SATELLITE SCRAMBLING SYSTEMS THE TRUTH FILMNET
VIDEO: Satpac - AUDIO: Digital
By XL This is a very simple system to hack
video wise. All that Filmnet do is to
remove the synch that locks the TV
The object of this article is firstly picture in place, and they have fought
to dispel the amazing amount of a very pitched battle with black box
rubbish you read about "my mate knows makers recently to such an extent that
someone who has hacked Videocrypt there is an all out offensive on this
and hes now watching it without a channel. So much so that its making
smart card, this cost him 200 quid this channel rethink its strategy
to do". Or "My mates card lasted so against the pirates. Last year they
long and he's never paid". Well it's invented a system called "digital
crap. I hate to say it and here's why audio" which, if you listen to
I'm going to go through every single filmnets broadcast its completely
scramble system used on Astra who silent when the D.A. is in operation.
cracked it who sells the black boxes
and get rid of the rumours. In the Benelux countries Filmnet gave
it new subscribers Digital Audio
decoders costing them 18 million
pounds to upgrade there scrambling
--------------------------------------------------------------------------------
system. They kept such a close reign identity and all the pirate decoders
on these decoders that they knew turn off.
exactly who had them. Now the only
way that the DA system could be hacked Now DA has been cracked by one company
would be for the pirate makers to copy alone it's called Hi-Tech the cost of
the DA boxes. it's crack would amaze you, they have
invested an outlay of some total
Filmnet used a special ASIC chip that
was custom made for them. The problem 1,500,000 they have succeed where
they faced was if the box got out it others have failed there box is non-
could be copied so they built a mode addressable by Filmnet. They sent the
in that if the box left there country ASIC of to China where it was layer
they could address the box over the stripped by laser copied and ID
air turn it off and make it useless to removed.
the pirate. Now here's where it get
clever in order for the pirate to copy Now because Hi-Tech unit differs from
this box he must copy the ASIC if he the official unit, Filmnet reckon they
copies the ASIC then he also copies can knock this unit out and are now
the identity of the decoder. If he involved in a war of electronic
makes a batch of say 10,000 decoders counter measures that would blow our
they all have the same identity all minds they have a possible key
Filmnet has to do is turn off that combination (scramble code) of 100000
--------------------------------------------------------------------------------
everything possible to zap that box of scramble mode. This has kept out
out. I will keep you posted. the best hackers in the world.
Premiere say that if the system is
PREMIERE cracked it can upgrade itself to a
VIDEO Nagravision - AUDIO None completely new form of scrambling
system to all its customers within
This is one of the best systems on half an hour of knowing they have been
the market from a security viewpoint. hacked. Making the hack useless to
Premiere has total control over all the pirate. So to date not one hack
their decoders not one has managed to has appeared for this system.
get out of there country. They pick
one of the lines on the TV, say 20 and
place it at line 3 line 3 to 600 etc. RTL V
VIDEO Luxcrypt - AUDIO None
This has the effect of bouncing the
picture all over the place. When a This system is so close to Filmnets
high shuffle is on the picture is video system that most decoders
totally destroyed. Premiere is so contain a Filmnet and RTL V board in
confident about its scrambling system one. I won't go into depth on this
that it only uses it's most very basic but to say it hasnt been upgraded in 3
years and RTL V don't care about being
--------------------------------------------------------------------------------
hacked. They are due to replace the display a better picture. Not what
decoders for new subscribers soon but Teleclub wanted.
sources say that its just a prettier
box.
SKY MOVIES, MOVIE CHANNEL
VIDEO Videocrypt - AUDIO None
TELECLUB
VIDEO Payview 3 - AUDIO None This is the system that should it
become cracked the company will
A simple system in that they broadcast become multi millionaires overnight.
a signal so strong that it forces the
TV to attenuate the picture making the Right forget what you have heard,
screen go black. They then Invert nothing has broken this system.
each line on the TV in a different Here's what it is, the picture is
order, they also shift the position of converted into a digital format each
the lines on the screen by moving the TV line is then cut at one of 256
picture left and right 2 to 3 cm at a points this cut line is then turned
time. The pirate boxes are so far around 180 degrees and stuck together
ahead of this scrambling system that the resulting line is then XORED and
an upgrade was done recently that had sent over the air to us.
the effect of making the pirate boxes
--------------------------------------------------------------------------------
In front of the line is a code which implemented by hackers to read the
then intercepted by the decoder this program in the chip but nothing has
tells the decoder to go have a look at forced it to divulge its information.
location say 1297 in the smartcard. Thompson the designers of Videocrypt
This location contains; again will not give any information
1. the lines cut point out on this even to Sky. If this chip
2. the XORED value that was used to could be read then the card could be
code up the line. Now here's where the forced to give its information out.
system comes into its own. I'm The decoder communicates with the
ignoring the card for a moment, the card by a two way single data path.
decoder contains two chips one is a
"housekeeping" chip that displays the Now onto the card. I've heard so much
on screen messages and card zap information from people on card hacks,
routines. Stuff like put it in the fridge stick
bits of sticky tape on it etc. and so
The second is the interface that much crap that its forced me to laugh.
communicates with the smart card. This
interface has a special mode that Here's what your card has inside it.
causes all of it's output to be 8k of Eprom, 2k of ram, 1k of rom.
scrambled by itself that only itself The card has several pins which it
can read, a self modifying algorithm talks to the outside world with.
infact. Various techniques have been Clock, 0 volts, the 5v and 18v line,
--------------------------------------------------------------------------------
reset and data path. The rom has your wipe your card by burning out the
own personal number the same as the Eprom with a 18 volt supply to it.
one printed on your card in it. The This goes down the same line as the 5
Eeprom data contains the lines cut volt supply that the chips need to
points plus XORED data bytes. The ram run. So what you gonna do then? Well
is a temporary work area for the the rumour about putting sticky tape
decoder, stack etc. on the card won't stop Sky it will
stop you using your decoder, because
the card needs 5v in order to run.
