Page 1 of 3 123 LastLast
Results 1 to 10 of 25

Thread: Series2 in PAL

  1. #1
    Join Date
    Jan 2007
    Location
    Buenos Aires, Argentina
    Posts
    12

    Series2 in PAL

    Dear all,
    It's been a long time, but I'm once again bothering you with a few questions :-)

    I've been trying to figure out the chipset of the Series 2 in order to see if it's posbile to do a "palmod" for this chips (hopefully a software mod).

    Like many others, I hit the big NDA wall on the bcm7040 (AKA AFFIK-II) and bcm7020 but this chips are used in so many products that i was expecting to find much more info on them (I was expecting to find a few linuz/windows drivers, and maybe some source code), but I was really mistaken.

    I'm in "desperate mode" , my next "plan" is to try a brute force attack and see if I can (at leat) identify the addresses for this units.

    But before that, I want to see if anyone else had made any progress (hopefully we won't have to duplicate efforts). If so, please let me know, either here or by private.


    Thanks a lot to all in advance ...

    P.S.:Needless to say, I'll post here what I find (If I get nowhere it will at least save the next guy sometime).
    Best Regards,
    Marianok.
    ________________________
    Sony TiVo Series 1, w/ PAL-N version of Palmod (original NTSC tuner).
    Using XMLTV and XMLTV2TiVo to create Argentinean Guides
    Running TivoEmulator at home ... LIFE is GOOD !

  2. #2
    Join Date
    Apr 2004
    Location
    Perth, Western Australia
    Posts
    3,037
    have a look here this is as far as robert got at OzTiVo.

    As for the rest of the mods, there is a shorthand version here.

    Also check the South African TiVo site.
    Please search this forum and our Website for your TiVo questions before starting a new thread. Thanks!

  3. #3
    Join Date
    May 2004
    Location
    Victoria
    Posts
    1,239
    If it can be done then great. Full marks for wanting to give it a go

    Despite what some have said lately (present posting company excepted) regarding Series 2 being a "lost cause" for PAL modding given the impending release of the Series 3 as a commercial product in Australia I have a different view. I feel there is a fantastic niche for the Series 2 as an updated hobbyist device to carry on where the Series 1 left off if only the issue of exactly what is required to make the chipset run in PAL.

    So good luck! I'm sadly not a software person otherwise I would have given it a go long before now
    Darren King
    OzTiVo Repairs and Modifications
    If your TiVo requires repairs or modifications
    then visit: http://kingey1971.wix.com/tivorepairs

    NOW ALSO REPAIRING FETCH TOO!

  4. #4
    Join Date
    Dec 2005
    Location
    Christchurch, New Zealand
    Posts
    463

    Series 2 DT

    I've got friends who work at a company with an NDA with Broadcom, but they couldn't persuade the appropriate person to provide any info. I'm always on the lookout for some one else..
    I've just imported a Series 2 DT. The first step was converting the PSU to 230V, now I need the PAL version of the NTSC Samsung tuners, and also the registry settings for the BC chips (different again from those on the standard Series 2).

    Series 2 seem to be more plentiful on Ebay now than Series 1.

    The info will come out sooner or later. In the mean time I'm trying to source some tuners (not the same as in the Series 1).
    Cheers,
    John

    TiVo Series3 TiVoHD x2

  5. #5
    As somebody who has access to the information you need this is heartwrenching for me to stand by and watch this go on. Unfortunately due to fear of losing my career I can't say anything. I can tell you that what you are trying to do is very possible but it's not going to be easy.

    I know this comment has been no help but I wish you the best of luck I would really like to see you guys succeed on this. It's such a shame that it's come down to this.

  6. #6
    Join Date
    Apr 2004
    Location
    Perth, Western Australia
    Posts
    3,037
    Quote Originally Posted by example3891 View Post
    As somebody who has access to the information you need this is heartwrenching for me to stand by and watch this go on.
    While writing your post, It's probably at this point you should have realised your post would not be helpful, and really just cause more frustration.

    Over the years we have many people claim to have the information, and choose not to share it. Personally my feeling is that these people do not know anything and just post to be mean/stupid. If they really had any knowledge and chose not to share it, why bother posting?

