Recent Posts

31

WinCE / Re: tv2remotekeys ?

Last post by VisionUser - 17. Jul 2014, 21:18

Well, that's easy... According to http://msdn.microsoft.com/en-us/library/aa453696.aspx the folder for MIPS CPUs is 4000...

The problem is... I'm quite sure the autorun functionality is implemented by the Windows shell (explorer.exe or whatever they use on Windows Mobile)

And the STB isn't running the shell

When a USB flash drive is plugged into the box before boot up, the box will access the flash drive 2 times early on during the boot up process. The question is, what file is it looking for on the USB flash drive? Could it be looking for a firmware update or a file to execute?

32

Software / Re: BT Vision Box Hidden Menus

Last post by VisionUser - 17. Jul 2014, 20:59

I found out how to get back into the hidden menu. Now I can enter the hidden menu at will!

In order to enter the secret menu, you must disrupt the boot process by either:
1) Removing the ethernet cable halfway though bootup
2) Blocking the box from loading certain URLs during bootup with a firewall/web filtering software etc.

The URL's to block (might not need to block them all):
sg05clgv.nevis.btopenworld.com/dvrV2/DVRScheduler.asmx
sg05clgv.nevis.btopenworld.com/ListingsClientDataDelivery/PackedListingsForClient/
sg05clgv.nevis.btopenworld.com/clientsms/Purchase.asmx
sg05clgv.nevis.btopenworld.com/clientsms/GetGroupGrantedKeys.ashx
sg05clgv.nevis.btopenworld.com/MDWS/MediaDiscovery.asmx
/clientuserstore/UserStore.asmx <--- This might be the only one you really need to block
/MDWS/MediaDiscovery.asmx
/vodCatalogWS/catalog.asmx


If you block those URLs, then the box will get stuck on the grey bootup screen.
- Then put it into standby, then take it out of standby
- The screen should now be either black, or asking you to enter a 4 digit pin code (depending on which urls you block)
- Press the main menu button, and now the secret menu will appear!

I think the "secret menu" is actually the default menu on the box that happens before it loads "the client user store" and if you block the user store, then it goes to the "secret menu" by default.

Inside the secret menu, you can turn on the DLNA/upnp client or use it's built in web browser. With some dns spoofing, you can get it to load any web page you want as long as it is valid xhtml.

The DLNA client says it wants to connect to Windows Media Player 11, but I successfully got it to connect to PS3 Media Server using the Xbox 360 profile.

Quite annoying to discover the silver box has a DLNA client all along but I didn't find out until now. And getting into the secret menu turned out to be quite easy.

33

Software / DLNA client on silver BT visio...

Last post by VisionUser - 17. Jul 2014, 20:52

If you boot into the secret menu, there is a "Personal Media Settings" option to "Enable playback from home network". If you do this, it will turn the silver BT Vision box into a DLNA upnp client! When you select "Photos music and video" from the secret menu, it will then look on your local network for a DLNA server.

The following network activity can be observed:

Code: [Select]

NOTIFY * HTTP/1.1
Host: 239.255.255.250:1900
Cache-Control: max-age=1800
Location: http://192.168.0.4:53208/upnp/1
NT: uuid:-----------------------------
NTS: ssdp:alive
Server: CESTB/6.1 UPnP/1.0 DMP/5.0
USN: uuid:-----------------------------
OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01

NOTIFY * HTTP/1.1
Host: 239.255.255.250:1900
Cache-Control: max-age=1800
Location: http://192.168.0.4:53208/upnp/1
NT: uuid:-----------------------------
NTS: ssdp:alive
Server: CESTB/6.1 UPnP/1.0 DMP/5.0
USN: uuid:-----------------------------
OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01

NOTIFY * HTTP/1.1
Host: 239.255.255.250:1900
Cache-Control: max-age=1800
Location: http://192.168.0.4:53208/upnp/1
NT: upnp:rootdevice
NTS: ssdp:alive
Server: CESTB/6.1 UPnP/1.0 DMP/5.0
USN: uuid:-----------------------------::upnp:rootdevice
OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01

NOTIFY * HTTP/1.1
Host: 239.255.255.250:1900
Cache-Control: max-age=1800
Location: http://192.168.0.4:53208/upnp/1
NT: upnp:rootdevice
NTS: ssdp:alive
Server: CESTB/6.1 UPnP/1.0 DMP/5.0
USN: uuid:-----------------------------::upnp:rootdevice
OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01