RUMOUR SMASHING TIME. Voltage won't travel through sticky
tape so you can't see any films.
"I can alter old cards to be upgraded
to the new system". Moooo! Bullshit! Trying to examine what is under the
How can you read a card that contains gold contacts kills your card
scrambled data via a single data path instantly, the Eprom is so sensitive
giving the card the information it that it's destroyed under light that's
needs to decode the bytes. When it's why no company has examined it under a
done via a secure microprocessor that electron microscope to view the chips
can't be read. paths because it's destroyed
instantly. So sending off for all
"I'm altering my card to stop it being these wonder card hack's is just
overwritten by SKY". Mooooo!. Sky making the joker a lot richer.
--------------------------------------------------------------------------------
upgrade and send out new cards you
I will now tell you of confirmed won't get one.
hacks, Yes real hacks in a true shown
to format, documented and added to a 3. A device was made that intercepted
world hacker database. the data path between the card and the
decoder data line this was then fed to
1. Morley Research in Gwent made a 16 other videocrypts in a block of
device that your card plugged into flats. What happened is upon a visit
this gadget then plugged into the by an engineer to repair a fault he
decoder. The gadget intercepted Sky's noticed this cable going into one. An
Kill card sequence and fed the decoder hour later the flats no longer had
nops when trying to kill the card. access to Sky as they came and took it
Sky simply used 1 of 17 backup card out. This hack is still being used by
kill sequences and then sued the balls some people.
of Morley Research who disappeared
without a trace. 4. Morley Research has surfaced once
more as Ultra Tech they now reckon
2. A diode is placed on the 18v line that they have stopped all of Sky's
and when the 18v is activated for card kill codes. The units cost
card kill it dumps it to earth via a
small use the power up circuit. This 2300.00 for 10. They are only sold
isn't really a hack because when SKY in units of 10 no one has checked them
--------------------------------------------------------------------------------
while you pay for your subscription so UPDATE
whats the point in buying them?
After writing this article I have just
In Europe the top video hackers are got my latest copy of Hackwatch and it
working on Sky hacks. To date they makes very interesting reading. PR
are at least half way through a very Technology, the makers of a DA unit
very complex system and they are for Filmnet have gone bust owing
ploughing millions into it. They hope
to have a simple box that sits on top 160,000 to various people. They said
of the TV and needs no card to view that they had a DA unit ready for
it. The time to get halfway through Filmnet, but never had.
has taken 2 years. So next time
somebody tells you "my mate has got Just before going bust they had two
this hack and he hasn't got a card and break-in's the first all of their DA
hes viewing SKY for now't now" turn to equipment was stolen. The second the
him and say "Prove it now! Mooooo!" computer that had all of the customers
names and addresses that had sent them
money disappeared. So it was now not
possible for them to know what they
owed people. They still continued to
cash cheques for upto
500 of punters
--------------------------------------------------------------------------------
Sky's Movie cards have had an update, hardware inside for this to be taken
06 has been mailed to all subscribers. into effect.
The new card has a bigger Eprom
inserted on board. The rumour is that I forgot to say how your SKY card
Sky is about to have some new get's wiped. When you recieve your
Videocrypt channels added to its line card, it has a number inside it which
up. is registered against your account at
Sky HQ. When the card is put into the
Sky is also now very concerned about decoder the decoder takes on this
the use of the infinite life hack. number it's usually a 12 digit number.
The one where if you remove the card Sky simply transmit this number over
from the decoder whilst Sky is trying the air. The information is sent just
to zap your card if you haven't paid before the teletext signal. When the
is causing a big problem for them. number sent matches the decoders
The fact that decoders cannot talk number the decoder listens to what it
back to Sky to tell them that the has to do. This is sent as a code
card is dead has become a big problem straight after the number. If it's
for them now. told to wipe your card then it just
burns the Eprom out by sending 18v
Not only that pay per view is now into it.
rumoured to be put into operation and
card 06 now has the necessary
--------------------------------------------------------------------------------
And how do I know so much you ask?
Well I subscribe to Hack watch and
Secondly I helped design a decoder for
Filmnet.
end.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
SATELLITE SCRAMBLING SYSTEMS THE TRUTH
By XL
The object of this article is firstly
to dispel the amazing amount of
rubbish you read about "my mate knows
someone who has hacked Videocrypt
and hes now watching it without a
smart card, this cost him 200 quid
to do". Or "My mates card lasted so
long and he's never paid". Well it's
crap. I hate to say it and here's why
I'm going to go through every single
scramble system used on Astra who
cracked it who sells the black boxes
and get rid of the rumours.
--------------------------------------------------------------------------------
X-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-X
Another file downloaded from: NIRVANAnet(tm)
& the Temple of the Screaming Electron Jeff Hunter 510-935-5845
Salted Slug Systems Strange 408-454-9368
Burn This Flag Zardoz 408-363-9766
realitycheck Poindexter Fortran 415-567-7043
Lies Unlimited Mick Freen 415-583-4102
Tomorrow's 0rder of Magnitude Finger_Man 415-961-9315
My Dog Bit Jesus Suzanne D'Fault 510-658-8078
Specializing in conversations, obscure information, high explosives,
arcane knowledge, political extremism, diversive sexuality,
insane speculation, and wild rumours. ALL-TEXT BBS SYSTEMS.
Full access for first-time callers. We don't want to know who you are,
where you live, or what your phone number is. We are not Big Brother.
"Raw Data for Raw Nerves"
X-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-X