~ WTV SECURITY INDEX ~
Group: alt.discuss.webtv.technical Date: Sun, May 23, 1999 From: ulTRAX@webtv.net BREAKING TV LOG CODE We're only beginning to study the TV Logs. We can get into them and that information is pretty easy to read.... but how are the logs setup to begin with? What do the numbers mean? The following may be incorrect but it seems a new Log is created each time we log on though TV Home... even if it's for a few seconds until we get to the web. The logs include both the box's SSID and user's name (if any... since obviously TV can be watched without a user being on the web). The logs tracks info that goes WAY beyond just studying what TV channel we are watching... I don't have a good enough sampling of TV logs to get all of what WNI tracks.... but it does include things like whether we're watching fullsceen, checking the TV listings etc..... it no doubt tracks what the VCR records, what crossover sites we visit, etc. The Tracking is designed to reduce us to Lab Rats... to study us for information we might other wise choose NOT to give to ad hucksters. I have been trying to isolate a few good logs... that includes my users name.. plus a sampling of ALL the commands the log tracks. Maybe only in this way, when people see what info WNI is stealing from them, will they get up set. But I also just want to understand what the Log names men. Maybe they include a time/date code in hex. All the user information is elsewhere. If so then we should be able to create a number of logs in rapid succession. Another questtion... the logs seem to 8 characters long but some seem to be 7... seemingly requiring one additional (and very predictible) digit. But I can not open these logs.
Group: alt.discuss.webtv.technical Date: Sun, May 23, 1999 From: ulTRAX@webtv.net Re: BREAKING TV LOG CODE 2 Here are the results of accessing my TV logs... All are pretty boring since I don't watch TV using the Plus's tuner. None the less I plan to create a log with all the elements in it. After a while, the first number is stripped off the URL and even adding a seemingly predictible "3" to the log URL yields nothing. The last usable URL seems to have the highest value (assuming it's hex). If the code contains a timestamp.... then it may be the most recent. After that the values drop. [lowest value] 3747A0D6 LOG ssid 374810B3 LOG ssid, user 37481127 LOG tvhome, crossover 37481163 LOG tvhome, crossover,user 374819D9 LOG ssid 37481C94 LOG ssid, user 37482405 LOG ssid 37482953 LOG ssid 374830FD LOG ssid, tvhome,crossover 37483140 LOG user 37483CAF LOG ssid 37487742 LOG ssid, tvhome, crossover 37487787 LOG ssid, user [highest value] 7476A73LOG can't find (nor 37476a73) 7477260LOG can't find (nor 37477260) 747765ELOG Ó&@å37478bff.logå7478BFFLOG[(·&Kå37421"815.logå7421815LOGà ³&êå37422Ùfda.logå7422FDALOG&Oå37423ä16f.logå742316FLOGe³&Eå37423•57e.logå742357ELOG³&6å3740b»919.logå740B919LOG.²&Vå3740bÌbc8.logå740BBC8LOG²&Få00000ñ030.logå 0000030LOG [interesting!] !†å3740cæ416.logå740C416LOG‹ ²&å3740då1de.logå740D1DELOGe²&iå3740ds365.logå740D365LOG4²&¥å3740eš7be.logå740E7BELOG!²&ªå371e9df1.logå71E9DF1LOG–&Bå37029Øcd9.logå7029CD9LOG ±&Jå3702aÙ5dc.logå702A5DCLOGÚµ&Gå3702a¿819.logå702A819LOG ·&6å3702b¬10a.logå702B10ALOGQ¼&áå3702bÌ35c.logå702B35CLOGŽ½&Få3702cpe97.logå702CE97LOG &8å3702eèa4a.logå702EA4ALOGÙ&Þå3702fLde2.logå702FDE2LOGM(&=
