Decrambling PVR Content

[oxytotem]

My Cable company just installed Handan DVB-C 9900 HD Clone, this PVR has a 500Gb HD and uses IRDETO cards.

I connected the PVR HD to my Compuer and ripped the content, all is on .ts stream format, but every stream PID is scrambled.

Is there a way to decramble the content via software or some aditional hardware?

Thanks

[thunder2008]

Well i had recorded scrambled ts files with dvbdream and that might be the same...

I use OfflineDescrambler and a cardreader using phoenix.

I had done this with Channel 4 HD from UK alot and it works every time.

What you need is:

Cardreader supporting Phoenix (I have a Cas3+ but you should be able to use any phoenix reader)
OfflineDescrambler (Software (free) ) + a softcam for your encryption (I use NDSCam (plugin) so you would need one for IRDETO which i'm sure is out there )

hope this will get you started...

you can maybe PM me if you need more help and MSN would be nice to chat about this.

[Seeker47]

Well i had recorded scrambled ts files with dvbdream and that might be the same...

I use OfflineDescrambler and a cardreader using phoenix.

I had done this with Channel 4 HD from UK alot and it works every time.

What you need is:

Cardreader supporting Phoenix (I have a Cas3+ but you should be able to use any phoenix reader)
OfflineDescrambler (Software (free) ) + a softcam for your encryption (I use NDSCam (plugin) so you would need one for IRDETO which i'm sure is out there )

hope this will get you started...

you can maybe PM me if you need more help and MSN would be nice to chat about this.

Does any of that relate to NTSC and the hardware or systems in use in N. America ? People are always asking about proprietary PVR-offload solutions, and I have to think a solution for that would be huge news, unless it was so ultra-techie that few need apply.

[thunder2008]

Well i had recorded scrambled ts files with dvbdream and that might be the same...

I use OfflineDescrambler and a cardreader using phoenix.

I had done this with Channel 4 HD from UK alot and it works every time.

What you need is:

Cardreader supporting Phoenix (I have a Cas3+ but you should be able to use any phoenix reader)
OfflineDescrambler (Software (free) ) + a softcam for your encryption (I use NDSCam (plugin) so you would need one for IRDETO which i'm sure is out there )

hope this will get you started...

you can maybe PM me if you need more help and MSN would be nice to chat about this.

Does any of that relate to NTSC and the hardware or systems in use in N. America ? People are always asking about proprietary PVR-offload solutions, and I have to think a solution for that would be huge news, unless it was so ultra-techie that few need apply.

Well I can't say that it would work but i think so.

A PVR making a TS file with everything like ECMs and so on should be able to decrypt this way..

But is you have a PVR you could test it out...

Well it might look techie but i don't think it is... You need to know what encryption system is used by the provider and also know CAID (i think it is called)... like on subscription cards from Sky UK they use 0963 and that needs to be used in the descrambler ...

You need to have a phoenix card reader too...

[oxytotem]

Thanks for you reply

I'm going to order a Phoenix Card Reader.

When i have it ready i'll MSN you the results

I was thinking the key of the decryption should be embedded is the .ts or in some extra files... Since irdeto keys change in time by the provider???

For every Record i have:

0001.idx
0001.ts
0001.thd
epg_data.hds
file_info.hds.

[oxytotem]

Okey...
I buyed a phoenix reader and start testing...

None of the ts streams have ECM Pid or PCR Pid.... only Audio and Video both encrypted.
I was unable to found the ECM Pid required to start decrypting the stream...
I was able to get the Irdeto Zeta Card 5.3 running, modifying the IrdetoCAM 1.07 plugin, since the replay of the card is somehow different...

Original Irdeto Script....

Request CAM Key
01 02 09 03 00 40 XX XX XX....
Replay CAM Key
01 02 55 XX XX

New Irdeto 5.3 Script
Request CAM Key
01 02 09 03 00 40 XX XX XX....
Replay CAM Key
01 02 57 XX XX

Hex Editing 1.07 Irdeto MD plugin @ 0x49E5 From 0x55 to 0x57

Possibilities:
1) The Cam Key info is somewhere in the extra files. (
2) The Cam Key info is hardcoded in the Handan 9900 firmware.

My next step will by trying to get the Handan 9900 Firmware somehow, and try to search for that info...

[Seeker47]

Best of luck to you. (This is so far over my head, tech-wise . . . . )

[lordsmurf]

@seeker47
It's not over my head. This is CAM cracking, and Phoenix model ISO isn't used by anything in N.A. -- it's mostly on PAL area systems. Europe, Asia, Africa, Middle East. I don't know exactly where anymore. Phoenix readers have been useless for about a decade now in N.A. Beyond that, most cable doesn't use card-based CAM, just satellite. ECMs are so bullet-proof in most places now that you can't "get into" receivers or integrated DVRs like you once could. DISH had vulnerabilities for a while, but latest Nagra is unbreakable that I've read.

Again, no, nothing here for anybody in N.A. to read or care about.

Basic dimwitted operation is possible, but things can change quickly. If you don't have good knowledge, then you'll be helpless pretty easy, wasting time and money. It is fairly techie, absolutely, if you're any good at it.

You're best off paying for service, buying/renting DVDs of things you want to watch, and using DVD recorders (or HD PVRs) to record what you want from TV.

[[_chef_]]

I second that.

[Seeker47]

. . . but latest Nagra is unbreakable that I've read.

To me, the name "Nagra" refers to the ultra pricey (Swiss made ?) sound recorders long used in film production. (In one past career, I spent a lot of time on film sets.) Any company relation to the one you mentioned ?

You're best off paying for service, buying/renting DVDs of things you want to watch, and using DVD recorders (or HD PVRs) to record what you want from TV.

And I do . . . at least until they shut off or do away with those pass-through outputs. You can see it coming: S-Video Outs are almost gone now, absent -- for instance -- on the latest gen Tivo boxes, and others. So, everyone, hold on to your older sat or cable boxes until they no longer work for you.

[lordsmurf]

Yes, there's a relation!
http://en.wikipedia.org/wiki/Kudelski_Group
http://www.nagravision.com/company-company-overview.php

[[_chef_]]

Nagravision is a complex thing, these days even used with the quasi pay tv bouqet HD PLUS forced by SES astra...........

@Seeker47,
its kinda different here in good ol' europe, the companies have other priorities, the politic set many standards and restrictions, the companies & industry always try to cheat about the law in a creepy way. Its obvious when you have the chance to see behind their bold windows.

The whole management idiot crews are fooling most of all people to follow their rules... nowadays.

[lordsmurf]

Complex is almost an understatement. Last I knew, Nagra2 required emulation, and that was 4-5 years ago.

I took an interest in the tech and concepts, because it allowed download of the MPEG-TS streams, as opposed to your own re-recorded DVR/capture version.

But that posed it's own issues, as the TS were not standardized in N.A. The MPEG files are impossible to edit, and didn't play well as-is on DVD recorders (forget about DVD players, no VR support) -- too much interlace/progressive flip-flopping mid-file. And then the entire setup was never very stable for practical use, due to ECMs that forced constant method changes. I'm just glad I never wasted any money on that, although I know others who did. After seeing the messy/sloppy MPEG TS files, I lost all interest.

Europe's adoption of a fairly universal DVB spec helped where you are.

Good to see you, chef.

[[_chef_]]

Good to see you, chef.

Thanks man!

Nagra3 is all around here these days in europe and it closed the doors for cheap cam emus so far...
But these days the pay tv bosses fear another thing the most: CS aka CardSharing. It will still grow and the battle between industry and pirates will never end.