Crack Seca 2: the last indiscretions

19-03-2003

This translated from Website;

While Stream is getting ready to replace all the smart cards with Irdeto technology in order to counteract the pirates, From Thailand comes bad news for Seca 2 It would seem in fact that they are on sale through the net. The first smart card that would allow the illegal reception of ppv. Until today it seemed that it had found a way "to open" Seca 2, but still it has not been proved.,

According to other voices it would seem that a French and Spanish hacker have found a way to crack the original smart card make them usable after the expiration of the subscription, and to continue to decode the entire packages.

In the meantime in France 4 people have been arrested by the police in Marseilles inquiring into f the sale of smart card modified for the illegal reception of Seca 2 (to the variable price between 300 and 800 Euro). The accussed have about beyond 10.000 customers and a turnover of some million Euro.
This translated from Website;

**rolfw** · 19-03-2003

Gotta say Net, sounds like one of my posts after too many lagers.

19-03-2003

I have corrected just for you Rolf

**munkey** · 21-03-2003

I'm sure we are all awaiting more news with baited breath and crossed fingers (and crossed legs and crossed arms and crossed toes ...).

16-01-2004

I am just working on a (Spanish + Italian) -> English translation of
the Mediterranian MOSC tools.

It is a well known fact that Seca2 is basically Seca1 with most
EMMs and ECMs superencrypted.

According to Italian and Spanish boards the superencryption of the (V7.0)
is a modified CBC (chain block cipher) which in it's turn is a modifed DES
symmetric encryption.

CBC is modified the following way:

A 16 bit checksum of each encrpypted 8 byte cipher block is built.
An offset is calculated: 16 bit-checksum of the cipher block mod 4000(hex).
An 8 byte mask is taken from the offset address of the Mask Table
(aka Chain Table).

In standard DES-CBC, the base DES encryption function is applied to the XOR of
each plaintext block with the previous ciphertext block to yield the
ciphertext for the current block.

In V7.0 modified DES-CBC the base DES encryption function is applied to the
XOR of each plaintext block with:

((the previous ciphertext) XOR (mask obtained from MT[offset]))

to yield the ciphertext for the current block.

The contents of the Italian and Spanish V7.0 mask tables are well known and
published all over the internet. (Homealone, Escritura Controlada)

Both mask tables have a size of 128 Kbytes but the Spanish MT
can be easily condensed to 16 KBytes due to its regular structure.

Anthony A. Borg · 17-01-2004

Fraudists are advertising a Seca2 Clone Card on the net. It is being advertised for 140 or 150 euros. One of them has an account in Novabank in Branch Alexandras Avenue 110, Athens, Greece and the Bank Account is 0002675968. Do not try to buy because it is all fraud.

Originally Posted by net1

This translated from Website;

While Stream is getting ready to replace all the smart cards with Irdeto technology in order to counteract the pirates, From Thailand comes bad news for Seca 2 It would seem in fact that they are on sale through the net. The first smart card that would allow the illegal reception of ppv. Until today it seemed that it had found a way "to open" Seca 2, but still it has not been proved.,

According to other voices it would seem that a French and Spanish hacker have found a way to crack the original smart card make them usable after the expiration of the subscription, and to continue to decode the entire packages.

In the meantime in France 4 people have been arrested by the police in Marseilles inquiring into f the sale of smart card modified for the illegal reception of Seca 2 (to the variable price between 300 and 800 Euro). The accussed have about beyond 10.000 customers and a turnover of some million Euro.
This translated from Website;

Anthony A. Borg · 20-01-2004

Could you please keep me abreast of developments in this field especially the advancements that are made in the finalisation of the seca2 card?

Originally Posted by theReindeer

I am just working on a (Spanish + Italian) -> English translation of
the Mediterranian MOSC tools.

It is a well known fact that Seca2 is basically Seca1 with most
EMMs and ECMs superencrypted.

According to Italian and Spanish boards the superencryption of the (V7.0)
is a modified CBC (chain block cipher) which in it's turn is a modifed DES
symmetric encryption.

CBC is modified the following way:

A 16 bit checksum of each encrpypted 8 byte cipher block is built.
An offset is calculated: 16 bit-checksum of the cipher block mod 4000(hex).
An 8 byte mask is taken from the offset address of the Mask Table
(aka Chain Table).

In standard DES-CBC, the base DES encryption function is applied to the XOR of
each plaintext block with the previous ciphertext block to yield the
ciphertext for the current block.

In V7.0 modified DES-CBC the base DES encryption function is applied to the
XOR of each plaintext block with:

((the previous ciphertext) XOR (mask obtained from MT[offset]))

to yield the ciphertext for the current block.

The contents of the Italian and Spanish V7.0 mask tables are well known and
published all over the internet. (Homealone, Escritura Controlada)

Both mask tables have a size of 128 Kbytes but the Spanish MT
can be easily condensed to 16 KBytes due to its regular structure.

