This is dedicated to all the hackers and the crackers
I see in binary, I speak source code
Step on my toes, I'll post a million jpegs of you in a fag pose
In your digital stance, getting firewalled ho
Cause I'm riding the net in my six-fold
I was a dick with my 56
Now with my cable, I'm able to get that stable
On the out, my name is Ace and I'm a Leo
On the digital highway, my name is Neo and I'm a Nero
In a flash, I'll school you on burning dream caps
You need some ISO? Let me through my hard drive rifle
Our exchange you could never stifle
In a digital hug, you just caught the love bug
I bootlegged your CD, I caused a fight between Un and Jay-Z
Your CG, it's all gonna be free
Whether we take it by force or we take it nicely
You feel that rattle in your bones?
When I tell you we just hacked out Jones
And NASDAQ leaves you flat on your back
Cause I am he who loves to hack and crack
This is dedicated to the hackers and the criminals
Serial phones, source code with ISO
Hello and welcome to Binary Revolution Radio
Episode number 137 for Fat Tuesday
September 28th, September, February 28th, 2006
I'm Strom Carlson
Wow, you can't even tell what the hell September is
Why would you even think that Fat Tuesday is in September?
We're almost on the opposite side of September
I guess so, jeez
I'm Black Ratchet and we have today as our co-host is Useless
Yo
He's not Useless, but that's what his next handle is
Oh, that's debatable
Who's going to be
I don't know, I
You kind of proved beer
You know what the heck you're talking about at least
I don't know, Strom's met me
Yeah, kind of useless
No, no, not useless
You gave me beer
I'm happy about that
Why don't I get beer?
Cause you weren't
Cause you didn't come to my city
Yeah, you didn't come down to TourCon
And meet up and get free beer
Well, you people should have your damn cons on the freaking East Coast
That's what it comes down to
No, no, no
It's going to be cons on the East Coast
Dear God
Make Boston a two-hour drive away
Just like San Diego
And I will be there
I'm going to be trying to go to New York
So if you want to meet me, show up
Hopefully I will be there
Yeah, I hope so too
So anyway, we are
We'll all be at Coke
Hopefully I'll be presenting at Coke
But anyway
We are live tonight
We're already veering off topic
And talking about beer and Coke
Oh yeah
So anyway, we are live again once tonight
Live once again tonight
And if you'd like to call in
And berate us about anything you want
Our call-in numbers are
From within the continental US
888-9-BINREV
Toll-free call
So no complaints about
Oh, I have to
It's a toll call
I can't use the phone
It's free
888-9-BINREV
If you're calling from outside
And I assume Zygmunt's answering the phones
Yeah, we assume Zygmunt's somewhere
They're answering the phones
If you're calling from outside the US
It's country code
1-213-415-1047
And if you're calling from the UK
If you're up at this crazy hour in the UK
It's 0845-646-0102
We assume that still works
We think
Someone should tell us if it doesn't
Actually, we
I tried to dial it tonight
With something that we're going to actually talk about later
In one of the emails
And I couldn't get to it
But of course it was like
It was dropping
The service was like
Please enter the country code
And the
You know
The number you want to dial
It kept on bombing out
When I hit the 0
Let me pick up my home phone
And dial this
And see what happens
You're actually going to dial
Wow
This is dedication right here
This is dedicated
Well, Strom is sort of dialing up
We have a couple of housekeeping issues from last week
I think this is the first to actually have
Like housekeeping issues to talk about
There apparently is a Linux phone out there
And it's available in China
It's tinyurl.com
Slash
Golf
Hotel
X-Ray
Victor
And it's made in China
And I don't think it's actually released stateside yet
But
It runs Linux
And I guess you can do
Linux-y things on it
Yeah, all it did was hang up on me
And it squeaked and it hung up
So I don't know how well it works
It may not work from outside the UK
I don't know
Well, it's like
Supposed to be like a special number or something
I guess
From what he was telling me
Or it's like
Like low rate or something
I don't know
Oh, yeah
If it's a special number from within the UK
For rate reasons
Then obviously it's not going to work from outside
So there's no way I can test it
Yeah
Oh, well
Yeah, I don't know
So before we go too off-topic
Should we
What should we do?
Should we jump into our email
Or should we
Announce our
Tonight's topic first
And then jump into the email
Well, let's
I mean, we were talking about the
We have the
The PDA expertos
Have both published photos of the
Higher smartphone
Running Access Linux Platform
So
I don't know what Access Linux Platform is
Or anything
And the photos they have
Just looks very weird
Like it definitely looks like a mock-up
With like the
The
The picture of the screen is
Like photoshopped in
So
Who knows
But I guess there are Linux phones out there
And we also have a
We have a
Somewhat
Semi-live report
You know
Via satellite, I guess
The email could have bounced off a satellite
Natus is
From last week's episode
NTP vs. Rim
Natus says
For anyone who didn't hear the news on Friday
Rim got lucky
And the judge had enough sense
To not make a ruling just yet
It may happen
But the judge did not give a specific date
Just as soon as reasonably possible
He might be waiting for the patent offices
To reject the rest of NTP patents
Which will be happening soon
Or maybe he's waiting for a settlement
But I don't think that'll ever happen
So for now
I can still have my Crackberry
An email to
Fear
Hack the plaintiffs
Natus
With the Nikes in the summer
And the mink when it's cold
I don't get the reference
But I'm assuming
It has
Some type of
Probably some song
But I've never heard
Well
Natus
Where is mink right now
Because it's probably very cold
So yes
So
Yes
So
And I don't think he actually
Explicitly mentioned it
But one of Blackberry's patents
Got rejected
Was that
I don't remember when that happened
I think that happened
Between that
Last show and now
No before
Before the show
At least one
Had a non-final rejection
And then
I don't know
If any more
Yeah let's move to be
A final rejection now
Ah okay
Sweet
I think
I don't know
See if Natus was here
He'd know this
But he's not
So we're boned
I don't know
Do you want to go into email first
Or do you want to toot your own horn
Hmm
I guess I might as well
Toot my own horn
Actually
Okay we can toot your own horn now
No no actually no
Go strong
Better to leave it for hacking stories
Right
Alright that works
That works
Okay
For all the
So don't go away
We'll have excitement
And personal hacking stories
Don't go away
We have big giant news
And stuff
Yeah
The stuff especially
You know
Our first email is from
Voltagex
And he writes
I assume it's not here
Hi dollar sign hosts
I was wondering if it's possible
To run a brute force attack
Against a wide range of encryptions
Or if there's a way to identify
What encryption method
Something is using
I'm not trying to do anything malicious
I'm just curious to know
How my favorite online game communicates
Thanks in advance
Voltagex
Just to get this out here
First
El Jefe
Also says
That the UK number
Is not working for him
But he's not also
From the UK
I think
Unless he suddenly moved
So
We don't think
The UK number works
And we will endeavor
To have that fixed
By the next show
As to address
Voltagex's email
The wonderful thing
About encryption
Is that
You need to break it
In order to figure out
What the heck it's doing
Basically there's no real rate
Of brute force
An encryption method
That you don't know works
Because basically
Brute forcing is trying
Every possible way
Of breaking it
And
You need to know
How it works
In order to
You need to know
How it works
In order to break it
Yeah
Whether it's like an AES
Or
Whatever
Well it's a symmetric
Asymmetric
Yeah exactly
What the key length is
The algorithm it works
And key length
Exactly
So
You basically
Need to break it
In order to find out
What it is
In order to break it
So
Chicken and the egg
Sorry
You're
Yeah you're
You're a bit hosed
If you want to start
Like looking into
Doing
Breaking ciphers
And everything
Just to get this started
I'm assuming
It's some type of
Probably symmetric cipher
Where basically
The client knows
A special key
And the server
Knows a special key
And it's just a matter
Of finding out
What that special key is
To break the encryption
If it's encrypted
In the first place
We don't know
It may just be
Obfuscated
Yeah it's probably
Definitely almost
It's almost definitely
Symmetric as
Sort of an asymmetric
Key would be
A bit of an overkill
Because mostly
Asymmetric is
Two separate parties
Who don't know
About each other
As opposed to
This where it's
Basically
How everything works
Yeah pretty much
Good luck
Have fun
Yes and we've
Also confirmed
That the UK number
Is down completely
Thank you
El jefe
I can never
Pronounce Spanish
El jefe
Yeah well
That's because
