Dish Network DSS

jake steed

New member
Does anyone know where I can get some good info about this stuff. I want to know about the h and hu cards. I would like to know more. Does anyone know where you kind find one of those satelitte forums where you can find more information?
 
do a google search bro all kinds of info's
From what I heard they scramble signal up a few times each yr and cards need re-programed with a computer and some software.
 
Here is what I found so far I wanted to share (presser if you want to remove that is fine I understand)

CAM ID
Each access card has a unique identification number imbedded in the cards eeprom. This allows DTV to individually authorize programming to each client. When cards are 'cloned' by hackers, the CAM ID will no longer match the number printed on the rear of the access card. Unless the original 'bin' had been saved before the clone process, the action of cloning is non reversible.

DAVE Also DTV, DirecTV, DaveTV
DirecTV is one of two satellite television providers located in the USA. They provide the programming content (the channels) to the subscriber base. The satellite signal covers the entire continental USA, and the southern portions of Canada. "Dave" stands for "Digital Audio Video Entertainment."

NDS
NDS refers to News Data com, the company that makes the access cards for DirecTV, and who is actually responsible for trying to kill hacked cards.

DATA STREAM Also Stream
The 'stream of data' sent from DTV's satellites through the air. It is usually used to 'determine' whether or not a specific channel is authorized to be viewed by an individual customer. The stream does NOT contain all channels that DTV offers. It is the security method used to actually view the channel once you tune into it with your IRD. The data stream is what DTV uses to communicate with an access card in the IRD.

PACKETS
The data stream is actually composed of packets, in hexadecimal format. When these packets are placed together, they form an instruction to the access card.

ECM Also Hit
The acronym for Electronic Counter Measure. DTV uses ECM's to counter the hackers who modify their cards. An ECM can take two forms - hashing or looping.

LOOPED Also Loop, Looping, ECM'd
This type of ECM sends the access card into a continuous loop, so it cannot be accessed again to be reprogrammed by a hacker. It is a damaging type of action to the access card. Hackers use a device called an unlooper to attempt to repair a looped card and use it again.

HASH Also Hashing, Hashed
This type of ECM exploits a change known to DTV on hacked access cards. It commonly uses a changed memory location on an access card as the secret key to decode the video. On an altered access card, this key will be 'incorrect' and thus the video will not be decoded by those cards. It does not actually damage the access cards, and usually these cards can be reprogrammed by hackers when a hash occurs.

EMULATION Also EMU
An advanced hacking method which uses a PC, programmer and a emulator circuit board. The access card is placed in the card programmer and connected using a serial line to the PC. The emulator board is placed in the hackers receiver and also connected to the PC. Specialized software is used to slave the card to the PC to decrypt the channels sent to the IRD. This method is the most complex but is considered the safest by hackers as the card itself is not in the IRD, and thus theoretically not subject to a damaging ECM.

BLACKLIST Also 745'd, Blacklisted
DTV periodically counteracts the usage of unsubscribing cards by 'blacklisting' CAM ID's which they know do not belong to regular subscribers. As part of the data stream is a 'list' of CAM ID's which are not subscribed, and an instruction to the IRD to verify that the currently used CAM ID in that receiver is not on this list. If it is, the card will cease to work, and the receiver will display a message instructing the hacker to "Call Extension 745" to activate service. If your card bin is 745'd, that indicates that its CAM ID is on the blacklist.

PPV
The acronym for Pay Per View. This can relate to movies, special events, or premium sports packages.

SECURITY AREA
The first bytes of the H-card's eeprom can only be written to once. Meaning that once written to, they cannot be re-written to again, under any circumstance. This area was used on 'black Sunday' by DTV.

BLACK SUNDAY Also BS
January 21, 2001 8:30 pm PST. Called "Black Sunday" after DTV executed their most successful and punishing ECM ever recorded. The ECM reportedly affected 75% of all hacked cards in existence. The ECM also used the security area of the cards, permanently damaging the cards. Boot loaders were eventually developed to bypass the damaged area, making the cards useable once again.