**dont get it** · 08-03-2004

I am quite new to this site but if you have anything relating to seca 2 you want translated to English form Italian I will happily oblige

13-03-2004

@"dont get it",

A lot of stuff worth translating from Ita to Eng on:

digitalfreesat.net :: Forum :: Sec* Advanced :: sticky
tiranniadigitale.net :: NewYork Bar » :: Brooklyn-Developer Board TM::
»Seka2 Advanced :: sticky

abulle · 22-03-2004

Hi all
Might be ill be off topic..
Am from the indian ocean and we are covered by eutelsat W2 16 EAST .
i have infinity phoenix programmer and some funcards

i would like to knowwhich soft i''ll need to edit my canalsatellite original card and alsowhich hex tfiles to copy to funcard

***s*t*a*r*m*a*n*** · 01-04-2004

Found this in a sat site: http://www.ss2-sat.com
also has some good software to try but cannot seem to get the SDX files which i think contain the channels, any help to these files appreciated.

Article is as follows:

"Digital+ 19,2E

Seca 2 encryption is breaking in pieces! Spanish digital package Digital+ is encrypted in Seca-MediaGuard (ID 0064), available from Astra 1 - 19,2E is available in pirate reception on Dreambox and dbox2 receivers, Pioneer terminals and on Titanium cards. We suspect, that Digital+ is to stop using Seca 2 encryption, because the tests of Nagravision`s Alladin (ID 1801) are driven on this channels, which broadcast only from Hispasat. At once, Sky Italia was hacked, now Digital+ from 19,2E (Seca ID 0064) is availabe on Mediasat terminals, Dreambox, dbox 2 receivers and Titanium card. This are very bad news for all packages encrypted in Seca 2. Most likely, Sky Italia will stop using Seca 2 allready in this summer, and it will be only available in NDS-VideoGuard. Digital+ will choose new Nagravision. Viasat changing to NDS-VideoGuard. What will Polish Cyfra+ do? Will it change to Nagravision Alladin? Some of Digital+ channels (include erotic Canal 18), broadcasts encrypted in Nagravision Alladin from the Hispasat satellite as a test. Showtime, Gran Vía 1-3, Historia, Sol Musica, Odisea, Hollywood and Mezzo available on frequency 12,226V (30W) use old Nagravision (ID 1800) and new Nagra (ID 1801). It is very interesting, why this channels are not available from Astra 1 satellite...

posted by sonic81 at 2004-03-22 12:43:38"

So will sky italia stop using seca 2 in the summer? NDSVideoguard would appear to be a very strong encryption so what is the chances of it being hacked if many of the channles move over to it? I think it will force the hackers to focus more on it and crack it if majority of channels start moving over to it. They have left it alone up to now i think because it is only primarily used in the UK. Is this the european videoguard version or uk? i know uk is not ment to be hacked but i thought european version was so maybe im getting mixed up, still its an interesting development.

**rolfw** · 01-04-2004

Don't think that the hackers have left it alone s*t*a*r*m*a*n, Sky UK would be the holy grail, but because it only uses dedicated receiver and the cards are very secure, it is more difficult than some of the others. Plus, it is possible that Seca2 was not hacked but leaked, perhpas The internal security in NDS is alo better.

**chrislloret** · 02-04-2004

Hi rolfw, why would SKY uk be a holy grail? I know 4 polish guys here, writing there own code for poland mainly but they apperently also working on Alladin, and they are good but when I asked them about $ky they told me that of course there is an interest in it in GB, but very little in the rest of europe. The general channels show more ads then program (and you´re PAYING for that),the movies are sometimes month later then in europe,the sport, with the ecxeption of cricet if you like it, can be seen on loads of other channels, premiere ligue from august complete on TPS live for a fraction of a sky sub, porn not existant, and the only good channels like bbc and the independent TV for free anyway. So why bother? In the states NDS has been hacked some time ago, even if it´s not the exact same system, it does come close. When the first roumers of cracked cards apeared last summer, Murdy changed card immidiatly,no matter the cost, he got it anyway. I really belive we get a way better deal for half the money of a sky sub here in spain.
Of course only my point of view.........
sunny greatings
C

**rolfw** · 02-04-2004

Hi Chrislloret, admittedly some of the Sky films are behind, but there are more of them overall and now there is far less repeating on the standard movie channels (I was told today). Porn, well yes I would agree with you, but is probably not the major consideration. The general package though, is bigger than pretty much all of the competition and has the advantage of all being in English, which has a generally wider appeal than say French, German or Spanish.

Perhaps the "Holy Grail" was a bit of an exaggeration though.

