store for us. There are Rom7's but are bev cams. News is there maybe a Rom11 coming soon. To tell what Rom type you have you will need a receiver and a TV. Put the cam in the IRD turn the receiver on. Press the sys info button on your remote (if you don't have that button look in the menu for system info) a screen should appear like this:

MODEL ID: 2700 (what ever receiver you have)
RECEIVER CA ID: R00xxxxxxxx-xx
SMART CARD CA ID: S0xxxxxxxxx-xx (Card Rom version) 
=> DNASP003 Rev 3xx <== software version

DNASP003 is a Rom 3 card -A2012 or 288-02 great card -programmable and repairable when reliable public E3Ms are available. Also works with an AVR3
DNASP002 is a Rom 2 card -288-01 Programmable but not repairable and works with an AVR3
DNASP010 is a Rom10 card and hasn't been hacked. Only good for legit Subscriptions! (And AVR's if you are subbed and can get the boxkeys off the receiver)

CAM PUBLIC KEY / ACTIVE KEY This is a set of 16 characters = 8 bytes. It is one of the Public keys either key0 or key1. One is the active key. This active key changes every time the keys change in the stream. The active key is stored on the cam and/ or AVR. If you cam hasn't been in the stream then the key hasn't changed. You'll have to put the cam in the receiver to get the new keys put on it. Go to Sattech.net or other key sites to find out what key is active. If you are using an AVR3 the CAM PUBLIC KEY won't ever change unless you put the cam in the IRD without the avr3.

CHARLIE
The CEO of Dishnetwork. Charlie is also a nickname for Dishnetwork.

CLONE
To make a copy of something. You can clone cams and receivers. To clone a receiver you'll need to read the TSOP and program the TSOP in the exact same receiver.

DISH / DISH 500 / SATELLITE DISH / ANTENNA
This is the antenna that gets the signal from the satellites in the sky. They mainly come in 2 shapes a 18" that's only has one LNB and gets about 400 channels depending on what satellite you have it pointed at. The 20" is a dish 500 and gets about 1000 channels when pointed at the 110 and 119 satellites. The dish500 has 2 LNB's to get two different satellites.

E3M / 3M / EASY3M / E* 3M
Programming put on the cam that gives you access to every channel. If you use E3M make sure you use a blocker and lock your TSOP and EEPROM. There are many Freeware E3M scripts out there. Some work and some don't. Your best bet is to do a lot of research. Be careful some don't let the keys roll.

ECM
Is an acronym for ELECTRONIC COUNTER MEASURE or Entitlement Control Message for the tech buffs out there. Basically DISH/BEV doesn't want anyone getting free TV. They surf the net and see how all of us are doing it. Then the put lots of research in to find a way to stop you from getting TV. They then send down a signal in the STREAM that detects what you have in the card slot and if it doesn't like it then the receiver will either LOOP your CAM or reprogram your TSOP and/ or EEPROM. To protect your self from ECM's you need to lock your TSOP, EEPROM, and use an AVR3 protect your CAM. Or Lock your TSOP, EEPROM and have a good blocker on your cam that you programmed.

ECHOSTAR / E*
EchoStar is the company that makes the receivers. DISH/BEV and Bev buy receivers from them and resell them to us.

EEPEDIT _____
(version) EEPEDIT is a program used to enter your info for your receiver cam and other useful info. It is used to flash the avr3 with the MCG306 hex file.

EEPROM The EEPROM is where you keep all of your settings. Like what channels you have blocked, what your password is and what other settings you have. This also keep's the info from the switch you are using. This chip must be locked too. There has been an ECM in the past that put a mark in the EEPROM that every 15 min you would get a message saying you need to update and to stop it you just rebooted but back in 15 min you would get it again. Not as bad as the TSOP ECM but really annoying. There is a fix for this but it's just as annoying as just having it happen every 15 min. You can reload the software on the EEPROM, but the proves to be more difficult then re loading the TSOP. There are about 15 different board revisions for each receiver and you have to find one that matches your. I haven't even been able to find any on the net.

EMM
Entitlement Management Message. A message, which contains the information, required to transfer subscription information and EEPROM updates to the CAM.