Winked
A Winked IRD requires an HU Card. If your going to be using an H card in a Winked IRD you'll need to patch the H card with a valid HU cam/zkt .img file. This is NOT the end of the world as some people make it out to be. As long as you have a valid, or SUB HU cam id.

Malicious Also Card Kill
The term 'malicious script' refers only to the script being a 'card burner' in that it causes the card to be written to many times thereby shortening the lifespan of the card.



PROGRAMMING TERMS

CLONING Also Cloned
This is the term used to describe the result of overwriting the cards EEPROM with the image from another card. The access card's internal CAM ID does not match that which is printed on the rear of the card when a card has been cloned. If the original image of the card is not saved before a cloning action is done, the clone process is not reversible.

ZKT aka Zero Knowledge Test
The ZKT is a mathematical technique that can verify the validity of an access card's CAM ID. It prevents a hacker from simply copying the CAM ID portion of another access card to his/hers, as the ZKT will 'fail' the card, and the card will not work. When a hacker uses the clone technique, the ZKT from the original card is also copied to the destination card, so the ZKT will pass.

MARRIED Also Marrying
When an access card is first authorized for service by DTV, upon insertion into the IRD it will 'marry' to that receiver. What actually occurs is the card 'writes' the unique number from that IRD to its own EEPROM If that card is then inserted into another IRD, it will not work as it is married to the first receiver.

USW
The acronym for Update Status Word. When DTV makes a code change through the data stream to its access cards, a counter called the USW will be increased by the number of updates made to that card. Commonly the updates are later used in an attempt by DTV to interfere with a hackers television viewing. The USW is not the actual change to the access card - but simply a numerical counter of how many updates have actually been placed on the card's EEPROM This is not the same as a DSW update.

DSW
The acronym for Dynamic Status Word. A regular "USW" change to the access cards is typically used by DTV at a later time to interfere with hacked programming. This is because the updates from a USW must first be sent to the card, and then utilized. A DSW update however is used immediately, giving a hacker no time to react to its effects.

TIERS
Levels of programming which can be purchased by DTV clients to receiver channel packages. This also includes events such as NHL Center Ice and the Playboy channel. This is relevant to hacking as an activation script can be used to add specific channel packages to modified access cards. This is generally considered a safer hacking method than a 3m.

BIN Bin file, Valid bin, Sub bin, Image, Dump
A file which contains a copy of the information in the access card's EEPROM This includes the channel tiers, pay per view purchased, all the cards code, the CAM ID, and the ZKT from the card. A bin is used to transfer the information from one card to another which is called cloning.

VALID BIN
An access card, or the .bin of one, that is not on the blacklist.

CLEANING
The process of preparing a card for a script by removing all unnecessary data from the EEPROM. This would include removing all tier information, previous scripts, and all updates.

GLITCH Also Glitching
The electrical current supplied to an access card while it is in an HU loader or H card unlooper is reduced while access is being attempted into the card. At a certain point, the card cannot respond securely and access to the EEPROM is gained by the hacker.

FF'ing
FF'ing is a process that writes all FF's to the entire eeprom. This is now an option in ExtremeHU 3.4 in the unloop settings. When unlooping a card IF you need to try a different setting FF'ing can be turned off since it only needs to be run once on a looped or locked card.


SOFTWARE TERMS

SCRIPT Also Hack, 3m, Activation, Act
When a hacker wishes to reprogram an access card to enable the viewing of channels - it is usually done by using a 'script.' The script contains the actual code sent to the access card, and the instructions to send it there. A script can be sent to the access card using a programmer or an unlooper.

ACTIVATION Also Act
Activation is a technique used by hackers to add programming packages to their own cards that DTV offers to its customers. This is accomplished using a programmer and scripts to add the channel tiers which correspond to the hackers desired programming. This method is counteracted by DTV by sending tier wipe commands to the access cards routinely. This action causes the hackers channels to drop off, requiring reprogramming (activating again). This is a nuisance to the hacker.

3M Also Open, Fully Open
Described as 'the ultimate hack.' This type of hacked card will receive all programming that DTV has to offer, including all Pay Per Views. This is a code change made on the access cards to intercept the regular program flow of the card. When the card is queried by the IRD as to whether or not a specific channel is authorized, the code change the hacker has made always responds with "yes." This enables the hacker to receive every station and event DTV offers. This method is considered riskier than an activation style of hacking.