You don't live
In Southern California
You couldn't
Pronounce
Okay our next email
Is from
The Lipo Man
And he says
Dear H&CH
I assume that's
You and me
Or something
Thank you for making
Host and co-host
Oh host and co-host
Okay
I didn't know
Well I don't know
I'm kind of inept
At these things
Thank you for making
The tour episode
Now I can surf freely
And watch
She-mail pictures
There's something
About a man with boobs
That makes me horny
Ah ah
Stick that in me now
Oh
Bang
Yep
And um
Yeah
These
These wonderful people
Are our listeners
Hello audience
Thank you for that email
And we're glad
That Tori can assist you
In surfing
She-mail porn
Yeah
That's kind of
Disturbing
Hey you know
That's what the internet's about
Porn
Wares
And mp3s
Yeah I guess so
It takes a lot
To disturb me
Though
And that
Yeah
I'm sorry
Minorly disturbing
I can really like
Start pushing your buttons
About this
But I'm not going to
And we're going to
Attempt to keep this
Show G-rated
Yes
Well that's why
I'm dancing around
Actually saying anything
Alright
Next
Next email
Is from G.I. Joe
And says
Hello
Just a thought
Have you ever considered
Running a voicemail
On the 8
I assume means
On the toll free number
During the week
And gadget podcast
So then if you aren't
Getting calls
You can just play
Voicemail questions
Left during the course
Of the week
Hugs and kisses
G.I. Joe
This is one of
Hugs and kisses
Well we love you too
G.I. Joe
And I've got a bottle of lube
With your name on it
But anyways
Actually
I keep forgetting
To turn the 800 number
Onto the voicemail
During the week
What I really need to do
Is have it do
Some sort of
Time based system
Where
Pretty much
If you call
During the show
It routes you
To our call in queue
And then if you call
When we're not
Doing the show
Then it routes you
To voicemail
But I think
The problem with that
Is that should we
Ever do a show
Pre-recorded
I would then have
To remember
Not to turn that on
So you'll then
Wait in the queue
Forever during
The entire show
So yeah
I'll start doing that
Starting after this show
Actually
And then
I believe
With asterisk
You can say
If someone calls
Between
X and I
That bit is totally
Easy to do
Time based reading
And whatever
But I just don't
Want it to be
So that if we ever
Do a pre-recorded show
I'll forget to turn it
On to voicemail
For that particular
Hour of the show
Then we get people
Calling in
And just waiting
And waiting
And getting
Getting angry at us
And so on
Well that's why
We always say that
Hey you know
This show is pre-recorded
We're not live
We're not taking phone calls
True
They don't pay attention
To that
I guess
But
They're doomed
Yeah
It is my account
The money for the calls
Comes out of
Excuse me
It's our account
Okay okay
It's our account
But whatever
We've got to pay for it
That was my Defcon money too
Damn it
Alright alright
In any event
Yeah it's coming out
Of our pocket
So
Our next email
So are you going to say
That it's going to be on
After the show
Or after
Yeah it'll be on voicemail
After we do this show
Okay so
G.I. Joe can call in
And leave voicemails
And talk about
How he loves us so much
And then next
Next week
Two whole hours
Of nothing but voicemails
That say
Dead hookers
Well we have to
Scan them out first
Of course
Anyway
Alright so
This next email
Is from
As he claims
We're supposed to
Pronounce it
RHNnet
Hi hosts
Slash co-hosts
I really enjoy
Your show
But I was listening
To show number
136
The Blackberry Battle
And there was
Some misinformation
In the opening
Part of your show
It was said
That Kevin Rose
Was suing
Dig.de
Slash
Yig.de
However
In the last episode
Of Twit
Episode 43
That's
Twit.tv
Kevin Rose
Talks about this
And says
That the company
Has had no contact
With dig.de
Slash
Yig.de
Whatsoever
However
Dig.de
Slash
Yig.de
Said that they
Were being sued
Kevin says
That they are
Just trying to
Get attention
So Kevin Rose
Did not do anything
To scare
Dig.de
Slash
Yig.de
Just wanted
To clear things up
Keep up the great work
RHNnet
On the bus
In Canada
On the bus
Get on the bus
Woo
Yeah he's
He's doing
Metaphorical
Or sending it
From a mobile
Phone
I'm assuming
He's sending it
From a mobile
Phone
We don't do
Stuff that's
Metaphorical
On bin
Riv
No
No metaphor
Ever
Yes exactly
I mean
Yeah
I mean
I
Of course
You know
I found about
This just
Before the show
And I ran
To a rave
About it
On the show
And then
The next day
I expect
You know
Slash
Dot
To pick
It up
Maybe
CNET
And talk
About how
Everything
Is horrible
Is happening
With you know
Online
Trademarks
And copyrights
And no one
Picked it up
So I started
Doing some research
In it
And I really
Couldn't
Besides like
Like a handful
Of English
Like two or three
English speaking sites
Carried this
And there was
A good amount
Of stuff on
Like a bunch of
Blogs in Germany
About you know
Yig
Slash
Dig
Dot
De
And I
Translated
A couple
Of them
And a lot
Of them
Said that
You know
Oh they
Are being
Sued
Oh they
Aren't
Being sued
But they're
Changing their
Name
Oh they're
Running
Scared
And I've
Never actually
Seen something
That actually
Would they
Say they're
Being sued
I've seen
A lot of
People say
That they
Are being
Sued
But nothing
Actually coming
From them
So but
As for whether
Or not they're
Making attention
I really just
Think it's
They they
Basically like
You know
Dig dot
Com did
Come out
And basically
Register dig
Dot com
There's a dig
Trademark in
The European
Union I think
I said like
The 17th or
Something and
So four days
Later this
You know
Yig
Or dig
Dot de
Changed their
Name to
Yig dot
De
And I
I really
Think what
It is
Is I
Think that
Basically it
Was a
Chilling effect
And plus
You know
Kevin Rose
Is you know
The devil
Incarnate
So
And we
Should all
Know that
I
Personally I'm
Just concerned
About
The chilling
Effect it has
Like you know
If I
If I go out
And I
Register
I don't know
I can't really
Pick up a good
Name
So if I
Come out
And I
Register
Dogball
Trademark
A name
Yeah well
I mean
If I come out
And I
Trademark
Slash
Dot
I mean
Can I
Sue them
At that
Point
Or do
They have
To change
Their
Name
Or are
They
Going to
Be scared
Or
Or if I
Come out
And I
Trademark
Binrev
And I'm
You know
I want to
Like you know
Take binrev
For my own
Nefarious need
It's
I mean
This person
Has had
This
These people
Have had
This website
For
You know
I think
Since 1999
Or so
Well they
Had this
Website
For a
While
And you
Know
If
Someone
Comes along
And registers
A name
Or trademarks
A name
They have
To change
It
Just
It
Sucks
I mean
This
What this
Really
Reminds me
Of
Is
A
Lighter
Version
Well
Technically
It really
Doesn't
Because it
Wasn't
Actually
A
Lawsuit
But it
Was
I
Think
I
Mentioned
It
Last
Week
Etoys.com
And
Etoys.org
Oh yeah
They were
Etoys
And there
Was
Etoys
I
Don't
Remember
Oh yes
That was
The case
Was
But it
Was
Years
Ago
Etoys
Is
The
Now
Defunct
Online
Toy
Shop
And
Etoys
Was
Like
Some
Sort
Of
What
Were
They
Like
A
Comedy
Group
Or
An
Art
Group
Or
Something
Like
They
Did
They
Were
German
They
Were
German
They
Been
Around
Since
Like
The
Late
80s
Or
The
Early
90s
Or
Some
Ridiculously
Long
Time
And
Then
Etoys
Sued
Etoys
And
Etoys
Had
Only
Been
Around
Since
1999
Or
Something
Like
That
I
Want
To
Say
That
1998
Actually
Because
They
Went
Public
While
I
Was
Still
In
College
Or
While
I
Had
My
Freshman
Year
It
Might
Be
1999
Yeah
Because
I
Don't
Know
Hey
1999
Early
1999
Or
Late
1998
Yeah
1999
Was
The
Year
Of
Tech
Into
Our
Web
So
Yes
I
Remember
All
Of
My
People
On
My
Floor
Like
There
Was
Like
Two
Or
Three
People
Who
Had
Just
Like
Constantly
Was
Like
Oh
Get
Rich
Quick
Get
Rich
Quick
Dude
If
We
Do
This
We'll
Just
Get
Rich
And
They
Were
Like
Oh
My
God
We
Need
To
Open
Up
All
Of
These
Online
We
Need
To
Open
Online
Trading
Account
Publicly
Traded
Stock
On
This
They
Have
All
Divided
It
All
Up
Oh
Yes
There
Is
We'll
Be
Able
To
Buy
It
I
Laughed
When
They
Fell
Flat
On
Their
Face
Yeah
But
God
Do
You
Remember
The
Good
Old
Days
When
You
Come up
With
Any
Crazy
Idea
You
Could
Say
I'm
Going
To
Do
Anything
And
Just
As long
As you
Through
Internet
In
There
Somewhere
Venture
Capitalist
With
Throw
Money
At
You
Like
There
Was
No
Tomorrow
Remember
Those
Good
Old
Days
No
I
Don't
I
Was
In
College
And
I
Was
In
High
School
So
Well
Obviously
The
People
Getting
The
Money
Thrown
At
Them
From
Venture
Capitalists
Were
Not
Us
Yes
But
It's
Nice
To
Fantasize
That
One
Could
Theoretically
Have
Done
Such
A
Thing
A
Long
Time
Ago
Yes
A
Long
Time
Ago
In
Silicon
Valley
Far
Away
Then
Everything
Started
Going
South
Like
The
Year
Before
I
Graduated
And
I
Was
Like
What
The
Hell
Yeah
What
Is
This
Shit
I
Know
No
Fun
For
Us
We
Were
Born
A
Couple
Years
Yeah
All
Right
And
Our
Final
Yeah
That's
Our
Final
Email
Is
From
Smarther
I
Always
Trying to
Pronounce
Myself
As
SM
Arthur
Smarther
Or
Smart
Her
Or
Smart
Arthur
Or
Something
Like
That
Anyway
The
Email
Is
Hey
Guys
I
Just
Started
Listening
To
Your
Show
About
A
Month
Ago
And
I've
Been
Finding
Quite
Enjoyable
And
Informative
I
Have
A
Question
Regarding
Asterisk
Or
I
Guess
VoIP
In
General
And
Domestic
Spying
It
Has
Recently
Come
To
My
Attention
That
The
U.S.
