[SOLVED] How to downgrade CI+ UExxB7xxx?

[juusso]

Should I boot with alternative firmware 3001 and process the RSA-disabled upgrade to 3002 (modified with the SamyGO firmware patcher) ???
Thanks for your efford.

You can upgrade with original 3002, because you cant patch such firmware with samygo patcher - it simple will not work. Encryption is changed and patcher gives you error.

We need to search where hashes have written to. If we know it, maybe we might have success by writing firmwares by hand.

[juusso]

username@computername:/media/USB-STICK$ ls -alR

drwxr-xr-x 4 root root 4096 2010-11-26 16:49 ..
drwx------ 6 username username 4096 2010-11-26 16:35 telnet-enabler

Samygo, RCA-disabler and other games you want you have to put inside telnet-enabler
After that in Content library you can`t see those games exept Troja horse (in CHILDREN!)
Just after copying to TV memory you will see all those treasure. (in CHILDREN!)

Sorry, but I HAVE patched the 3002.2 firmware with the SamyGO firmware patcher v0.24 without an error...

I have to check is it "february" firmware or not. Tell me Maybe it isn`t coded in other harder way and patcher still accepts it. I do not know.

If the RSA-Disabler tool was copied into /telnet-enabler, I could not see an entry in the content library for the utility.

You will see it only after you choose "copy all". Just from tv memory. And just /game subdirectory you have to copy, not whole RCA-disabler,ok?

[juusso]

Unplug TV from wall and plug-in again. TV starts fluently.
I guess, you started RSA-Dissabler (and samygo games ) not from ContentLibraryManager-Kids, but from content library Kids? I get TV freezing to if i load it from content library. Read carefully again:

Enter Content Library Manager -> Select USB -> Select Children category.
Use Copy function on TV to copy Telnet Enabler as Trojan content to TV internal flash. (copy all)
Return back to main menu in Content Library Manager and select again Children but from TV flash contents this time.
You can run it from: [Menu] -> [Source list] -> [USB] -> [Content Library] -> [My Contents] -> [Children]
Run SamyGO RSA-Disabler

If you get error from this place, i haven`t gon any idea more. I just want repeat my question:

General question for experts:

• If we could run RCA dissabler and it would work, would it possible to flash images by hand
  (bml.restore /dev/bml0/xx /dtv/usb/sda1/exe.img ) or not?
  
  If yes, then another question:
• How to run RCA dissabler from shell cmd line? or how to call it from custom script?
• What exact does RSA dissabler? I mean, why after TV starts with patched firmware, TV does accept fw?

[juusso]

Ok, I have upgraded my TV to the patched 3002.2 SamyGO firmware and all went fine. TV is running perfectly.

Thats a great new, because the firmware is dated on 2010.09.09. It was well known, that we can`t use patcher to firmwares after 2010.01.25, Couldn`t, because you did it w/o any problem.

p.s. Tell me truth: did you get RSA-dissabler working or not? and where i was wrong (exept patcher)?