Hacking & Manipulating Multiple Bell TV Receivers - Hotel & PVR systems!
ฝัง
- เผยแพร่เมื่อ 27 เม.ย. 2024
- Hacking various models of Bell ExpressVU Receivers including a Commercial Hotel Receiver. The PVR Hard Drive Receiver and the Commercial Hotel Receiver both yielded some really interesting results & a big surprises! It's true that old decommissioned receivers can still be made to work.
in the UK the old Sky boxes used to let you buy (I think up to 5) PPVs without confirmation from the Sky servers, so you could connect a 9V battery to the phone line on the box and it would think there was a line connected but the service is down. You could then just take the box to a car boot sale and buy another box from a car boot and do the same thing again. It would charge your account if you connected that box to a phone line again though.
Wondered why they used to sell sky boxes for next to nothing on the car boots years ago
@@John-ot1lx I think its just because they were so common and given out for free with the subscription. On top of that Sky let you keep it if you ended your subscription because you had to look at their TV guide and see what you were missing (basically an AD)
That hard drive was a lot harder, LOL. That was funny!
Holy shit, 2400? The BBS era. That was such a fun time as a SYSOP.
There was a hotel chain I stayed at frequently for work. I took apart the remote control on one visit to look for extra buttons and found a couple. These are buttons on the PCB traces but not connected to a rubber part since they use the same PCB for the "master remote". I was able to put a put a dime or use the rubber button pad to press the "hidden" button and enter the admin menu and this allowed me to access PPV streams on other channels. I bought a learning IR remote with me next time and "learned" the admin button so I no longer had to take the remote apart to get free TV.
That's actually a really cool idea and a great hack. Obviously the hotel has a special remote with all of the buttons they use internally. But it makes sense that all the remotes would use the same PCB and can be exploited the way you discovered.
Dude. I was too young to remember. But this was my grandpas wheelhouse. I do remember that thumbnail vividly too.
Dial up modem sounds havent heard that for years 😂
I have been watching for a while I find your content very interesting and I would like to thank you for sharing your knowledge
You are very welcome
I remember this lol, and that hard drive that was “interesting” 🤣
Zero hacking but cool video thanks!
Nice work. You just got a new subscriber!
Awesome, thank you!
The previous owner definitely was a man of culture who liked the "science channel" :)
Back in the day you could order a bunch of PPV on directv on the month before you cancelled service and simply leave the phone disconnected and you would never get charged for them. This was before they stopped letting customers own the receivers.
I just found your videos, and really enjoy them, you are into some of the same obscure stuff I'm into! I liked the stuff on the old school satellite hacking, I remember going on those sites and reading about the latest stuff, and wishing I could afford the equipment to do it, as I was in my teens.
I always wondered if hotels had receivers for each room, or for each channel, cool to see one!
I'd like to see a video on your phone setup, I collect old telephones, and have a similar Western Electric "shoebox" KSU I haven't set up yet.
I'm going to do a video on my classic 1A2key Western Electric system that I restored. It's fully functional and I have it working with 5 CO lines that I supply to it using VoIP adapters. Each line has it's own PTSN DID. Stay tuned !
@@peterfairlie2296 Can't wait to see it!
Hey Peter - could You do a tutorial for cheap/free satelite calling? Loving the videos :)
The good old days of hacking dss, echo and bell expressview. Our way was reprogramming or emulating the smart card.
Then there were fta receivers you could program to receive dishnetwork or bell express. You could increase the ppv spending limit and then wipe them off the card.
On some of the dvr systems we could upgrade hard drives after cloning some of the original data. There were freeware tools for this.
As a total side note if you ever corrupt the firmware in tje receiver you can build a jtag for a few bucks and rewrite it OR you can ground out one if TSOP chip pine during boot up abd the receiver will download and repair itself. I forget which pin off hand. You can take a dishnet, do the tsop ground while pointing at bell and it magically becomes a bell receiver now.
I'm watching the hollywood suite right now
Impressive
If i received something with the wires cut off i would assume it's stolen. Lol
If memory serves me correctly there was a guy who went by the name Fat Bastard who came up with a way to extract the recordings from the hard drive to a PC. But that was many many years ago, so I may have the name wrong.
I remember that Fat Bastard hack!
woah!
Hate to ask… but did u try changing the channel on the front of the unit instead of the flipper ?
the FCC has some fundamentals in regards to it being a human right to have interconnectivity, so I wonder if that's where that stems from
Peter if you are married your wife is putting up with a lot haha. As a guy I think the security tv on the counter is awesome. But I think most girls would not like it. Keep up the good videos!
No Wife, Just lots of Girlfriends
@@peterfairlie2296 Haha. Sometimes that’s the life to live!
@@1993MAZDAMIATA I had a 1993 Mazda MX3 en.wikipedia.org/wiki/Mazda_MX-3
@@peterfairlie2296 Sweet! Those were rare
@@1993MAZDAMIATA I bought it new in 93 and sold it in 2000. It was a nice first car but has only 88 HP engine. Sold it for a Toyota Celica with 190 HP.