Government
Monitors
Every
International
Phone
Call
And
Randomly
And
Not
So
Randomly
Monitors
Domestic
Phone
Calls
I
Was
Wondering
If
You
Know
Anything
About
Wiretapping
VoIP
Phone
Calls
It
Feasibility
Whether
Or
It's
Being
Done
If
It
Falls
Under
Recent
Admissions
Of
Domestic
Spying
I
Have
Been
Using
Blasterisk
That's
Now
I
Guess
You
Read
The
tiny
url
tinyurl.com
slash
quebec
golf
juliet
whiskey
a lot
recently
to make
international
phone
calls
and
I
was
just
wondering
about
whether
or not
my
convos
are
being
listened
to
or
how
easy
that
would
be
to
do
keep
up
the
bitch
and
work
your
pal
smarter
I'll
do
the
tapping
thing
first
and
then
we
can
address
Blasterisk
pretty
much
the
deal
is
that
I
guess
it
depends
really
on
where
your
phone
call
interfaces
with
the
PSTN
if
it's
carried
as
IP
traffic
all
the
way
to
the
foreign
country
and
the
international
gateway
is
in
that
foreign
country
there's
absolutely
almost
zero
chance
I'm
not
going
to
say
completely
zero
chance
I'm
wrong
but
it's
pretty
small
I would
imagine
like
.0000001%
chance
that your
phone call
is going
to be
monitored
if
the
gateway
between
the
VoIP
service
and
the
PSTN
is
here
in
the
US
like
say
you
hit
a
PRI
in
San
Jose
or
Michigan
or
Florida
or
something
and
it
heads
out
the
typical
standard
AT&T
international
gateway
then
it's
likely
subject
to
the
same
wiretapping
as
all the
other
international
phone
calls
are
but
I mean
really
if
you've
got
nothing
to
hide
oh
don't
say
that
because
everyone
will
be
like
oh
yeah
it's
just a
cop
out
yeah
it's
just a
cop
out
but
still
I
mean
be
smart
about
it
if
you're
going
to
talk
on
international
calls
don't
say
stupid
things
well
really
I
mean
this
whole
don't
let your
paranoia
consume you
yeah
yes
of course
this
blaster
thing
is sort
of run
by
indie
media
and they
seem to
be having
their tinfoil
hats on
overdrive
99.9%
of you
are not
going to get
tapped
the .00001%
of you
who are
calling
you know
mobile
phones
in
Afghanistan
they might
be interested
in that
and rightly
so
because
who are
they really
interested
in tapping
are they
interested
in tapping
you
or are they
interested
in tapping
the person
you're
calling
so
I mean
this whole
domestic
spying
thing
is really
just getting
thrown out
of proportion
I mean
it's
more of a
question
of
no one
knows
what the
hell is
going on
at this
point
basically
it's
become
you know
it was
one article
in the
New York
Times
and then
people said
okay
yeah
we might
be doing
this
and it
just
no one
everyone
is just
sort of
saying
making up
as it
goes along
no one
has any
evidence
yet
that's
the
problem
and
until
then
just
everyone
is
going
oh
and just
you know
running around
screaming
holy crap
I'm buying
stock
anyway
this is
bordering
on politics
and we won't
talk about
this
I'm buying
my stock
in the
Reynolds
tinfoil
company
exactly
remember to
have it
shiny side
out
because you
don't want
the stuff
reflecting in
no no no
I was reading
yeah well
didn't actually
someone do a test
on this online
and like
they proved
that if
you wore a tinfoil hat
it actually
amplified the
radio signal
setting into your brain
yes I think
I recall
reading something
like that
because it's
like a
parabolic
dish
that focuses
on your
brain
exactly
yeah
so
did you
play around
and did you
look at this
blasterisk
me
yeah
no I haven't
played around
with it yet
actually
I've been
busy with
my
interesting
yeah
I've been
busy with
my
fun project
which we'll
get into
in a minute
yes
it's
interesting
I'm not
I mean
I played
with it
for only
like 30
seconds
today
and
it
seems to
be like
some
sort of
free world
dial-up
clone
but not
really
I mean
it seems
to be
I don't
know
I guess
you could
really
just call
it
more like
a clone
of
Telefreak
and like
you call
into this
number
and you
get routed
and they
have like
numbers
all over
the place
like
international
like
they have
stuff
in like
Boston
Fort Worth
Texas
like
two or
three other
stateside
locations
and they
have like
stuff
all over
the UK
and
all over
Europe
too
it's
pretty
interesting
and
you hit
this
menu
and you
can
dial out
international
for free
which was
absolutely
amazing
of course
I didn't
actually
wasn't
not able
to actually
dial out
in the
first place
because I
kept on
getting an
error message
that's how
I was
trying to
test our
UK number
but
feeling
miserable
on that
it was
definitely
their service
it wasn't
actually
the UK
number
failing
so
if you
read it
they said
oh you
can do
this
you can
do
extensions
you can
do
voicemail
and you
can control
Steve's
computer
if you
know the
proper
tones
and I'm
just like
okay
I didn't
actually play
with that
part yet
but
it's
interesting
you should
look into
this
if you're
interested
in the
phones
it seems
to be
at least
an
interesting
way of
dialing
outside
the country
and making
free phone
calls
if nothing
else
I just ran
to the kitchen
and got my
roll of
aluminum foil
woohoo
yeah I'm
putting my
tinfoil hat
on now
well that's
good and
you're going to
save yourself
from 802.11b
transmission
oh my god
brain frying
all right
you seem to
be very
quiet
you do
know you
can like
speak up
at any
time
during
those
welcome
to
bin rev
land of
madness
and tinfoil
and good
beer
indeed
oh and
shitty beer
as it might
have it
yeah and
shitty beer
too
but I guess
shitty beer
is better
than no beer
indeed
I'm going to
see a lot
of shitty beer
this evening
woohoo
just to put
it out here
888-9-BINREV
is our
call-in number
tonight
but you
have
Zygman
is standing
by screening
your phone
calls
so useless
since you
haven't talked
we're going to
make you go
first
personal hacking
stories
what have you
been working
on lately
have you been
messing around
with anything
that's a
kind of a
toughie
yes
how much
I'm allowed
to talk
about
I don't
do
I actually
I work
on medical
equipment
for a living
which is
an interesting
profession
for a
gentleman
like myself
let's see
not a lot
regarding that
that would be
of any interest
mostly my
topic
that's pretty
much it
so you've
been messing
around with
our topic
tonight is
hacking your
TiVo
so that's
what useless
was talking
about
so we'll
get into that
later
and I
you better
like kick
back and
like recline
in your chair
for this one
Strom what have
you been up
to lately
oh boy
this is a
fun one
well here's
your first
hint
if you go
to security
focus.com
it was the
top story
earlier this
evening
let me pull
it up here
and take
a look
yeah it's
still the
top story
report
express pay
can be
exploited
for cash
I will
I'll read
you the
news report
a vulnerability
in the FedEx
Kinko's
express pay
system allows
an attacker
to receive
free services
or even
cash from
the stores
according to
a post on
full disclosure
yesterday
the express pay
system uses
a Siemens
Infineon
SLE4442
smart card
to store
their pre-purchased
value
and a
three byte
security code
prevents rewriting
of the card's
data
the method
described for
obtaining the
security code
involves using
a logic analyzer
at a point
where the card
is written to
and it is reported
that this code
is the same
across all cards
in circulation
the various
byte ranges
are described
in the posting
however the
crucial point
allowing this
to be an issue
in the first
place is that
the express pay
system completely
trusts the value
reported by the
card and does not
require the database
to confirm this
value
serial numbers
on the card
for store location
may be changed
to any value
without consequence
as well
allowing for
straightforward
cloning of the
cards once
produced
the report
was sent to
that
was by the
researcher
on february
19th
however no
reply has been
received at this
point
so the
researcher is me
wow how
responsible
of this
researcher
who is this
researcher
this researcher
would be the
one and only
strom carlson
unless some
other strom carlson
i don't know
about
just ace
john carlson
didn't you know
you have a six
max
yes yes yes
i do
thank you
zafod
yeah
so so
please tell us
what exactly
you know just
if you want to
give us a nice
little you know
5,000 foot view
of what has
happened
you mean you
mentioned this
on an earlier
episode of you
were messing
around with
smart cards
but well
pretty much
you know the
the FedEx can
go smart cards