**chrislloret** · 02-04-2004

Well, its true there are more films but quantity is not the same then quality.It is also true there are WAAAYYYYY more channels BUT if you deduct the shopping and timeshift channels there is not that much more.My girlfriend is english and we had sky for 4 years but after seing the same episodes of our english comedy for the 3rd run going we thought that 40GBP are better put elsewere.
I´m a sat installer here and believe me, porn is a BIG seller. It is quite amazing to see how many systems are installed for that one. I think to do it yourself is still the best option,the porn I mean, but the brits who come here for there retirement or what ever will ask for a sat system with the bbc,itv and please some porn, the real stuff please.....
The english soundtrack seems not to be too importand there. Just look at the forums:
"All of italy is dark now", not true but the porn primafila is and that IS all.....
Greetings up to england and still in hope for one more season of AbFab
C

02-04-2004

@chrislloret,

... porn not existant ...

how about the Red Hot ... channels ?

**chrislloret** · 02-04-2004

@Reindeer:
Hi, first, red hot is not sky, its not in any package and basically ppv. D+ here got it in its regular programing and on ppv.
Second, well,I do not know if you ever seen red hot but some german commercials on free tv are hotter then that

. Its not porn but what in europe would be considered -16soft core.
Even the british Playboy Ch, hardcore over here, would be shown over here after 10pm without encription. I mean the contens,not the playboy channel.
I do not think that porn is so important, but for a lot of people it is. Also, what in england is called porn is considered erotic over here. Going down to my local beach you see more accion

sunny greetings
C

03-04-2004

... red hot is not sky ...

Technically it is broadcasted by Sky transponders and it is contained in:

http://www.lyngsat.com/packages/skyuk.shtml

Maybe the parent company outsourced this kind of business to a subsidiary
in order to maintain its own puritan reputation.

... I do not know if you ever seen red hot ...

It was FTA about 2 years ago for some weeks period ...

...Its not porn...
..., what in england is called porn is considered erotic over here ...

So it is belongs to the adult category, the rest his is a matter of interpretation

imegs · 23-08-2004

is it true that there are people in thailand selling cloned s*ca 2 cards in public in order to avoid any paying to the original company? how does it work? are they expansive? someone came and offered me about the device but i dont really trust them cause i have no experienced in it but i wanna know more about it, can you guys help me out?

**rolfw** · 23-08-2004

Have a read in tha cards and programmers section and the Seca/mediaguard section, there is a bundle of information there, also search for Sky Italia and Taquilla.

23-08-2004

Originally Posted by imegs

is it true that there are people in thailand selling cloned s*ca 2 cards in public

I have heard formerly about pir@ted S**A2 card from Th@iland, but I
think it was a scam. First off. Thera are 2 kind of peeps

Ones who don't pay for PayTV
Others who don't pay for l@ve

I belong to the first category so I travel sometimes myself to
Th@iland, the rest of the post belongs to the Irdeto section
in the first pace

I have heard rumors about cloned UBC cards when they were still in
Irdeto1, unfortunately they have switched to I2 meanwhile.
First off, no need for them to show any porn on TV, they have a lot of
it in reality

But I think it's cheaper and more exciting to have it for
real in BKK (Sukhumvit, PatPong) or in Pattaya than buying a cloned
SE**A2 card flying to Europe and watching TaqXXX with it

imegs · 27-08-2004

so are there any device or cards to watch ubctv for free and i would like to know is there any machines and softwares that do cloning?

27-08-2004

I heard from a German hotel manager in Pattaya (Naklua Road) that there
have been pirated cards, when UBC was still in Irdeto1.
I guess these must have been simple AU GWs with a single provider on it.
But UBC changed meanwhile to Irdeto2, so forget this a least for now.

http://www.lyngsat.com/packages/ubc.html

I tried myself many days to get in touch with the sat community there,
but I couldn't find any one who had only the smallest idea about this,
neither in BKK nor in Pattaya. At the end of my holidays I found out, that
subscriptions and receivers can be bought at the Big-C (not the desease

)
supermarket chain.
The receivers have a built-in Irdeto CAM and 1 card slot.
Subscriptions cost about 1500 Baht per month.
When you are in Thailand and you ask Average Joe about something like:

"Where can I find digital sat receivers" ?

no one will understand what you want (even not in the big electronic
department in the "Central Plaza" shopping mall in BKK). My impression was,
that almost all sellers are illiterate peasants from the Thai/Lao border (Isan)

Better ask for UBC so almost everyone will understand what you mean.
It took me even 2 weeks to find this out.
After coming back to Europe I found this by chance on a Dave/Charlie board:

http://id-discussions.com/forum/showthread.php?t=64023

I should have gone to China Town in BKK, there are allegedly some electronic dealers
who are experts. Generally the Chinese are a more educated ethnic minority
in Thailand (and other South East Asian countries), so you will be probably
more successful asking one of them for some technical background about anything.

armi · 27-08-2004

Any one has keys for Sky Italy Package....

ramin1010 · 04-03-2006

hi
search for keys to open full-x channels

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)