    We do know that it's possible, and it's just a matter of finding the correct addresses.

    It's a shame the NDA still applies to what really is a superseded product.

    I thought that by now that someone would have contacted one of us privately and anonymously to provide the snippets we require. This information is generic and there is no way it could be traced back to the individual providing it. Not to mention the bits we are after are not commercially sensitive, as you would need to be using the Broadcom chips to make use of it.

    Peter.
    Please search this forum and our Website for your TiVo questions before starting a new thread. Thanks!

  7. #7
    Join Date
    May 2004
    Location
    Victoria
    Posts
    1,239
    Hear Hear Peter.

    I was going to type a message similar to yours this morning but thought I would hold off as it sounded too harsh. But on second thoughts; stuff it. I wholeheartedly agree with all you have said.

    For someone to post (and example3891 don't flatter yourself you are by no means the first) saying "hey I have the information but you can't have it" serves no purpose but to anger the OzTiVo community as it flies directly in the face of our open "share and prosper" stance. There's many a way to get the information to us anonymously without putting anyone's job in jeopardy if a little thought was put into it. For well over three years I have had such an open invitation sitting on my website. Like Peter, I feel that unless you choose to prove you know anything then you are just blowing hot air and nothing more.

    I'll bet my bottom dollar that even though "example3891" sits there saying he can give us the information but choose not to he will be one of the first to use the hack when it becomes available.
    Darren King
    OzTiVo Repairs and Modifications
    If your TiVo requires repairs or modifications
    then visit: http://kingey1971.wix.com/tivorepairs

    NOW ALSO REPAIRING FETCH TOO!

  8. #8
    Join Date
    Apr 2007
    Location
    Christchurch
    Posts
    13
    Quote Originally Posted by Skolink View Post
    I've got friends who work at a company with an NDA with Broadcom, but they couldn't persuade the appropriate person to provide any info. I'm always on the lookout for some one else..
    I've just imported a Series 2 DT. The first step was converting the PSU to 230V, now I need the PAL version of the NTSC Samsung tuners, and also the registry settings for the BC chips (different again from those on the standard Series 2).

    Series 2 seem to be more plentiful on Ebay now than Series 1.

    The info will come out sooner or later. In the mean time I'm trying to source some tuners (not the same as in the Series 1).
    Cheers,
    John
    I presume you're talking about my former employer (who doesn't need to be named here). There's only a select few there who have the ability to download arbitrary documents. Even if one of those people is your contact I'm still not sure if they'd help you. Broadcom's docSAFE system is extremely clever as it automatically watermarks, passwords and re-words each download of a document making it unique to the person who downloaded it. When you take that and think about leaking information that's kinda scary for the individual involved as you are personally accountable for that information. Generally one hangs onto copies of datasheets and doesn't let them out of their sight.

    So now our only hope is down to someone having access also being a hardcore TiVo hacker (unlikely) as they would have to distill the needed information into a hack themselves as just "passing on" large chunks information to another hacker would be too risky as you don't know where it's going to end up and some of that may have been unique to your copy of the document.

    So by some miracle the above two circumstances have occurred and the S2 is now hacked - S2's are flying out of the country for use in situations that don't profit TiVo. I can imagine an instant political ****storm between TiVo and Broadcom. Broadcom would launch an instant investigation as to how this information "got out". The first thing they'd do is check who downloaded that document recently (you'd probably be the only download in 2 years as the chip is mostly used by TiVo) A little further amateur forensics and you're busted.

    You try being a TiVo enthusiast working in that area - it freaking sucks. Probably ten times more frustrating than being the person trying to hack it.

    I know that like the post of "example3891" my post has once again been negative and unhelpful but this is the situation many people themselves in thanks to corporate greed and vicious guarding of intellectual property. Some day someone's going to have to do something extremely brave and just throw it out there. (Maybe someone terminally Ill who works for a company that's about to go bankrupt. Now we're talking :-)
    Last edited by inaxeon; 09-06-2008 at 07:08 PM.
    Things not to mention on your first date:

    "I've got a TiVo"

  9. #9
    Join Date
    May 2004
    Location
    Victoria
    Posts
    1,239
    Quote Originally Posted by inaxeon View Post
    I know that like the post of "example3891" my post has once again been negative and unhelpful
    On the contrary. It gives insight into what protection Broadcom has against such information leaking out. Hey, props to them. If you have trade secrets and are bound to secrecy by TiVo, inc then that is what they have to do. You've done quite a good job explaining rather than everyone else (and I mean everyone) who has "claimed" to know something but never produces any evidence.