like like the
report says
are
what are they
they're protected
by a three
byte security
code that
prevents you
from rewriting
them
so pretty
much any
schmuck with
a logic
analyzer and
knowledge of
how the
protocol works
can pick
the security
code out of
the data
stream and
then rewrite
the cards
so the
story is posted
on dig as
well and if
you go there
there's a
photo i took
the maximum
value you can
put on a
card with a
real life
situation is
100 bucks
and so i
i should
mention before
i get too
deep into
this that i
was commissioned
by secure
science corporation
to do this
research but
um anyway
yeah go lance
james if you
haven't listened
to our lance
james fishing
episode go
download that
and listen to
it he's
awesome so
his company
commissioned me
to do this
research and
uh anyway
um i have a
photograph of a
card i modified
in the in the
kiosk and the
kiosk says
maximum balance
reached
313 dollars
and 37 cents
what what made
you choose that
number uh i
thought it would
be very elite to
to choose 313.37
but um well i
know maybe maybe
just randomness
no i i figured if
if there was a
number if there
was a value for
the card which
was not too
ridiculously uh
high on the
chart and yet
still says i
hacked this it
would be 313
dollars and
37 cents
okay so for
the just just in
case people don't
know what what
exactly can you do
with these these
smart cards well
pretty much you can
add value to them
it seems without
consequence because
they never bother to
check whether or
not uh the card has
been altered they
never verify the
value against the
database um you so
you can get free
xeroxes theoretically
you can get uh free
unlimited time at the
computers theoretically
and you can even
take the cards to
the cashier and
cash them out
so basically you
can you can you
can sit there and
say put a hundred
dollars on 10
kinko's cards go to
10 kinko's around the
area because
technically if you do
this like uh at one
it'll be kind of
suspicious yeah yeah
they might get a
little suspicious and
basically walk out and
an afternoon's work you
can make a thousand
dollars or steal a
thousand dollars so
let's let's let's
let's clarify that it
is stealing
if you're a shady
fellow which we are
not yes so yeah if
you do that yes you've
got a thousand dollars
in your pocket where
before there was zero
so well how long does
this take you to do
um i let's see i
started doing the
research i see i i
guess i started i've
been researching it on
one off for a while i
got heavy into the
research uh towards
like september october
area of last year and
i finally i finally broke
it on february 8th
and you you it did so
you said you've
contacted fedex and
have you actually done
have they i mean they
haven't done anything but
have they contacted you
back no they never
replied to our uh they
never replied to our alert
to them and then uh so
so what happened
actually was someone
from uh from cnet uh
sent lance an email and
said uh i i was trying
to in fact let me if i
pull up the uh the dig
article about it this
this is in the notes um
so someone so a uh a
reporter from cnet
contacted lance and said
he had called kinkos
about just called
fedex kinkos about this
and fedex kinkos uh mailed
mailed them back and said
our analysis shows that
the information in the
article is inaccurate and
not based on the way the
actual technology and
security function security
is a priority for fedex
kinkos and we are
confident in the security
of our network and
preventing such illegal
activity so of course uh
this means that fedex kinkos
obviously has no clue how
the system works and on
track who is the company
who developed the card
system is lying to fedex
through their teeth and
lance posted said all the
person has no clue actually
how the system works
yes exactly and it's just
doing something that
sounds good so lance
posted our response and
then my photograph of
313 dollars and 37
cents
so look at that you're a
minor celebrity you if you
get interviewed on this
year you are going to
pimp the show right of
course i'm going to pimp
the show wow okay just
making sure yeah it's wow
it's got 102 digs already
and it was 57 digs before
we started the show well
before we started the show
it was like 17 i mean when
i checked it out like 915
oh really it was uh 17
wow okay i think i don't
i'm not sure when exactly
it uh was now i don't think
i still have it up oh well
yeah but when you first
sent it to me i checked it
out it was like 17 of them
wow so yeah it was top story
top story and security focus
i'm hoping it goes to
slash dot wink wink
if i think i don't know
someone uh submitted the
slash dot earlier today and
uh nothing happened yeah well
i'm sure if if they sat on
it and then they said oh
wait a second this is getting
a big thing they should they
would probably be too well to
post it to cover their asses i
think
right i don't know maybe i'm
not really a regular slash dot
reader so i don't know how
the dynamics of slash dot work
really i i haven't i haven't
actually like gone around and
like started like i used to
religiously read slash dot but i
haven't done that in like
forever
yeah i think i like maybe once a
week or something i just kind of
pull it up and flip through it and
go oh that looks interesting junk
junk junk junk junk interesting junk
junk junk junk junk junk junk
oh i guess yeah well um i mean
that's basically what i do i just
i don't really have like more of
a uh schedule i guess
um as for me i assume you're done
is there anything else you would
like to say about this
uh yeah that's pretty much it i'm
going to be i guess i'll pimp the
talk i'm going to give i'm going
to be giving this talk at layer one
in in april in pasadena and i'll
also be giving the uh the talk at
prime i'm going to submit the
talk i haven't sent it in yet to
black hat and defcon and see if
they uh say yes so definitely
layer one maybe black hat and
defcon
my goodness you know get black hat
you might get busted by cisco or
something
oh no
and i'll rip out all the stuff in
the uh pages
or if your pages presentation out
of the uh documents
holy crap
um that's for me i i haven't been
doing anything
i've been i've been just doing
random programming i i've i've
stank uh approached me with an
idea and i can't say what it is
yet
but uh i've been
i've been programming an
interesting utility that that might
be released relatively soon
we'll we'll we will see it's it's
cool look at that way
um yeah other than that i haven't
really been doing much i've been
work's been work's been
interesting how can we say
so our our our show topic tonight
is i don't know i guess you could
say tivo hacking or yeah tivo
modifications how about that or just
hardware hacking your tivo
yeah hacking your tivo i guess i'd
have to i might have to buy a
television set after listening to
this show
oh yeah
oh you'd be
television is overrated
actually can you use tivo with
just i i assume you can use tivo
just like rabbit ears or something
it's just very useless
well just with rabbit ears maybe
but but you have nothing to display
it on
without a television set
oh that means
oh thank you
yeah i'm just imagining a tivo
sitting there with rabbit ears on
top of it no display device
what's it doing
you have a computer don't you
it's
yeah i've got a computer
okay well you can watch your tivo
through your computer
you can watch it live as it's
recording
omg
yeah you can use uh mplayer
for linux
sweet
all right so
well useless do you want to take
this over or should i just you
know should i just start asking you
random questions
well i'll start out real quick
with a brief thing
everybody knows what a tivo is now
it's it's rampant
nobody buys vcrs anymore
they buy tivos
or if they're really cheap
they buy another dvr
because they don't know
what the hell they're doing
well it's about a vcr
if we go get into that
i have two vcrs on my television
in my bedroom actually
that's the only place that they are
what do you have
virtual phones too or something
oh wait a minute
uh actually i do
they're in the garage
and so do you strom
so shoot up
i know i know
okay
um
i like it when my desk phone
weighs 10 pounds
that's a nice thing to me