NOTIFY * HTTP/1.1
Host: 239.255.255.250:1900
Cache-Control: max-age=1800
Location: http://192.168.0.4:53208/upnp/1
NT: urn:schemas-upnp-org:device:MediaRenderer:1
NTS: ssdp:alive
Server: CESTB/6.1 UPnP/1.0 DMP/5.0
USN: uuid:-----------------------------::urn:schemas-upnp-org:device:MediaRenderer:1
OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01

NOTIFY * HTTP/1.1
Host: 239.255.255.250:1900
Cache-Control: max-age=1800
Location: http://192.168.0.4:53208/upnp/1
NT: urn:schemas-upnp-org:device:MediaRenderer:1
NTS: ssdp:alive
Server: CESTB/6.1 UPnP/1.0 DMP/5.0
USN: uuid:-----------------------------::urn:schemas-upnp-org:device:MediaRenderer:1
OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01

NOTIFY * HTTP/1.1
Host: 239.255.255.250:1900
Cache-Control: max-age=1800
Location: http://192.168.0.4:53208/upnp/1
NT: urn:schemas-upnp-org:service:ConnectionManager:1
NTS: ssdp:alive
Server: CESTB/6.1 UPnP/1.0 DMP/5.0
USN: uuid:-----------------------------::urn:schemas-upnp-org:service:ConnectionManager:1
OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01


If you visit the following URL, you will be met with this xml:

http://192.168.0.4:53208/upnp/1  <--- box IP address

Code: [Select]


  <?xml version="1.0" encoding="utf-8" ?>
- <root xmlns="urn:schemas-upnp-org:device-1-0">
- <specVersion>
  <major>1</major>
  <minor>0</minor>
  </specVersion>
- <device>
  <deviceType>urn:schemas-upnp-org:device:MediaRenderer:1</deviceType>
  <dlna:X_DLNADOC xmlns:dlna="urn:schemas-dlna-org:device-1-0">DMR-1.50</dlna:X_DLNADOC>
  <UDN>uuid:-----------------------------</UDN>
  <friendlyName>Mediaroom Device</friendlyName>
  <manufacturer>Mediaroom</manufacturer>
  <manufacturerURL>http://www.microsoft.com/</manufacturerURL>
  <modelName>Mediaroom</modelName>
  <modelNumber>Microsoft Windows CE 5.0.1400</modelNumber>
  <modelURL>http://www.microsoftmediaroom.com/</modelURL>
  <modelDescription>Mediaroom Client</modelDescription>
  <serialNumber>----------</serialNumber>
- <iconList>
- <icon>
  <mimetype>image/png</mimetype>
  <width>48</width>
  <height>48</height>
  <depth>24</depth>
  <url>/upnp/2</url>
  </icon>
  </iconList>
- <serviceList>
- <service>
  <serviceType>urn:schemas-upnp-org:service:ConnectionManager:1</serviceType>
  <serviceId>urn:upnp-org:serviceId:ConnectionManager</serviceId>
  <SCPDURL>/upnp/4</SCPDURL>
  <eventSubURL>/upnp/4e</eventSubURL>
  <controlURL>/upnp/4c</controlURL>
  </service>
- <service>
  <serviceType>urn:schemas-upnp-org:service:AVTransport:1</serviceType>
  <serviceId>urn:upnp-org:serviceId:AVTransport</serviceId>
  <SCPDURL>/upnp/5</SCPDURL>
  <eventSubURL>/upnp/5e</eventSubURL>
  <controlURL>/upnp/5c</controlURL>
  </service>
- <service>
  <serviceType>urn:schemas-upnp-org:service:RenderingControl:1</serviceType>
  <serviceId>urn:upnp-org:serviceId:RenderingControl</serviceId>
  <SCPDURL>/upnp/3</SCPDURL>
  <eventSubURL>/upnp/3e</eventSubURL>
  <controlURL>/upnp/3c</controlURL>
  </service>
  </serviceList>
  </device>
  </root>


It states that it wants to connect to Windows Media Player 11, but I managed to get it to connect to PS3 Media Server! Then you can browse it for media. The silver BT Vision box had secret DLNA capability the whole time. And there was no need to install mod-chips on the box, just booting into the secret menu was all that was required!

