technical thread on MOSC's and reacent EMM

[cryptik]

am i the only one that doesnt get this tier editing, a tutorial with pics would benefit plenty i think

 

[gizmoworld]

heres one i did it says 90 tiers or is it just 2 that i see!! does it give u rights or anything? some info edited!
From a subbed with very low package!


*** Reset ***

*** Reset ***
CamID = xxxxxxxx
EEProm Left = $2dB9 = 576 bytes

Ird Status Byte = $00
Free access group = $04
Zip Code = $he,he
Time Zone = $70
DVB deviation byte = $02
Ird Number = he,he
IRD Bootstrap Rev = $6900000000000000 = b
IRD Firmware Rev = $0000000000000000 =
Data Type $08 Count = 90

Raw Data Tiers from Card
Tier #01 = 90002621400DA0CA00000721050803FFFF001E30124020A11C000000
Tier #02 = 90002621400DA0CA00000721050803FFFF001E30124020A11C000000
Tier #03 = 00000000000000000000000000000000000000000000000000000000
Tier #04 = 00000000000000000000000000000000000000000000000000000000
Tier #05 = 00000000000000000000000000000000000000000000000000000000
Tier #06 = 00000000000000000000000000000000000000000000000000000000
Tier #07 = 00000000000000000000000000000000000000000000000000000000
Tier #08 = 00000000000000000000000000000000000000000000000000000000
Tier #09 = 00000000000000000000000000000000000000000000000000000000
Tier #0A = 00000000000000000000000000000000000000000000000000000000
Tier #0B = 00000000000000000000000000000000000000000000000000000000
Tier #0C = 00000000000000000000000000000000000000000000000000000000
Tier #0D = 00000000000000000000000000000000000000000000000000000000
Tier #0E = 00000000000000000000000000000000000000000000000000000000
Tier #0F = 00000000000000000000000000000000000000000000000000000000
Tier #10 = 00000000000000000000000000000000000000000000000000000000
Tier #11 = 00000000000000000000000000000000000000000000000000000000
Tier #12 = 00000000000000000000000000000000000000000000000000000000
Tier #13 = 00000000000000000000000000000000000000000000000000000000
Tier #14 = 00000000000000000000000000000000000000000000000000000000
Tier #15 = 00000000000000000000000000000000000000000000000000000000
Tier #16 = 00000000000000000000000000000000000000000000000000000000
Tier #17 = 00000000000000000000000000000000000000000000000000000000
Tier #18 = 00000000000000000000000000000000000000000000000000000000
Tier #19 = 00000000000000000000000000000000000000000000000000000000
Tier #1A = 00000000000000000000000000000000000000000000000000000000
Tier #1B = 00000000000000000000000000000000000000000000000000000000
Tier #1C = 00000000000000000000000000000000000000000000000000000000
Tier #1D = 00000000000000000000000000000000000000000000000000000000
Tier #1E = 00000000000000000000000000000000000000000000000000000000
Tier #1F = 00000000000000000000000000000000000000000000000000000000
Tier #20 = 00000000000000000000000000000000000000000000000000000000
Tier #21 = 00000000000000000000000000000000000000000000000000000000
Tier #22 = 00000000000000000000000000000000000000000000000000000000
Tier #23 = 00000000000000000000000000000000000000000000000000000000
Tier #24 = 00000000000000000000000000000000000000000000000000000000
Tier #25 = 00000000000000000000000000000000000000000000000000000000
Tier #26 = 00000000000000000000000000000000000000000000000000000000
Tier #27 = 00000000000000000000000000000000000000000000000000000000
Tier #28 = 00000000000000000000000000000000000000000000000000000000
Tier #29 = 00000000000000000000000000000000000000000000000000000000
Tier #2A = 00000000000000000000000000000000000000000000000000000000
Tier #2B = 00000000000000000000000000000000000000000000000000000000
Tier #2C = 00000000000000000000000000000000000000000000000000000000
Tier #2D = 00000000000000000000000000000000000000000000000000000000
Tier #2E = 00000000000000000000000000000000000000000000000000000000
Tier #2F = 00000000000000000000000000000000000000000000000000000000
Tier #30 = 00000000000000000000000000000000000000000000000000000000
Tier #31 = 00000000000000000000000000000000000000000000000000000000
Tier #32 = 00000000000000000000000000000000000000000000000000000000
Tier #33 = 00000000000000000000000000000000000000000000000000000000
Tier #34 = 00000000000000000000000000000000000000000000000000000000
Tier #35 = 00000000000000000000000000000000000000000000000000000000
Tier #36 = 00000000000000000000000000000000000000000000000000000000
Tier #37 = 00000000000000000000000000000000000000000000000000000000
Tier #38 = 00000000000000000000000000000000000000000000000000000000
Tier #39 = 00000000000000000000000000000000000000000000000000000000
Tier #3A = 00000000000000000000000000000000000000000000000000000000
Tier #3B = 00000000000000000000000000000000000000000000000000000000
Tier #3C = 00000000000000000000000000000000000000000000000000000000
Tier #3D = 00000000000000000000000000000000000000000000000000000000
Tier #3E = 00000000000000000000000000000000000000000000000000000000
Tier #3F = 00000000000000000000000000000000000000000000000000000000
Tier #40 = 00000000000000000000000000000000000000000000000000000000
Tier #41 = 00000000000000000000000000000000000000000000000000000000
Tier #42 = 00000000000000000000000000000000000000000000000000000000
Tier #43 = 00000000000000000000000000000000000000000000000000000000
Tier #44 = 00000000000000000000000000000000000000000000000000000000
Tier #45 = 00000000000000000000000000000000000000000000000000000000
Tier #46 = 00000000000000000000000000000000000000000000000000000000
Tier #47 = 00000000000000000000000000000000000000000000000000000000
Tier #48 = 00000000000000000000000000000000000000000000000000000000
Tier #49 = 00000000000000000000000000000000000000000000000000000000
Tier #4A = 00000000000000000000000000000000000000000000000000000000
Tier #4B = 00000000000000000000000000000000000000000000000000000000
Tier #4C = 00000000000000000000000000000000000000000000000000000000
Tier #4D = 00000000000000000000000000000000000000000000000000000000
Tier #4E = 00000000000000000000000000000000000000000000000000000000
Tier #4F = 00000000000000000000000000000000000000000000000000000000
Tier #50 = 00000000000000000000000000000000000000000000000000000000
Tier #51 = 00000000000000000000000000000000000000000000000000000000
Tier #52 = 00000000000000000000000000000000000000000000000000000000
Tier #53 = 00000000000000000000000000000000000000000000000000000000
Tier #54 = 00000000000000000000000000000000000000000000000000000000
Tier #55 = 00000000000000000000000000000000000000000000000000000000
Tier #56 = 00000000000000000000000000000000000000000000000000000000
Tier #57 = 00000000000000000000000000000000000000000000000000000000
Tier #58 = 00000000000000000000000000000000000000000000000000000000
Tier #59 = 00000000000000000000000000000000000000000000000000000000
Tier #5A = 00000000000000000000000000000000000000000000000000000000