Group: alt.discuss.webtv.technical Date: Sun, May 23, 1999 From: ulTRAX@webtv.net Re: BREAKING TV LOG CODE 3 As was said, the newest TV logs seem to be added at the end of an active list of logs.... thus may be in the middle of the mess of alt.characters. Just remember that the newest seems to be the LAST of those logs that still has an eight digit ID. Curiously, while I only had one TV session, THREE new logs were created. See below. [-----OLD LIST-----] 3747A0D6 LOG ssid 374810B3 LOG ssid and user 37481127 LOG tv home/crossover 37481163 LOG same plus user name 374819D9 LOG ssid 37481C94 LOG ssid and user name 37482405 LOG ssid 37482953LOG ssid 374830FDLOG ssid, tvhome,crossover 37483140LOG user name 37483CAFLOG ssid 37487742LOG ssid, tv home, crossover 37487787LOG ssid user name [------NEW LOG: ONE SESSION!------] 37489214LOG ssid 3748984ALOG [-----SEE BELOW!!!-----] 37489934LOG ssid , user This is an example of the data these TV logs track. Apparently, there is no activity we do on TV home that is NOT tracked. Granted I dropped a few TV Channels from my list and that did not show up, but we do not know if there are other logs that track that data. Then again, maybe, just knowing what TV shows we actually watch and record is enough. Remember, this log is the result of just ONE TV session!!!! For this info to be useful WNI must also keep track of the time, the cable provider, the user, what ads were seen, etc. client:showtvfullscreen?tvchannel=10 client:showtvlistings?time=today client:showtvfullscreen?tvchannel=8 client:showtvlistings?time=today client:showtvhome Žfile://rom/tvhtmls/setup.html client:showchannelsetup file://rom/tvhtmls/setup-center.html file://rom/tvhtmls/setup-display-info.html?Continue=Continue file://rom/tvhtmls/setup-contrast.html? Continue=ContinueX file://rom/tvhtmls/setup-brightness.html?Continue=Continue client:showtvhome˜ file://disk/browser/Howto/howto-index.html˜ file://disk/browser/Howto/vcr_01.html file://disk/browser/Howto/vcr_02.html?Continue=Continue client:showtvhome file://rom/tvhtmls/setup.html client:ConfirmExternalSetup?showPage=IntroPage client:ConfirmExternalSetup?showPage=StartDeviceSetup&device=VCR file://rom/tvhtmls/setup-noIRBlaster.html client:ConfirmExternalSetup?showPage=StartDeviceSetup&device=VCR file://rom/tvhtmls/setup-noIRBlaster.html client:ConfirmExternalSetup?showPage=StartDeviceSetup&device=VCR file://rom/tvhtmls/setup-noIRBlaster.htmlclient:showtvrecent client:showtvfullscreen?tvchannel=10P [-----ORIGINAL LOG-----] Ø7H' 0[p !üò 0[˜ $$client:showtvfullscreen?tvchannel=10P 0[D<˜ ý client:showtvlistings?time=todayP ; 0[ 0[P O 0ûp -~c 0ûP DpÇp î] 0ǘ ##client:showtvfullscreen?tvchannel=8P 0ÇX ø client:showtvlistings?time=todayP :0Ç 0Ç 0Pp ,ÅÄ 0PP -0p -~c 0P `0Ì/³0 Ö9 pÌ/³P P0Øp ´"— 0ØP )0¹p -±n 0¹P }Np +Z0 ,– N0 +ZP OM0Ûâ0 "Hk M0Û☠client:showtvhomeX Žfile://rom/tvhtmls/setup.htmlX œclient:showchannelsetupP vN0 +Zp ,–P NM0Ûâp "HkP BN0 +Z0 ,–P p ÿÿÿÿP KP0 ÿÿÿÿP $L0s…p +)]P APp ÿÿÿÿP äMpÛâ0 "HkX Ü$file://rom/tvhtmls/setup-center.html˜ lfile://rom/tvhtmls/setup-display-info.html?Continue=ContinueX8file://rom/tvhtmls/setup-contrast.html?Continue=ContinueX‡:file://rom/tvhtmls/setup-brightness.html?Continue=Continue˜ uclient:showtvhome˜ Å*file://disk/browser/Howto/howto-index.html˜ %file://disk/browser/Howto/vcr_01.htmlX ë7file://disk/browser/Howto/vcr_02.html?Continue=Continue˜ ºclient:showtvhomeX "file://rom/tvhtmls/setup.html˜ –.client:ConfirmExternalSetup?showPage=IntroPageX ½@client:ConfirmExternalSetup?showPage=StartDeviceSetup&device=VCRX œ)file://rom/tvhtmls/setup-noIRBlaster.htmlX «@client:ConfirmExternalSetup?showPage=StartDeviceSetup&device=VCR˜ ,)file://rom/tvhtmls/setup-noIRBlaster.html˜ @client:ConfirmExternalSetup?showPage=StartDeviceSetup&device=VCRX |)file://rom/tvhtmls/setup-noIRBlaster.html˜ |]client:showtvrecentP M0ÛâP èMpÛâP D0ŒÇF0 ,ÑÃP - 0[p !üòX !$client:showtvfullscreen?tvchannel=10P 0[ m@