Would it work if you dialed *67 ahead of the tv box so it would come up as a private number on their end? At least you might be able to try several more calls before all hope was lost.
They're not going by caller ID to know who's calling. The modem is a data link and the first thing transmitted is the receivers serial number... This is how they knew I was calling back again and hung up on me.
Are you sure it hung up on you because you were blocked? I would suspect it could still be flakey dialup over voip.
Quick question i know bell is the same as dish but is there a directv equivalent in canada?
There is another satellite provider in Canada to Bell known as Shaw Direct. I wouldn't call Shaw an equivalent to DirecTV but they are a competitor to Bell in the same space.
I have PTSD from splitters , I was the satellite guy to the family and when the temp is 40c , I had to "Fix the tv "
Hey what voip ata adaptors do you use? I have a t1 card in my PBX computer feeding an adtran channel bank here
sipura spa-2100
guy takes 1 hour to jailbreak an old tv receiver just to watch something that takes 5 minutes to find on xvideos
where do you ger your gear?
Curious... does the 30 day trick work for Dish or DTV?
It used to. I'm not positive about current receivers . If there still using a phone line then it should work Generally what the companies do is set a spending limit on your account that's factored by how long you're a customer and your buying history. After a month or you hit the spending limit the receiver stops working until you plug the phone line In.
When you make a purchase it writes that purchase to the card. On older cards you could wipe them off and change your spending limit. You could buy tons of ppv with the phone line unplugged and either replace the receiver (with card) or call and say it's not reading the card (error would be insert smart card or similar). They used to send replacement cards at no cost. They would ask for the old card back but if you never returned it, nothing happened.
Keep in mind it's been some years since I hacked there systems.
lmao that the previous owner left all his porn on the HD
I'm surprised that it let you watch the recorded shows. Usually you would have to be subscribed to that channel tier to be able to get that channel. (e.g. History) I'm curious if you can extract the videos off that hard drive but they are likely keyed and encrypted.
As long as the receiver has a satellite signal you can then access what's on the hard drive. The data on the hard drive is encrypted as I did try to look at it on another Linux computer. I could mount the drive and see the file structure but the recordings were not readable.
@@peterfairlie2296 I figured that the drive wasnt going to be readable on windows but odd that you can read the file structure but not the show video files themselves in Linux. They really dont want you to get at those. They want you to pay to watch only and if you record you use their equipment, their rules, watch only. What is really a shame is that non TV set top box DVRs like for security cameras are also encrypted as well as the ones with DVD recorders. It's likely a copy protection reason so people don't use it to copy videos. Or maybe its optimization. I wish TV providers allowed you to pick channels you will actually watch but they don't.
@@peterfairlie2296 Could you see the files just not play them back because of of unknown video codec or couldn't see them at all? I hear that the unencrypted video files are something playable in VLC media player on a PC. .mts files I believe.
How does cable length impact the signal quality? About to install sat setup for homelab and thinking about the route for cable - the one that wouldn't obstruct the view would have to be about 60 feet.
60 feet of RG6 will work just fine
@@peterfairlie2296Awesome, thanks!
The drive from a LNB or a switch is at quite a high level so 60ft is not a problem but use good quality co-ax
@@JimWattWould it also be true for DVB-T?
Sure, if you have an off-air tuner.
What do you use for ATAs? What VOIP service do you use?
sipura spa-2100 VoIP (dot) MS
XXXX 😊🙏
I got a new receiver butt stuff happened when i hooked it up.
Seems like a lot of effort to get a couple of bad tv channels. I used to the fta back in the day and it takes a bit of skill to aim an antenna
what kind of ATA do you have? i use the good old cisco SPA2102 for dialup
SPA2100
th-cam.com/video/6MD2Sm9S9Yo/w-d-xo.html
@@peterfairlie2296 very cool! do you make any specific changes to the config to optimize it for use with dialup? it’s somewhat hit or miss on my ATA even with a local dialin server and from my understanding the 2100 and 2102 don’t work all that differently. i do remember having to change the RTP packet size and disable echo cancellation to make things more reliable
• Network jitter buffer: very high
• Jitter buffer adjustment: disable
• Call Waiting: no
• 3 Way Calling: no
• Echo Canceller: no
• Silence suppression: no
• Preferred Codec: G711a
• Use pref. codec only: yes
@@peterfairlie2296 thanks!!
100 sure an American sent this to you
You've got mail
Power shelling or injection with modems has been around since 1996. I fixed it. You can't power shell anymore.😊
Thanks for that dickweed!
how illegal is hacking satellites and tv receivers?
POLICE IS COMING 💀💀💀
remember Webtv ? ... can you hack it ? ....
Bell don't like this
Guy uhboot uh-boat uhboot uh-boat guy guy boot
Wait so you can just literally plug it in to a satellite and get free channels. Weird the channels that are actually coming through
dude, Looking at caps can not determine if they are "OK" come on now.
I'm looking for bulging and leaking capacitors which is a clear indication they are bad.
Need the name of that video on the Venus channel looked very educational!
indeed