NAG 3 CRACKED ?

[JIMCEE]

Please dont take this as gospel from me but read and digest it for what its worth. we all live in hope. Re: Christopher Tarnovsky aka Talking about Hacking NAG3 // 2010-02-04

--------------------------------------------------------------------------------
Quote:
Originally Posted by sat guy
C / P


Christopher Tarnovsky aka talking about hacking // 2010-02-04
WASHINGTON, D.C. -- Black Hat DC Conference 2010 -- The ultra-secure technology used to protect some of the world's most commonly used microchips might not be so secure, a researcher said here today.

Christopher Tarnovsky, a researcher at Flylogic Engineering who has made a business of hacking "unhackable" chip technology and other hardware, was at it again today with the revelation of vulnerabilities in the Infineon SLE 66 CL PE chip, which is widely used in computers, gaming systems, identity cards, and other electronics.

Tarnovsky offered a step-by-step explanation of his successful efforts to crack the chip's defenses using electron microscopy. During the course of about nine months, Tarnovsky said he was able to bypass the chip's myriad defenses and tap into its stored information without detection or chip failure.

"I'm not saying it was easy, but this technology is not as secure as some vendors would like you to think," Tarnovsky said.

Using a painstaking process of analyzing the chip, Tarnovsky was able to identify the core and create a "bridge map" that enabled the bypass of its complex web of defenses, which is set up to disable the chip if tampering occurs. After creating the map, he used ultra-small needles to tap into the data bus -- without disturbing the protective mesh -- and essentially "read" all of the chip's stored data, including encryption keys and unique manufacturing information.

Using this data, criminals could potentially re-create the chip in order to develop counterfeit systems or subvert widely used systems, Tarnovsky said. Such exploits could allow criminals to break through the defenses of pay TV services, medical ID systems, or even Microsoft's much-vaunted Xbox license chip, he said.

Tarnovsky said he has informed Infineon of the flaws he has discovered, but so far the company has not responded. "Their initial reaction was to tell me that what I'd done was impossible," he said. "Then when I sent them some video and the code that I just showed [to the Black Hat audience], they went quiet. I have not heard back from anybody."

In addition to Infineon, Tarnovsky said he informed officials at the Trusted Platform Module (TPM) standards organization, which sets security guidelines for the widely used PC chip standard. But he has not heard back from them, either.

Tarnovsksy said he believes similar exploits would be possible with other chips as well as Infineon's, though he has not attempted them yet. The exploits would not be easy to reproduce -- Tarnovsky said he went through many chips and many needles, and electron microscope time costs $350 per hour. "But the reason it took so long was not so much what the vendors have done, but me learning how to do it," he said. "Once you know what to do, it's not incredibly hard."

Personally I think Chris was wrong to give them any clues or help of what he did.

[Pad578]

Not very likely m8 that someone would go to all that trouble and expense just so he could tell them he cracked it.

Much more money to be made in selling the information to people who would put it to better use.

[JIMCEE]

This has been posted on here with the best intentions and that some of the more knowledgeable DKrs can maybe read more into it and see that there might be light at the end of the tunnel in the foreseeable future, as i said we live in hope.

[Pad578]

Not knocking your post, a lot of what he said in there was way over my head, I just dont see the point in spending $350 an hour on a piece of equipment to crack the code only to go and tell them about it.

unless he is trying to get a job with them.


Like you I hope it does get cracked one day

[Paulcollins1968]

i second that my friend....

HI IM A NEWBEE IM GETTING A DDIGITAL DUO TOMORROW ANY HELP ON SET UP

[kenny s]

epic fail on the digital duo

[super jumbe]

Looks as if we are all were we started I can wait for as long as life remains on this planet.

[wobble]

can all members make a mental note of this thread and the name of this guy Christopher Tarnovsky if you dont already know of him,these type of threads about him pop up every now and again..also you will come across these youtube videos of him over the next few years

[ame=http://www.youtube.com/watch?v=tnY7UVyaFiQ]YouTube - How to Reverse-Engineer a Satellite TV Smart Card[/ame]

[ame=http://www.youtube.com/watch?v=dLtFfZuArQU]YouTube - Black Hat DC 2010: Hacking the Smartcard Chip 2/8[/ame]

[super jumbe]

Well he is not making money so who cares let him find a bit of time to cheers us all

[alunfennell]

I have been informed that No Hacking Teams in Europe are working on or have an interest in Hacking N3, for the simple reason Sales of IP Receivers is sky High and money made by Pay Card servers is flowing in from all across Europe to different servers.

Hacking an Encryption is primary done to sell Receivers firstly, secondly any inconvenience to certain provides comes way down the list, nearly every encryption hack involves money, Paying Teams to do so can cost 10s of Millions usually paid for by Receiver manufactures, this is passed on to customers in the form of programmable card, Cams or special receiver.

Since Card sharing & Sales of IP receivers is at an all time high, nothing will be Hacked and any free Cable or Satellite in the future seems very very unlikely untill the Day comes Card sharing is put to sleep.

The next Generation of Hacking is going down a different direction with IPTV starting to come online with Dreamboxs etc over the past few months, so there will be no need for even a satellite dish as every channels will come through the internet, (Its already started)

Its the End of openly hacked Television via EMU & Keys (Forget it)

[super jumbe]

Point taken alunfennell! but lets come back to Nag3 cracked who ever does crack the software he will automatically be a millionaire should we all spend a bit of time and try to crack Nag3?

[gmb45]

as alun said m8 wont happen, as i understand it, to start you have to get into the chip, stripping layers away and using a scanning electron microscope, try getting hold of one of them ~~~~ers, to much money being made thru c/s boxes/server fees, simply wont happen m8, the days of the simple plug and play boxes is well a truly over.

[manxspud]

I agree with @alunfennell, as long as the money is coming in from somewhere , why go to all the expense of paying huge amounts of money for a hack.

Times change and we have to change to keep up or move on.

@manx

[taff26ra]

IVE GOT A EUROVOX 1100 USB I CAN STILL FIND ALL CHANNELS IN THE SCAN BUT ONLY THE NORMAL NCHANNELS WORK ALL THE REST AR EBLANK BUT STILL ARE THERE I8S THIS THAT NEW NAG 3 BLOCKING ME OUT AND IF SO IS THIS EVER GONNA BE POSSIBLE TO GET CRACKED OR IS THERE OTHER MEANS OF GETTING TV MAYBE ILL HAVE TO SCRAP THE BOX ALTOGETHER WHAT YOU REKON GUYS

[manxspud]

1st please turn off your caps, its considered shouting and rude.

read the N3 faq

Have a read through the cable and sat forums. Either way
you will need a new box.

@manx