hell yeah
anyway
tangent uh
coming back from a tangent
okay
so
tivo
allows you to record
television programs
on
a hard drive
much like you would
if you had a pdr
on your computer
it records an mpeg format
an mpeg 2
and
one of the special things
about tivo
is
it
also has
guide lists
and it automates
all the recordings for you
rather than you just
watching tv on your computer
and going
oh i'd like to capture this
uh
it allows you to
automate everything
in a very simple
user interface way
any
shlomo
out there
can buy a tivo
and now they've got it working
under normal circumstances
you buy a tivo
you get the tivo service
which allows you to
use all of their
uh
guiding information
and some other features
that i'll get to a little later
uh
there are a couple kinds of tivos
out there right now
there's series one
which was the original tivo
not a whole lot on it
um
it's got a telephone port
and some
rca outs
and that's
about it
there's really not
much going on
in that tivo
it records mpeg 2
and plays it back
and it's got some menus
the insides are a little
different
and i'll
again i'll get to that
a little later
uh
series 2 tivo
however
has some other features
on it
it usually has
usb connectors on it
which some of the
series ones had
but you have to look
kind of hard
um
some of them have
ethernet ports
and there's also
a third kind
of tivo
called
the direct tv tivo
d tivos for short
and direct tv
was actually selling
this as their dbr
for a while
they're no longer
doing it
they discontinued it
i think last month
they discontinued
all support
and they decided
we're not going to
do anything with this
because we want
to sell our own
which is a tivo
in disguise
without the brand
name on it
it doesn't have
a little mustache
on it too
um
no it doesn't
have a mustache
glasses over the
tivo logo
any uh
any reference
to it being a
tivo is pretty
much gone
but uh
if you
know
i mean
you're
you're saying
it's a tivo
i mean
are you saying
it's a tivo
but just like
it's unbranded
or are you
just saying
they're just
they're making
their own tivo
thing and they're
reverse engineered
it or something
um
it is a tivo
most of the tivo
software is actually
open source
uh
separate couple
of things
in there
um
they purchased
rights to use
those couple
of pieces of
software
so they got
really old
versions
and they pretty
much took out
the tivo name
which isn't
hard to do
uh
once you start
going into your
tivo and screwing
with stuff
you can change
all kinds of
things
so
i'm sure they
were able to
take out
the tivo brand
name fairly easily
and just bought
license to use
a couple of
uh
applications that
they have in
there like
apg manager
and
that's
that's about
all they did
uh
they still use
i think a
masqueraded version
of the old
tivo software
so that you can
save your
programs on
your computer
basically if you
crack it open
it's it's more
or less identical
to a
tivo
yeah
it's more
or less
like a
dtivo
because they
had a bunch
of hardware
i'm sure
and they
just wanted
to reuse
that anyway
makes sense
all right
so it's got
this this
dtivo
what do we
know
usb
ethernet
rca
what else
does it
have
uh
dtivos
have
uh
places to
put in
uh
cable card
type
uh
access cards
so that they
can decode
decode
the satellite
information
they also
tend to have
uh
on the newer
models
an r.id
just like
any other
satellite
receiver
um
for
if you
don't know
what an r.id
is
it's a
receiver
id
so that
your
satellite
company
can track
who the
hell
you are
every time
you access
their service
oh
like the
little smart
card
thingies
um
actually
it's hard
into the
board
the r.id
is hard
into the
board
and you
can find
it on
the back
of your
desk
uh
what you're
talking about
the
yeah
the smart
card
that you're
referring to
is actually
the cable
card
stuff
which has
all the
decryption
information
uh
cable
companies
use it
but they
they don't
generally use
the smart
card
anymore
they use
uh
actual
plug-in
like a
PCMCIA
card
bus
card
into the
back
of
uh
whatever
device
they're using
like the
scientific
Atlanta
boxes
at one
bar
well
because
those
smart
cards
they're
unreliable
yep
yeah
I know
a bit
about that
yeah
I don't
know
I
personally
if you
set up
a smart
card
right
I
like
the
fact
that
it
will
eat
itself
if you
try to
crack
the password
too many
times
mm-hmm
I
thought
that
was
cool
that
was
a
cool
feature
to
have
it's
a
cool
feature
until
you
actually
sit
there
with
a
logic
analyzer
and
diverse
engineer
all this
oh yeah
but it
was a good
idea
I mean
it kept
people out
for a
while
mm-hmm
well I
mean
just
sort of
go off
a tangent
here
I
mean
I
think
it
was
DirecTV
maybe
it
was
Dish
Network
or
Echo
Star
or
one
of
the
earlier
ones
they
I
mean
there
was
a
large
piracy
movement
there
that
basically
people
would
basically
make
bum
smart
cards
and
they
would
clone
it
and
there
was
like
a
large
group
of
people
who
basically
had
these
bum
smart
cards
who
would
just
pull
down
the
satellite
signal
for
free
until
they
actually
found
a
way
to
combat
them
I
think
I
believe
you're
talking
about
the
Empress
signal
was
the
first
thing
to
do
that
and
they
just
sent
an
out
of
band
signal
down
to
a
lot
of
the
receivers
and
fried
them
yes
I
think
it
was
I
believe
it
was
the
first
one
and
I
believe
there
was
another
one
that
happened
and
it
was
I
think
what
happened
was
it
was
on
Super
Bowl
Sunday
one
of
the
big
TV
things
in
America
they
sent
out
a
special
reprogrammed
it
so
when
you
flipped
your
thing
back
on
it
would
just
say
game
over
on
the
screen
and
I
gotta
say
that
was
it
kind
of
sucked
for
all
the
people
that
were
stealing
signals
but
I
gotta
say
that
was
pretty
elegant
that
is
an
elegant
hack
that's
pretty
cool
damn
them
for
stealing
service
damn
them
stealing
service
is
bad
well
no
see
because
that's
what
I
have
one
of
the
questions
is
that's
one
of
those
nice
hazy
gray
areas
for me
personally
because
you're
broadcasting
the
signal
to me
and
you're
saying
I
can't
listen
to it
I
mean
what
the
hell
is
up
with
that
unless
you
can
say
don't
broadcast
this
within
my
property
you
have
no
right
to
tell
me
that
I
can't
listen
to
the
signal
and
if
I
want
to
reverse
engineer
it
and
listen
to
it
like
for
free
that's
my
prerogative
that's
what the
SPC is all
about
yeah
I don't know
tell me
but
that's
a very
interesting
hazy
gray
at least
for me
I
mean
I
don't
know
how
other
people
look
at
it
but
you're
broadcasting
the
signal
to
me
and
then
saying
no
you
can't
look
at
it
it's
the
same
way
of
you're
saying
that
I
can't
war
drive
I
can't
listen
to
other
people's
signals
as long
as
I'm
not
broadcasting
to
it
on
wireless
access
points
I
mean
you're
broadcasting
it
to
me
I'm
not
talking
to
it
anyway
we're
tangenting
so
series
2
has
this
these
all
these
cards
and
now
what
is
this
thing
that
you're
talking
about
called
HMO
slash
HME
yes
series
2
TiVos
have
a
feature
on
them
called
HMO
or
HME
which
is
the
home
media
option
is
actually
something
like
this
is
one
of
those
features
I
was
talking
about
to
buy
service
from
TiVo
from
to
get
access
to
although
if
you
have
a
direct
TiVo
and
manage
to
get
it
on
there
you
don't
pay
for
it
but
yeah
that's
one of
those
neat-o
tricks
anyways
HMO
was
basically
a
way
to
allow
you
to
listen
to
mp3s
and
get
a
couple
of
cool
pictures
from
your
computer
on
your
TiVo
HME
which is
the
home
media
engine
was
actually
a
newer
edition
came out
a few
months
ago
that
allowed
you to
do a
whole lot
more
on
your
TiVo
using
Java
jar
files
that's
basically
all it
is
your
TiVo
would
hook up
to your
computer
as a
server
and
your
server
would
send
out
jar
files
of
whatever
program
you
happen
to
want
to
run
on
my
TiVo
I
have
a
lot
of
cool
things
on
there
I
can
listen
to
my
mp3s
but
while
I'm
listening
to
my
mp3s
it
shows
me
all
the
track
lists
the
cover
arts
and
the
band
etc
all
kinds
of
information
I
want
to
get
that
it
automatically
gets
from
Amazon
so
whatever
basically
it's
iTunes
for
your
TiVo
kind
of
only
you
can't
you
can't
buy
new
music
on
there
you
can
do
that
a
different
way
it's
the
iTunes
portion
not
the
iTunes
music
store
correct
and
it's
actually
I
believe
the
HME
stuff
allows
you
to
natively
hook
up
to
iTunes
and
use
it
that
way
but
I
use
a
program
called
Java
HMO