Provider MinC MaxC Rights LV
-------- ---- ---- ------ --

edited to hide CamId

 

[gizmoworld]

Got it now just checked a card (not subbed) in nagra and it had 9 tiers read it with tierlite and had same (its a learning experience)and im just starting!!! lol

 

[nozzer]

The first one you did is obviously nonesense !

When you post the results you only need to post the actual tierdata, all the stuff about CamId's, IRD No's etc you should keep to yourself !

Be very careful that you only post tier08 data !

 

[i-zombie]

@ Nozzer
This may be overkill but I am running an image on a tit 1 or rather several at the moment with 23 tiers, 8 bugcatchers, and the revision update mod done and put the rev at " test " although the original image is an A86. 2 hrs now
I also have 1 tit running with a single tier and as im typing its just gone down so would it be safe to say that i may be on the right track but i suppose the question is 23 tiers is that going overkill? Or is that going to be 1 hell of a private image..LOLOL
All channels ok and changing of channels on the 23 tier card is way faster than the single tier card/box....

ive also got a rom 11 with around 20 tiers-and one with 9,both seem to be working,need bd0 key when i try to read em but im also wondering what the "ideal"tier amount would be

also where am i to check to see if one of these cards has taken 1 or 2 of the checks/markers referanced to in another post

 

[gizmoworld]

the first one I did was from my subbed card and the info about cam id etc I edited as said! Just to be on safe side. Is this wrong for a subbed card? The box hasnt been on for about 2 year, and i just put on tonight then read card with tierlite! was a 5.50 package! I cahanged a few numbers in the cam id but u obvoiusly blocked it out for me

 

[ByteMaster]

ive also got a rom 11 with around 20 tiers-and one with 9,both seem to be working,need bd0 key when i try to read em but im also wondering what the "ideal"tier amount would be

also where am i to check to see if one of these cards has taken 1 or 2 of the checks/markers referanced to in another post

Well what im doing is using a tit card havnt got opus,just apply your newly created image to the card after loadeep put correct keys in to speed up process.
The card with a single tier keeps getting hit approx every half hour.
I then have done saveeep from the tit and then open in nagra and sure enough data space has been corrupted.Hope this helps.....

 

[nozzer]

ive also got a rom 11 with around 20 tiers-and one with 9,both seem to be working,need bd0 key when i try to read em but im also wondering what the "ideal"tier amount would be

also where am i to check to see if one of these cards has taken 1 or 2 of the checks/markers referanced to in another post

There really is no such thing as an ideal tier count. It solely depends on your package (and your package history ie - how you arrived at your present package). Each of the premium channels tends to have its own tier so tiers can obviously build up very fast BUT sometimes the cc's bundle several premium channels and you end up with less tiers !