Winexplorer Also Winexp
It has been created by a person known in the hacking community as Dexter. It is a software application used to communicate with smart cards, including DTV access cards. Scripts are commonly run from within Winexplorer.

BasicH
Software used to read/write to an H card. It is mainly used to "one step clean" or save the "bin" from an H card.


HARDWARE TERMS

ACCESS CARD Also CAM, Card, H Card, H, HU Card, HU
DirecTV's provides programming to its clients via the access card in the receiver. The technical name for the access card is the "Conditional Access Module," or CAM. These cards utilize the ISO7816 smart card standard. Due to this standard, any ISO7816 smart card programmer can read and write to these cards, using software tools.

P4
New Style card DirecTv is sending out to replace the current H and HU cards.

H CARD Also H, Old Card, Blue Card
A series of access cards which preceded the HU card. The H card is blue in color, and has a picture of a satellite on the face. The CAM ID printed on the rear of the card will be in the range of 0004 0000 0000 to 0001 7999 9999. This card's security has been successfully compromised by hackers, and it is the only card which works in emulation setups at this time. DTV will no longer activate H cards for service.

HU CARD Football Card, HU
This is DTV's current access card for new clients. It has the picture of a football player on the front. Its CAM ID will be above 0001 8000 0000.

F CARD
A series of access cards which preceded the H card. The F card is blue in color, and has a picture of a satellite on the face. It looks identical to an H card. However, it is NOT the same card! The CAM ID printed on the rear of the card will be in the range of 0000 0000 0001 to 0003 9999 9999. This data stream for this card has been discontinued by DTV, and can currently only receive audio channels using hacking software.

IRD Also Receiver, Decoder, Box, De scrambler
Technical term for the set top box which is used to receive and decode satellite programming. It is the acronym for Integrated Receiver Decoder. Each IRD has a unique identification number, which can 'marry' the access cards when inserted.

PROGRAMMER Card Reader, ISO7816, Smart card Writer
A serial device which when connected to a PC can utilize software to read/write to access cards which meet the ISO7816 standard. Access cards for DTV fit this standard with the correct software. HU cards are currently not accessible with a programmer by hackers.

UNLOOPER Also Card Repair System
This is a device used to repair access cards that have been damaged (looped) by ECM's or poor programming. Unloopers use glitching to access the EEPROM of the card.

BOOT LOADER Also Strap, Bootstrap, Bootstrap Loader
Device designed to allow cards affected by the Black Sunday ECM to be used again. It allows the 'Black Sunday' H card to be inserted into it, and the whole apparatus is then placed in the IRD.

Modded Unlooper
A device that programs HU cards formerly used for H cards

LNB
Stands for 'Low Noise Block'. This is the actual antenna of the sat system. It is located at the end of the arm sticking in front of your dish. They generally come in two variations for DTV, single and dual, the single lets you connect one ird to it's full capability, while the dual will let you connect 2 or more ird's. (connection of more than 2 will require a multi switch or multiplexer)

Copied From Andromeda.net #DSSTech how2hu-v1.2.hlp File
 
Yeah. I found out if you order any of that crap you can get in trouble. Better to go to the neighbor's house and watch for free!
 
ya I know dish network has a bunch of lawsuits on people who had cards and got illeagal programs.
 
The only way they know if you are recieving the signal is if you plug the modem in since a satellite is a reciever and not a transmitter..... fyi
 
hey thanks bro I got mine plugged in for no reason I don't pay my bill on-line.
I may look into this further I wondered how they could monitor what I was watching.

Hey I may make some money off this!
 
the phone jack is a modem.. they use that for tivo. If you don't have that plugged in there is nothing else that transmits a signal... just make sure that is the only box you have in your house ;)

JS
 
I have 2 boxes but only one is hooked to phone line. No wonder they try to get you to hook modem up.
 
yeah that is also why they have the new access 4 cards because the programmers cant program those yet. (YET)
 
Back
Top