that
actually
allows
me
to
add
all
kinds
of
features
because
it's
got
a
bunch
of
built
in
jar
files
one
of
the
things
that
I
managed
to
do
with
it
which
isn't
really
that
big
of
a
trick
if
you
know
where
to
look
it's
Java
HMO
it
allows
you
to
listen
to
streams
now
the
TiVo
Series 2
on its
own
can
listen
to
streaming
mp3s
your
regular
stream
format
the
only
problem
is
it
has
a
real
problem
with
URLs
and
it
chokes
on
any
kind
of
a
URL
that
has
information
after
the
port
number
Java
HMO
had
a
little
jar
program
that
allows
you
to
use
a
full
size
URL
and
also
get
better
stream
quality
because
it
buffers
it
through
your
PC
and
that's
actually
how I
got
binrev
on my
TiVo
yes
so
basically
you can
listen
to
binrev
the
DDP
hack
radio
stream
on
your
TiVo
that's
correct
that's
correct
you
actually
wrote a
letter in
about
this
and
that's
how he
found
you
yes
and
wonderful
ball
was
rolling
to get
you
on
binrev
radio
yeah
I gotta
say
I love
being here
see kids
write us
interesting
articles
and we'll
get you
on the
show
hell yeah
definitely
we're gonna
get flitted
with all
kinds of
non-interesting
articles
but still
send them
on in
I mean
just
send them
on in
we're not
trying to
knock anybody
here
so
okay
so
I mean
I
so I
go out
and I
get my
series 2
TiVo
and
okay
let's
just say
first
like
you know
as
a
normal
you know
clueless
end user
well
I mean
how do
I use
it
what can
I do
blah blah blah
blah
well
your normal
average
series 2
TiVo
that's not
a D
TiVo
unless you
get a really
cool one
doesn't end up
having an
ethernet port
on the back
of it
it has
USB ports
now there's
a list
of
USB
ethernet
adapters
that
the TiVo
has
drivers for
natively
installed
into it
I think
I got
a Hawking
USB 2
ethernet
adapter
on mine
and it
actually
allows me
to hook
up to
the TiVo
service
all the
time
and
use
the
HMO
and HME
options
your
normal
option
would be
to hook
it up
to a
phone
line
and it
dials
that
whenever
it
needs
to
update
so
you get
yourself
a USB
connector
you plug
it into
your TiVo
and you
get a
whole slew
of new
features
from the
front end
I think
it's
got an
option
to
just
I
forget
what
the
label
of
the
feature
is
but
it'll
say
something
like
TiVo
other
features
or
something
like
that
and
you
can
go into
your
preferences
and say
I'd
like to
use
non-Tivo
applications
which
will allow
you to
use
things
like
Java
HMO
and you
can run
that on
your
computer
as a
little
server
on your
own
network
and get
new
stuff
that you
want
on there
as opposed
to what
TiVo
puts on
there
so
basically
you can
run
this
program
on your
I mean
this
technically
really isn't
the
unusual
thing
this is
more like
a power
user
thing
I assume
I mean
I'm not
going to be
able to
tell my
mom
hey
just run
this
Java
applet
and you
can
hack
store
your
TiVo
well
it's
actually
fairly
easy
to use
I mean
if you
plug this
thing
into your
TiVo
turn it
on
plug it
into your
home
network
if you
got a
little
I want
to say
home
gateway
and your
computer's
on the
home
gateway
yeah
you just
run
this
program
I think
it
will
actually
put
its
settings
into the
Windows
firewall
for you
if you
have
somebody
who doesn't
really know
what they're
doing
like
Windows
users
generally
do
universal
plug and
pray
that thing
scares me
to no end
well
it's not
as bad
as it
sounded
when it
first
came out
the
universal
plug and
play
sounded
pretty
bad
and
that
was
scared
as
hell
well
it
made
some
improvement
but let's
not go
over there
so
basically
I can
run
this
little
program
I
get
my
Kivo
if it
doesn't
have
an
ethernet
port
I get
my
USB
adapter
I plug
it
into my
network
and I
just run
this
program
on my
computer
and I
can
push
software
out to
it
there's
one other
setting you have to change in your TiVo
and that's how it dials out
your TiVo is normally set to make all of its calls through the telephone line
but once you plug in that USB adapter you have another option to select
I believe it's a Mac address will appear on the screen where you choose your connection
and you say I want to use the Ethernet connection and you can and boom you've got that program running
on your computer you've got TiVo connecting to the TiVo service through your home gateway
and it's all green from there
hot damn
yeah there's actually a large number of programs that do just that and allow you to add features with HMO and HME stuff
there's one that just stopped development called Galleon
and I think it was supposed to be another very pretty front-ended MP3 listening program for your TiVo
but there's other features that TiVo has on their license here
I'm going to ask you a random question here
I'm not even sure if you're going to be answering it
so I have my TiVo and I have my USB cable
and I'm not interested in paying TiVos per month TiVo service
you know get the listings from us
is there a way around that
because I know there's like XML TV and XML TV2
and all those stuff like you know Myth TV uses
and Freevo which are open source PBRs you run on your computer
I'm curious if anyone's actually started hacking TiVos to use that type of service
so you don't need to use the 4Pay one that TiVo provides
they have and that actually takes a little more hacking skills
you have to get into the actual TiVo operating system
change some settings and say hey I don't want to look at the TiVo service
I want to look at this service over here for my guide etc
and I want to turn off you know updating from TiVo
you have to tell it not to call in
otherwise it'll call in and they'll say oh my god
you don't have any TiVo service
and it'll be kind of a pain in the butt
oh my god no TiVo
so okay so you can use that kind of stuff
okay this actually sounds interesting
and I may actually want to do it
so I mean we're starting to go into like you know power user type things here
so like you were talking about you can start playing stuff on your computer
from your recording TiVo through mPlayer
yeah you can if you have mPlayer on your computer
I think there's a couple of add-ons or codecs
I forget which exactly
I've been trying to get mPlayer to compile under SIG-WIN on my machine
and having a little trouble with the newest versions
but it will play
it will stream directly from your TiVo
and your TiVo will show listings for any program that's recording
and you can download as much of the mPeg as it already has
so being that you can stream from it
if you have decent latency from your TiVo
you can just fire up mPlayer
and tell it to stream from your TiVo's stream drive
or yeah
all right
stream drive HTTP directory
okay so
how about I mean we can stream it while it's recording
and we can stream it afterwards
what happens if say I
recorded my
you know I don't know
let's say Strom recorded Days of Our Lives
because he's a big Days of Our Life fan
and um
yeah
me and soap operas
uh
let's say I recorded the Olympics
all right
let's say Strom recorded figure skating
yeah
there we go
of TV
yeah
he wants
he wants to see
um
shoot
what's his name
Scott Weir
Johnny Weir
I don't know
he wants to see
I want to see uh
Apollo uh
what's his name
Apollo Anton Ono uh
doing the speed skating thing
oh that's a speed skating
there we go
he has a speed skating recorded
is there a way that he can archive that
on his computer
like you know
you know
convert it over to an MPEG
or you know
suck it down to uh
just a file
where he converted over to DivX
or converted DivX on the fly
is there a way that you can actually archive that
take it off the TiVo
and then save it on your computer
absolutely
oh awesome
yeah absolutely
there uh
the TiVo actually offers a program
that they call TiVo2Go
and all it is
is a front end to uh
a TiVo web service
it just hosts
all of these files via HTTP
and you can go download them
the only trouble that you're going to have
is you have to log into the HTTP service
using your media access key
which is uh
something that's
given to you
with your TiVo
it's a little number
that's usually on the back
or
on the box
that the TiVo came in
and it also uh
encrypts the MPEG-2 files
with that
uh
key
media access key
which makes
uh
watching them
without TiVo
a little tough
but uh
is there a way to remove that encryption
has anyone attempted to do that yet?