For instance, say Sky Sports 1 is one tier 123450 with min chnl 1/max chnl 1
and Sky Sports 2 is in tier 123451 with min chnl 2/max chnl 2

then if you subscribe to both the cc's may either simply subscribe you to both tiers or maybe, if this is a popular selection, they can create an extra tier that holds both channels.

ie tier 123456 with min chnl 1/max chnl 2

The OTP marks are at $C022 of the EEprom image. You should be able to view the marks using NagraEdit in its EEprom editor mode.

 

[i-zombie]

ok so am i right in thinking this card has taken one hit then

C020: 02 01 02 00 00 00 00 00 00 00 00 00 00 00 00 00

does this make this image a duffer

and if im understanding this right this one hasnt

C020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

so this is my keeper

 

[nozzer]

ok so am i right in thinking this card has taken one hit then

C020: 02 01 02 00 00 00 00 00 00 00 00 00 00 00 00 00

does this make my image a duffer

Yes, that card has taken one of the two hits. I think you have passed the date check but failed the tier test !

The data at C020/C021 indicates that the card has previously been marked by bad login attempts while the card was locked. This is something they may target at some point !

 

[ByteMaster]

C020: 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................

this is from the card that keeps going down.........

C020: 02 01 02 00 00 C2 00 00 00 00 00 00 00 00 00 00 | .....Â..........

This has been working since 9PM on 3 different cards all showing the same?

 

[nozzer]

C020: 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................

this is from the card that keeps going down.........

C020: 02 01 02 00 00 C2 00 00 00 00 00 00 00 00 00 00 | .....Â..........

This has been working since 9PM on 3 different cards all showing the same?

The 06 at $C022 shows this is a "dead card walking". Its due to die !

The C020/C021 mark is a bad login whilst the card was locked !

 

[i-zombie]

cool so my second card is unmarked by either bad login or either of the 2 hits,im on the right track then-
cheers nozzer

nice to know im doing something right

 

[ByteMaster]

The 06 at $C022 shows this is a "dead card walking". Its due to die !

The C020/C021 mark is a bad login whilst the card was locked !

C020: 02 01 02 00 00 C2 00 00 00 00 00 00 00 00 00 00 | .....Â..........
"whilst the card was locked" Please elaborate a little when you can

So do you mean while it got supposedly locke to A86 for example and if so any pointers on were to go from there,
also Im running these images on a tit 1 if that has anything to do with it,

C020: 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
this is the dump from the card with a single tier this is going off every half hour min 0001 max 7fff

Its seems clear that all the info is still on the deadcardwalking but if it were a Mosc would this be the atr killer...?

Thanks again Mate for the heads Up so far :angelwing

 

[nozzer]

So do you mean while it got supposedly locke to A86 for example and if so any pointers
also Im running these images on a tit 1 if that has anything to do with it,

C020: 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
this is the dump from the card with a single tier min 0001 max 7fff

Its seems clear that all the info is still on the card but if it were a Mosc would this be the atr killer...

Yes, If that was a Mosc it would probably be dead !

The image has failed both the date and the tier check and as soon as the Killer Emm gets a sniff it will try to introduce code to loop the card !

I'm not quite sure if the tit1 will continue to function at that point but obviously it can be re-programmed again with a new image

Your in a good position to start experimenting with tiers and dates. See if you can get something that passes both tests and leaves $C022 unmarked !

 

[ByteMaster]

Thanks Nozzer will sleep on it !!!
Hopefully catch you tomorrow...:Cheers:

 

[gryfon99]

Working Rom11

Between freinds and family i have done about 15 box's and thay all had the same image with the same cam id and only 1 has gone off all the others are still working and thay must of got the emm as the one that gone off is in the same street as 3 working ones can anybody explain this

 

[IAmATeaf]

Between freinds and family i have done about 15 box's and thay all had the same image with the same cam id and only 1 has gone off all the others are still working and thay must of got the emm as the one that gone off is in the same street as 3 working ones can anybody explain this

Urmm, no, you're the only person who can explain this as you have access to the cards, so go get the cards, read them and have a look.

 

[danty]

Between freinds and family i have done about 15 box's and thay all had the same image with the same cam id and only 1 has gone off all the others are still working and thay must of got the emm as the one that gone off is in the same street as 3 working ones can anybody explain this

otp markings m8..i just got a card back stioll on witha 06 mark on it..thats what i think.

 

[ByteMaster]

well here is were i am at now

C020: 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00

Dont know what to look 4 is this a login, date problem?

Any definate answers to what this byte is marking?