EMULATOR / EMU
A hack, which performs all (or a significant amount) of the functions of a real CAM. Most emu systems use a computer connected to the card slot in the IRD.

EPG Stand for ELECTRONIC PROGRAM GUIDE. It's the info that tells you what's on. Most receivers don't have the option to re-download the guide but the dishplayer does. With the receiver off press 72250000 the lights will flash to confirm it took the info.

FBPRG16
This is a DOS based program for flashing the AVR. You use hex and eep files to flash to the AVR.

FREEWARE
This is the best software you can get. FREEWARE is what it sounds like free programs or free scripts to aid in your pursuit for free TV. If you have seen some one that has made freeware say thanks. If it weren't for them a lot of us wouldn't be in this hobby. They put a lot of thankless hours into creating software for us. To top it off they don't get paid for it so give your thanks.

Funprom___
(version #) This is a Windows based program for flashing the AVR. You use hex and eep files to flash to the AVR. Faster then FBPRG16 4

HEX / HEX a DECIMAL Programming language. I don't understand much of it but it will use 1, 2, 3, 4, 5, 6, 7, 8, 9, 0, a, b, c, d, e, and f and no other letters.

ISO International Standards Organization. The standards organization that established the ISO-7816 protocol used by most of the smart cards on the planet today, including the CAM's used by EchoStar.

ISO-7816
The international standard for interfacing with smart cards. The ISO-7816 includes standards relating to the physical properties of smart cards.

IRD / RECEIVER
IRD is an acronym for Integrated Receiver-Decoder. I think that's what it means please tell me if I'm wrong. An IRD is your receiver. Your RECEIVER can only receive as long as you don't plug in the phone line. DON'T EVER PLUG IN THE PHONE LINE IF YOU'RE TESTING.

JTAG
JTAG is a way of reading the info on the TSOP. Most JTAG interfaces consist of 5 resistors that you connect to pads under the board. If you have a square hole under your receiver with some spots to solder to you may have JTAG. JTAG may be very valuable. If you get ECM'ed you should be able to load the old firmware and be back in business. Not all receivers have JTAG:

KEYS / PUBLIC KEYS
These are security keys sent down by DISH/BEV on almost daily. They are 16 characters long. If the keys on the cam/ AVR need to match the ones that are in the stream or you wont get video. If you have a sub then the keys will roll on you cam. The AVR will not yet roll the key safely. Some E3M won't roll the keys. Keys are a set of bytes used to encrypt or decrypt a message. The key and is a block of data to be used to either encrypted or decrypted.

LNB / LNBF The LNB (Low Noise Blocking Filter) is a small, soda can sized, piece of electronics that sits at the end of the dish boom. A single LNB allows the use of one receiver. A dual LNB allows the use of two receivers. To check if you have a single or dual LNB, see if you have to spots to screw cable to if you have 2 then it's a dual.

LOCKED CAM
Back around July DISH/BEV sent down an update for Rom3 cams. This update locked the cam. You can't read or write to the cam if it has been in the stream after July 2001. You can still use these cams with the AVR3. If you try to read or write a cam that has been locked you will put a "mark" in the write once area. The area of the cam can only be written to only once. If you get the mark your card can be looped or made so it won't roll the keys.

LOOP / LOOPED When DISH/BEV sends down ECM's to check to see if your running something your not suppose to they can loop your cam. (this does not apply if you are running your cam in an AVR; the AVR will protect the CAM from being written to) A looped cam can't be used unless you get it unlooped. When your cam gets looped it puts the card in a repeat pattern when the programming is ran. Most looped cams can be fixed (unlooped).

MARRIED DISH/BEV sends down info to your receiver and cam when you subscribe to the service. This info makes it so you can only use that cam with that receiver. You can use your cam in another receiver if you program it or know the boxkeys and use an avr3

Multi-dish switch A device, which allows one or more IRD's to be connected to more than one antenna. This is critical for EchoStar, because EchoStar splits their programming between satellites in more than one orbital slot such that their core programming can be received from satellites in one slot, local-into-local programming can be received from satellites in another, and specialty programming can be received from satellites in a third or fourth slot. EchoStar offers multi-dish switches that can connect 2 dishes to 1 IRD (the SW21), 2 dishes to
2 IRD's (the SW42), and 3 dishes to 4 IRD's (the SW64)

NAGRA / NAGRAVISION
This is the company that makes the cams.