absolutely a way to remove that
um
the
wow okay
the encryption that it is
isn't really all that tough
um
it just
screws up the MPEG-2
native codec
and it's just
a little addition
on the very beginning
of the MPEG-2
uh
you can
usually remove that
with
a number of programs
I have
on my machine
uh
you can also
use it with a
um
direct text dump
you can cut that
out of the MPEG-2
but uh
one of the things
that people like to do
when they hack their TiVo
is remove that
from uh
from
being added
to the file
as it records
so
so wait
you can actually
tell your TiVo
or like you know
you know
basically you can
take your TiVo
and say
and you know
patch it
so that it says
you know
when you're recording stuff
don't use this media access
key nonsense
just flat out
and record it
straight to MPEG-2
yeah
you can do
just about anything
you want to do
with your TiVo
it's uh
holy crap
it's a
Unix based
operating system
I think the current
kernel is
isn't it
yeah
yes it is
it's been that way
for God
since it came out
yeah
well he said
Unix based
so I was like
I'm sorry
it was Linux
but
no it's
it's Linux
I'm sorry
I
no no problem
no problem
I was just
I can say the other
okay
all the
here's Linux
all the
yeah yeah yeah
Linux traveled
and all his
you know
followers
what have you
okay
so
so I remember
I remember
is there any other
like you know
fun things
that are just
neat hacks
that you just
want to get out here
because you
I mean you also
said along the lines
of uh
direct TV
TiVos are cool
and I'm just
curious why
okay
direct TV
TiVos are cool
and here's why
direct TV
TiVos are the
only PBR that
we have right
now that are
at a decent
cost
and you can
record HD
programming on
however
it's kind of a
bitch
because they're
set up for
satellites
so you have
to hack the
crap out of
them to get
them to work
on a cable
connection
or just record
analog programming
and you have
to hack the
crap out of
them to get
the HMO
HMO
HME
service on
them
because TiVo
was supposed
to add that
never did
and has
since discontinued
their support
for it
so they're
not ever
going to
so you
actually have
to go out
and get
standalone TiVo
operating system
and hack that
so that it
can work with
your RID
and the
Direct TV
service
all kinds
of crazy
stuff
but it's
nice
it is nice
that you can
save
Direct TV
programs
in HD
format
on your
machine
so you've
got to
leg up
on just
about
anybody
else
out there
and I
gotta say
I mean
this is
pretty
mean
even
for the
you're
talking
about
you know
Direct TV
with
you gotta
hack the
crap out
of them
but still
they record
HD
which is
amazing
and while
you were
talking about
I quickly
pulled up
eBay
and I
said
wow
TiVos
are actually
pretty nice
I might
scrap my
ID for
a Myth TV
box
and just
pull a
TiVo
out
and go
do that
and they're
just incredibly
cheap
I'm seeing
stuff that's
like $25
$50
I mean
the most
expensive
ones I'm
seeing
that are
going in
an hour
or so
are like
$125
and those
are
stuff that's
all modded
already
right
and one of
the most
common
mods to
make to
your TiVo
is actually
to throw
bigger hard
drives in
it
from what I
understand
the most
space that
you can
get in
a TiVo
right now
is
300 gigs
I think
that's the
max
is that the
max
technically
or the
maximum
and how
much
should that
actually
record
that's
the max
of the
hard drives
that it
will recognize
I think
there's
some
other
nicer
ones
what
company
is that
from
Humax
that
will
actually
support
300
gigabyte
hard drives
and it
has
master
and slave
for one
IDE
channel
so you
can throw
two 300
gig hard
drives in
there
but I'm
not sure
about that
so you
can get
a shit
load of
okay
so you
can maximally
put a
300 gig
hard drive
in there
what's the
highest
stock
hard drive
it comes
with
I think
120
is the
max
stock
hard drive
that it
will
actually
come
with
okay
and how
many
hours
does that
usually
record
on the
best
quality
recordings
because you
can actually
choose
quality
from
within
your
TiVo
and tell
it how
high of
a quality
you want
to record
I believe
it's
let's see
I have a
40 hour
TiVo
that I
need to
mod
and throw
a new
hard drive
in
it records
something like
40 gigs
is something
like 12
hours
recording
service
so it
would be
300
gigabytes
would be
about
that's a
pretty good
thing
that would
be
about
at least
two days
or something
exactly
and I
actually have
a DVD
burner
in my
TiVo
you can
actually put
a DVD
burner
in your
TiVo
yeah
it actually
came with
it
but I'm
going to
mod it
so that I
can use
layer
burning
it came
with
it's one
of the
Humax
things
you can
get
TiVo
with
DVD
reader
slash
burner
in it
and you
can actually
just choose
to save
your
programs
as they
record
to DVD
live
hot
damn
I gotta
say
I'm
actually
I remember
when
like TiVos
first came
out
and
I mean
they're
talking
these are
like
this is
like
1999
2000
when
series
ones
first
came
out
and
they're
like
oh
you can
put
an
extra
hard
drive
in it
and I
was
like
oh
that's
pretty
good
you know
wake
me
up
when
you
can
actually
export
these
off
the
hard
drive
yeah
you can
actually
do that
with the
series
one
it's
not as
nice
as the
series
two
you don't
have
the
support
but
you can
do
some
crazy
shit
with
the
series
one
TiVos
the ones
that were
around
in
1999
you can
actually
they sell
mod cards
for
more
RAM
they sell
mod cards
for
an extra
IDE
channel
for an
Ethernet
adapter
you can
do all
kinds
of
crazy
shit
with
it
most
of
the
hacking
that you
do
with
TiVos
in general
starts out
with going
through the
com port
you can
actually
just make
a serial
connection
to it
and start
throwing
packages
onto it
to say
hey
I'd like
to have
terminal
services
on here
so that
I can
start
working
with my
TiVos
so being
that you
have that
you have
access
terminal
services
pretty good
I was
just making
fun of
terminal
services
well
being that
you have
access to
that
you can
start
pulling
stuff
off the
hard drive
it's
a pain
in the
butt
through
serial
but you
can also
always pull
out the
hard drive
and throw
it in
your
Linux
box
and you've
got access
to it
here is a
Humax
series 2
TiVo
and it
just went
for $72
on eBay
which I
gotta say
it's a
pretty good
deal
especially
if you
don't have
to
I mean
it's got
built
no it
actually
doesn't
have
built
an
ethernet
it looks
like it
has just
USB
but still
that's
probably
the
40R
one
like I
have
it's
probably
just like
I got
with the
DVD
in it
okay
there's not
a big
difference in it
hard drives
are so cheap
these days
exactly
still
my main
thing with
TiVos
was like
I wanted
the
TiVo
that could
pull it
down
when I
had
Myth TV
rough and
running
I recorded
the Venture
Brothers
for all
of one
season
and I
exported
them off
there
I assume
this is
illegal
I'm not
going to
try to
cop
anything
illegal
after I
recorded
basically
they were
on every
night
on Adult
Swim
and I
recorded
it for
about
the entire
first season
and I
exported
over to
DivX
and it's
all encoded
and it
works fine
and I
now have
them all
on my
computer
I mean
I don't
go out
and share
them on
the internet
so it's
nothing horrible
but I
recorded this
off the TV
and I
just
converted it
into the
computer
and that's
what I
always wanted
to do
with TiVo
and apparently
that's
possible now
which is
just absolutely
amazing
yeah
as far as
saving it
on your
computer
it's
remarkably
simple
you get
your TiVo
you plug
it into
your network
and you
get the
TiVo
to go
software
from TiVo
and it'll
let you
do that
yeah
all right
so
now
is there
going to be
we're talking
about series
one and
series two
here
is there
going to
be a
series
three
absolutely
it's
actually
been in
production
for
it was
supposed to
be out
last year
I think
and they
have it
again
scheduled
to come
out this
year
in the
not too
distant
future
now that
one
that one
I'm
waiting
oh god
I'm
waiting
for that
one
because
again
it's
supposed
to have
basically
all the
features
that a
TiVo
has
it's
going to
have