Group: alt.discuss.webtv.technical Date: Sun, May 23, 1999 From: ulTRAX@webtv.net Re: BREAKING TV LOG CODE 4 When WNI logs our Web surfing.... it either does so at the server.... or there are other wtv-logs that we have yet to discover. Whatever the method, it's probably all done in real time. But when we watch TV... we are NOT on-line. These TV tracking logs, detailing everything we do in TVHome must be stored on the HD and downloaded to the server later. Word from a contact at NetOps is that this download usually occurs at night when the Plus is getting a TV listing update. But should we prevent this from occuring, say by unpluging the box.... these logs will STILL be downloaded to the server the next time we log on. Obviously WNI is VERY intent on getting this information from us... whether we want them to or not.
Group: alt.discuss.webtv.technical Date: Mon, May 24, 1999 From: ulTRAX@webtv.net Re: BREAKING TV LOG CODE 5 It's amazing.... yesterday I had all these active TV logs in my file: 3747A0D6 LOG ssid 374810B3 LOG ssid and user 37481127 LOG tv home/crossover 37481163 LOG same plus user name 374819D9 LOG ssid 37481C94 LOG ssid and user name 37482405 LOG ssid 37482953LOG ssid 374830FDLOG ssid, tvhome,crossover 37483140LOG user name 37483CAFLOG ssid 37487742LOG ssid, tv home, crossover 37487787LOG ssid user name 37489214LOG ssid 3748984ALOG [Huge file] 37489934LOG ssid , user Today, I have only these: 3748EE96LOG 374956C6LOG 37495791LOG 3749637DLOG 37496906LOG 37496C27LOG Maybe a log is created each time we log on regardless if we start at TVHome or not. In looking back at the letters I received on what appears to be Caller ID Logs... the Log code seems to have been a 7 digit code, not 8. I wrote the person asking to verify this. Maybe the 7 digit Logs are not old versions of existing TV Logs but have another function entirely. Any ideas what commands WTV uses to delete these TV logs after they download them?
Group: alt.discuss.webtv.technical Date: Mon, May 24, 1999 From: Thin-Ice69@webtv.net Re: BREAKING TV LOG CODE ulTRAX you said that the user id and sid # were shown.. What did it look like with the sid, user name/id? 3747A0D6LOG/75000008-810000000000021 37464oF2LOG/ulTRAX-810000000000021
Group: alt.discuss.webtv.technical Date: Mon, May 24, 1999 From: ulTRAX@webtv.net Re: BREAKING TV LOG CODE matt Ø [--SSID--] X27IiP + 0[p +Gø˜ ±7IlIl%X `ulTRAX@ It might be intresting to try an experiment on the TV LOGs. If we all have roughly the same file names, that would indicate a that they´re a date stamp of some sort. Maybe I´ll try logging on, on the hour for a few hours in a row and see if I can find a pattern besides the codes being in hex and in ascending order.
Group: alt.discuss.webtv.technical Date: Mon, May 24, 1999 From: redrumredrumred@webtv.net Re: BREAKING TV LOG CODE matt Or maybe everyone watch a specific channel for a hour and than post there logs...They should be the same...Maybe have half watch say espn and the other half sign on and surf websiteswith the pip and watch espn..They should be the same..But I think certain sites may be added to your log like starwars for mine was...