34

Others / BT servers switching off 22 Ju...

Last post by VisionUser - 16. Jul 2014, 21:15

BT sent a letter in the post saying they are axing the BT Vision service on 22 July 2014. More info on it here: http://www.a516digital.com/2014/04/bt-vision-to-close-this-summer.html

If they really do turn the servers off, then the silver BT Vision box could become unbootable and unusable even as a Freeview PVR. It is a sad day. The silver BT Vison box was a good solid PVR, shame to see BT kill a perfectly good piece of kit (and appallingly wasteful and damaging for the environment). It never missed a recording or developed problems with its hard drive in 5 solid years of service.

Other Freeview PVRs are apparently very unreliable and prone to going wrong (most of them Linux based). So I'm really going to miss the silver box if BT actually do kill it off.

The question is, could there be any way to get a computer to impersonate the BT servers so the silver box can continue to live a happy life as a Freeview PVR?

The silver boxes communications with the BT servers are encrypted, so can't be easily replicated.  Has anyone had any success in decrypting it or peeking inside the boxes code to see what kind of responses a fake BT server should give?

35

Software / Re: BT Vision 2.0 Black Box li...

Last post by steve3123 - 07. Jul 2014, 16:14

Hello, Is there anybody in there? Just nod if you can hear me Is there anyone home !!

Picked up another of these boxes today  --- this one boots up with a different screen and works as a Freeview box.
The menu looks different.
Is there any way of sniffing the software off this one and using it in the other one?
Is this info on the hard drive or written into the board?
I haven't tried swapping the hard drives over to see if it will make the bad one work.

Any help appreciated --- even if you read this please just reply with a hello !!
Thanks
Regards

whoops, sorry for the delay. From how I understand the BTvision box works the new firmware is downloaded and written to the box itself, its not stored on the hard drive so there is no way to copy it.

36

Hardware / Re: HOW TO

Last post by n13ldo - 30. Jun 2014, 08:18

Registered here as I found this thread in relation to the BT Vision Box I've acquired.

There is a PDF on post #1 of this thread, ok but the PC support files linked to megaupload are no more as the host is gone.

Can someone else on here make these available somehow?

Thanks 

37

Others / Re: Connecting via VPN or Prox...

Last post by mylo - 17. Apr 2014, 09:49

Hi Ross,

the media receiver normally has to be connected to 1 out of 2 special out of 4 ports on the router. "special" measn "multimedia enabled".
Besides the bandwidth  (what I think is a problem besides) I assume there is a problem with vpn and/or non Telekom specified router not transporting or destroying the multimedia funtionality on that port.

38

Others / Connecting via VPN or Proxy fr...

Last post by rosskopp - 19. Mar 2014, 03:16

hello,

i am trying to find out how to use my media box from Telekom in the USA to watch my shows from Germany.

here is what i have:
Telekom receiver X301T
Deutsche Telekom internet connection in Germany (Active)
VPN between two Fritz boxes from Germany to USA

how do i fool the Telekom receiver into thinking its in Germany by using either a VPN or Proxy connection back to my Deutsche telekom connection in Germany?

it seems that the VPN alone is not working because i get no connection to the Telekom Entertain service.

any help would be greatly appreciated.

Ross Kopp

39

Software / Re: BT Vision 2.0 Black Box li...

Last post by oscar - 01. Mar 2014, 15:09

Hello, Is there anybody in there? Just nod if you can hear me Is there anyone home !!

Picked up another of these boxes today  --- this one boots up with a different screen and works as a Freeview box.
The menu looks different.
Is there any way of sniffing the software off this one and using it in the other one?
Is this info on the hard drive or written into the board?
I haven't tried swapping the hard drives over to see if it will make the bad one work.

Any help appreciated --- even if you read this please just reply with a hello !!
Thanks
Regards

40

WinCE / Re: tv2remotekeys ?

Last post by Mulder3 - 21. Jan 2014, 21:03

Well, that's easy... According to http://msdn.microsoft.com/en-us/library/aa453696.aspx the folder for MIPS CPUs is 4000...

The problem is... I'm quite sure the autorun functionality is implemented by the Windows shell (explorer.exe or whatever they use on Windows Mobile)

And the STB isn't running the shell