PCB Printed Circuit Board. This is a board that has metal traces and components
soldered to.

PPV
Pay-Per-View. An event (or group of events), which is presented to the viewer at a fixed cost for a single viewing (or single day of viewing).

PROGRAMMER / ISO PROGRAMMER / CARD READER/ WRITER
/ UNLOOPER This is a piece of Hardware used to read and write to cams and unloop looped cams.

RAIN FADE This problem is caused by heavy rain, often miles away, between your dish and the satellite. Generally, this is an uncommon. What happens is you won't get any signal from the sats just wait and it will pass.

RESET / MASTER RESET This will reset you receiver to the factory settings. Your EEPROM will need to be unlocked for it to work.

REV / REVISION This is what we call when the change the programming on a cam. Usually we put a call number with it so REV378 would be the revision to a Rom3. The newer the REV the less likely your card will get noticed for an ECM. You can see what REV you cam is at in the system information screen.

RG-59 and RG-6 cable
RG-59 is conventional coax cable. RG-6 is the higher quality cabling that you want to use for your dish to receiver runs. The difference isn't huge, but RG-6 has lower losses and is the recommended cable for all of the DBS manufacturers. You don't have to use RG-6 but it is recommended. 7

SATELLITE / SAT / BIRDS
These are the satellites that float over the equator in space. Dishnetwork has 4 main sats.

61.5° West -East Coast local channels and Sky Angel (E* III)
119.0° West -Main Dish Network Programming (E* I/ II)
148.0° West -West Coast local channels (E* IV)
110.0° West -Main Dish Network Programming (E* V/ VI -future use)
175.0° West -32 transponder license (future use) (not sure if this is true)

BEV is using one at the moment (Nimiq 91) but another should be up and running in very near future.

SLAVE RECEIVER The term "slave" is used to refer to an add-on or second receiver. DISH/BEV came up with this term. You don't have to have the master receiver running to make the slave work. So the term isn't that true.

SOLAR OUTAGE
A solar outage occurs when the sun passes directly behind the satellite you are receiving from as viewed from the point of view of your satellite dish. The sun's RF (Radio Frequency) radiation overwhelms the LNB's on your dish (as compared to the satellite signal) and causes noise to occur on the signal. This manifests itself as a signal degradation and possibly loss much like a rain fade. It lasts for several minutes as the sun passes behind the satellite. Solar outages occur twice a year (near the autumnal and vernal equinoxes) and will occur once a day for about a week or so while the sun is in just the right position. The rest of the year, the sun would appear to pass above or below the satellite as it arcs across the sky.

STREAM This is a stream of info. This info comes from the satellites in the sky. If you receiver is plugged in and connected to a sat then it's in the stream. Same with a cam.

SUB
A subscription to DISH/BEV

TALK __ (version #) / FREETALK __ (version #) Talk is a DOS based program. It's used to program and read CAMS with a card programmer. One of the best programs for programming. If you use it make sure you are in pure DOS and not a window in windows.

TIER / TIERS
Tiers are kind of like a list of channels. When you activate a Tier your activating a channel.

TSOP
"Thin Small Outline Package(s)" The TSOP is a type of surface mount package. The TSOP holds the firmware that makes your receiver work and how your menus look and work. It's kind of like computer software. It maps out all the channels in the DISH/BEV world. If you don't have the TSOP locked an ECM will come that erases this software and makes it so you only get 3 channels. It can be fixed by removing the chip and reprogramming it, but it's cheaper to go buy a new receiver. Locking the TSOP isn't necessary but your receiver will get killed sooner or later. Better safe then sorry. You may be able to use JTAG to fix receivers.

TSOP LOCK
This is a hardware mod to your receiver. If you are testing you may want to lock your TSOP. Unfortunately, only the digital lock will work with Dishnet. Hardware lock currently works with BEV. Some need you to solder a wire to 2 spots on the board. Others need you to put resistors in there. It's recommended you use switches so if at a later date you need to take a software update you won't have to de-solder things.

 

Previous

Table of Contents

Next

How does satellite television work?

Section 1

Tell more more about CAM's