Registered: Aug 2002
Location: Lincoln Park, Michigan
I believe, as others expressed, one of the major helpers will be for an image to be examined out side of the linux os it rides on. From this point you could try a brute force method of examining files, to find the one that is a compressed image. The tivo os is at least 10 meg, you can't fit that much code on a chip from a cost stand point.
When I got my series II, it had 2.5 installed. On the first call it upgraded itself to 3.0.
The 3.0 load, crosses many different platforms, each from a couple of different manufactures. The hardware from each company is unique from what I understand. This was very well planned.
I can't imagine that there are very many differences between the Series two 3.0 os and a series one 3.0 os. Coming from a software development background, when trying to cross compile, you start with the same source code. When a bug crops up, you can fix it all in one place. From a testing stand point it would be next to impossible to contain bugs without using this method.
the 2.5 load has to have different checksums than the 3.0.
the signature couldn't possibly be the same for each.
If you are implementing security, why would you only have one key. As mentioned, if the key got out, then no more security. At a guess, the key could be compressed in one of the os files, but without knowing what to look for, it could never be found.
code would have to be written to run on the processor in the series II that could flash the prom. When the os gets updated from 2.5 to 3.0, the prom would almost certainly have to be changed to accept the new OS. on the D-tivo, the older boot kernel is used to initiate the prom flash.
This is the layout for the t-60 direct-tivo( which is a series one, with the similar boot prom to the series two)
hdc1: bootstrap partition
hdc3: kernel 1 image
hdc4: root 1 filesystem
hdc6: kernel 2 image
hdc7: root 2 filesystem
hdc9: /var filesystem (contains the kernel logfile)
found in http://www.tivocommunity.com/tivo-v...hlight=t60+hack
This was the same layout that I found on my series two.
Last edited by trubin on 09-28-2002 at 06:28 AM
POST #20 | Report this post to a moderator
| IP: Logged