the ability
to record
HD
format
programming
as long
as it
comes in
and is
decoded
natively
by
the
TiVo
itself
so in
order to
do that
they're
having the
ability
to slide
cable
cards
into
the
TiVo
which
is
pretty
damn
cool
it also
has
your
cable
boxes
thrown
out
the
window
and
you
just
use
your
TiVo
that's
absolutely
right
you can
now
get
all your
digital
programming
and
HD
on your
TiVo
and
you don't
have to
worry
about
a
damn
thing
there's
not
going
to
be
your
cable
company
can't
block
stuff
out
things
like
that
the
only
block
outs
that I
know
of
are
actually
things
you can
record
from
TiVo
which
I
forgot
to
mention
TiVo
is
actually
starting
to do
a
service
where
they
will
send
you
movies
via
the
internet
and
you
can
just
watch
them
you don't
have to
watch
them live
and
you'll
be able
to
order
them
with
your
remote
just
like
all
the
new
digital
services
have
so
wait
you're
telling
me
my
TiVo
will
download
me
porn
this
thing's
amazing
what
else
can
it
do
seriously
if
it
does
my
dishes
I'm
just
buying
it
right
now
is there
a
dish
mod
for
it
you're
talking
about
direct
TV
what
about
do
your
dish
TV
or
something
well
I'd
like
to
see
that
and
maybe
I'll
have
one
of
my
weirdo
friends
start
working
on a
USB
mod
for it
that
makes
it
do
dishes
I
don't
know
yeah
super
neat
USB
dish
mod
that's
right
lucky
best
USB
dish
mod
2.0
yeah
so
okay
I mean
I think
we covered
most of it
is there
anything else
you want
to talk
about
or
just
I mean
this
just
really
sounds
really cool
like
I didn't
know
TiVos
could do
half
this
stuff
I mean
I knew
it was
a computer
and I
knew
when
series
2
came
out
had
like
ethernet
ports
and you
were
going
like
okay
I guess
you can
start
doing
stuff
like
that
at
which
point
I guess
I just
really
stopped
paying
attention
and
didn't
really
know
that
all
the
stuff
happened
that
I
wanted
to
happen
actually
did
happen
I
just
never
noticed
it
well
it's
not
like
TiVos
was
really
talking
about
it
and
the
news
didn't
want to
piss
off
TiVos
but
they
weren't
talking
about
it
either
you
just
kind
of
have
to
pay
attention
yeah
I guess
so
is there
like
are there
websites
for
this
like
is
there
a
TiVo
I assume
there has
to be
websites
about it
but
do you
want
to
absolutely
let me
take a
look
here
there's
tivotechies.com
and
you can
check out
Freevo
if you
TiVo
HME
stuff
like
I
said
it's
open
source
and
there's
an
SDK
available
at
SourceForge
the
tiny
URL
is
charlie
nancy
4
2
zelda
that
actually
has a
disk
for the
SDK
so
it
actually
it
has
the
SDK
and
you
can
actually
develop
all
this
stuff
and
it's
all
Java
based
I
remember
you
saying
that
I just
want
to
toss
it
out
there
so
if
you
don't
like
Java
you're
boned
but
basically
Java
was
actually
made
for
all
this
stuff
TiVo
is what
Java
was
made
for
that
and
your
dishwasher
don't
forget
the
refrigerator
that's
really
yeah
no
basically
Java
was
made
for
all
your
home
appliances
I
yeah
I remember
reading
about that
your
kitchen
was
everything
was
in
your
house
supposed
to run
on
Java
your
Java
fridge
your
toaster
it's
actually
pretty good
it wasn't
like that
my toaster
would take
my toaster
would take
like you
know
30 minutes
for it
to toast
something
yeah
you push
the toast
down
and then
it like
takes
10 minutes
just for
the coils
to turn
on
hey
and if
it's a
Microsoft
toaster
you get
the blue
screen
no toast
you get
the blue
toast
of death
no
if it was
a Microsoft
one
they just
burst
into flames
then
next week
there's a
recall
I think
maybe
no no
there's a
patch
and then
the day
after that
there's a
patch
for
all right
anyways
yeah
if you want
to check out
some of the
software
and you
actually
have a
TiVo
that's on
your home
network
you can
check out
the Java
HMO
program
that I
talked
about
Source
Forge
can I
give the
URL for
that
oh
what
I
have
no
you
want
man
all right
it's
tinyurl
slash
Zelda
Charlie
Thomas
3
and there's
also another
one that I
recommend called
Audio Faucet
which does
what I said
with showing
the album
covers and
the track
lists and
all that
happy stuff
and you
can find
that at
tinyurl.com
slash
dang
can't
remember
what a
B
is
no
bravo
7
uh
quilts
I don't
know
it's
Quebec
bravo
7
Quebec
alpha
5
and uh
yeah
that
seems
pretty
cool
but I
can't
remember
anything
from my
tech
support
days
oh
no
oh
no
get your
ham radio
license
you'll be
all set
yeah
all right
well
this is
I gotta
say
this episode
was pretty
enlightening
for me
and
yeah
so I'm
seriously
I'm thinking
about buying
a TV
as soon as
I got
some spare
cash around
which may
be a while
but still
I'm thinking
about doing
it
and actually
the other
question I
had
is I mean
you talked
about
ethernet
adapters
what about
wireless
ethernet
adapters
absolutely
there are
actually
with the
series 2
there are
a number
of series 2
TVs that
natively
support
wireless
ethernet
adapters
okay
that's
what I
wanted to
know
all right
well
that was
I gotta
say
that was
very
enlightening
everyone's
going out
and go
out
buy
TV
as
myth
TV
is just
going to
fall
flat
on its
face
I
see
buy
TV
or
myth
TV
myth
TV rock
too
it's
so sad
but I'm
not
completely
just
abandoning it
right now
I saw
this stuff
and said
oh my god
this is the
best thing
ever
hey
can I
throw in a
couple of
things with the
series 3
TiVo
wait a little
bit
in addition to
it accepting
cable cards
it'll actually
accept two
cable cards
at a time
so you can
record one
program and
watch something
else
yeah
so that's
that's one of
the big
features for
me
do you
have any
idea how
much
the digital
cable boxes
cost these
days
I have no
clue
they rent
for
or at least
I pay for
mine
I pay like
four bucks
for each
one
a month
for renting
a dang
cable box
and I can't
even own
the damn
thing
whereas I
think they
will
rent you a
cable card
for about
half that
for two
bucks
so you
can have
two digital
receivers in
each room
for the same
price of
having a
digital box
so it's
real nice
cool
we are almost
out of time
so I think
we should
head into
yeah true
actually it's
a lot later
than what I
thought it
was
all right
do we have
announcements
oh yeah
it's like
2600 meetings
this week
isn't it
yeah
2600 meetings
this week
if you're in
Los Angeles
Union Station
then Feliz
then Denny's
Boston
you know
Prudential Center
I actually
hope to be
there this
time
I've kind
of you
know
run up
and run
into all
kinds of
issues
with my
2600 meeting
over the
past couple
of months
but hopefully
this time
I will be
there
signing autographs
and dealing
with the
groupies
and all
that kind
of stuff
or something
useless
do you have
a 2600
meeting
that you
go to
or
I do
but I
keep forgetting
what the
name of the
place is
hang on
I don't even
know where you
are
where are you
by the way
San Diego
sunny San Diego
one of the
most expensive
places to live
you did mention
that earlier
didn't you
yeah
you know I
can't remember
for the life
of me
what the
name of
the pizza
place is
that we
meet at
Regents
Pizza
there we
go
we meet at
Regents Pizza
it's in
La Jolla
on Regents
Road
so for
those of
you that
live
somewhere
in the
San Diego
county
that's
probably
your best
bet
are there
a lot of
people that
go to the
San Diego
2600
I'm just
asking questions
at this point
there's probably
25 to 30
including
Lance
goes to the
2600
meeting
awesome
oh so
meet Lance
James
friend of
Strom Carlson
yes and if
you're going to
Los Angeles
meet Strom
Carlson
co-host of
BinRev
Radio
friend of
Lance
James
friend of
Lance
James
yeah
all right
useless do you
have any
shouts
sure do
okay I want
to give
shouts out to
lucky 225
who is god
knows where
now I don't
even know what
city he's in
anymore
but he's a
dork
sorry
yeah
shouts out to
Jay
Bershars
I've had him
on the show
before
good old
Josh
yeah
and shouts
to Lance
James
one of the
bad-ass
motherfuckers
sweet
oh he
he released
bad-ass
motherfuckers
status
oh my god
that's amazing
uh Strom do you
have any shows
hmm
shouts to Lance