    Being the constructive thinker I am however it would not need the *whole* document passed onto anyone, although I can vouch for a particular name (note name as in singular) that to most here would just be "anybody" but to me is the direct person who would write the PAL module and also be a 100% secure "do not hand out this information" person. Even to that end all that would be required is the particular register(s) that need programming and nothing more. I've seen literally thousands of technical documents on chips and the table would not be something "re-written" by any document security system otherwise the chip wouldn't work as it should, would it? I'm sure other issues raised like watermarks and passwords can be circumvented simply by hand copying (as in hand writing) the relevant registers. While I am not expecting anyone within Broadcom to go off today and access the system and then hand it over tomorrow thus giving a direct lead to find out who provided the information I also highly doubt that the only copy of the relevant document in existence is locked away on a protected server. Someone, somewhere, must have the file on a local PC or a hardcopy that is gathering dust that was downloaded and/or printed YEARS ago that combined with manually copying down the relevant information would make the job of traceability almost impossible.

    And besides, like Peter has mentioned, I highly doubt that TiVo would be that interested in pursuing how the information got out. We're not talking about a product that is being highly marketed anymore (they now have a Series 3) nor are we talking about the information being used to create a competing product. We're talking about utilising what is now relatively old hardware (it can't even do high def!) that a lot of units are now turning up on eBay as surplus or ending up in the trash if they are broken. In effect what is fast becoming (if not already) obsolete technology. If TiVo had a real problem with what OzTiVo is doing with their hardware they would have shut us down years ago. Why? Because even the Series 1 has the words "Private And Confidential" screen printed on the motherboard near the diagnostics connector. That never stopped people devising aftermarket add-on hardware, freely distributing hardware information on the units (of which even I am guilty of) or reverse engineering how the guide data works. All of which TiVo knows about and the only stipulation that I know of is TiVo expressly saying that it is for non-profit hobbyist use in areas a TiVo service is not provided. And at any rate like mentioned by the original poster the BCM7040 and BCM7020 is *not* a TiVo-Broadcom proprietary chipset. It has been used in other devices.

    Take all of the above as you will. My intentions are not to argue or pressure anyone to do anything but merely looking at it from what is probably a very simplistic viewpoint.

    Anyway, the offer still stands as it has done for years: If anyone has anything they wish to share on the information required then feel free to contact me anonymously and I'll 100% ensure your anonymity.
    Last edited by Darren King; 09-06-2008 at 08:06 PM.
    Darren King
    OzTiVo Repairs and Modifications
    If your TiVo requires repairs or modifications
    then visit: http://kingey1971.wix.com/tivorepairs

    NOW ALSO REPAIRING FETCH TOO!

  10. #10
    Join Date
    Apr 2007
    Location
    Christchurch
    Posts
    13
    Perhaps you should mention how one may contact you anonymously because there may just be someone who has the right information reading this thread as we speak.

    Here's another interesting thought for you - I've seen one silicon vendor (not Broadcom) have many many copies of the same registers, only disclosing the location of one set to each customer. That might sound extreme, but it really helps track down leaks :-)

    Another thing I've found when working with these chips is that the vendor doesn't always give out the datasheets "Willy Nilly" usually all we get is a precompiled library with an easy to use API for performing the needed tasks on the chip and if there's any issues with that API the vendor will support that rather than giving out a register reference to fix it yourself. (Which does make me wonder, has TiVo been lazy and just used one of these libraries?) So it's not always as straight forward as getting register reference datasheets.
    Last edited by inaxeon; 09-06-2008 at 08:46 PM.
    Things not to mention on your first date:

    "I've got a TiVo"

Similar Threads

  1. Series2 DT power supply mod for 230V
    By Skolink in forum Hardware Upgrades/Mods
    Replies: 2
    Last Post: 23-12-2009, 08:10 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •