Oct 8, 2011

Hacking Digital Cable

Repost from article I did over at Rocket City Hackers

Save money by using a QAM tuner to get HD local channels and anything else your cable provider left unencrypted (including your neighbor's on demand purchases)

I have been wanting to get rid of directv.  The one thing that stops me is live sporting events, news, etc. My cable internet provider  has recently readjusted prices from 56 dollars to 36 dollars a month for 12Mb/s download and 2Mb/s upload internet speeds.  This made it somewhat reasonable to get cable internet alone without bundling in phone or digital cable.  So with my "internet only" plan  I can stream movies / TV from Netflix, Amazon, and Hulu.  This leaves me looking for a way to get at least HD local channels for free.  There are two options: use an antenna for over-the-air HD or tune QAM channels over your coax cable.

QAM Tuning, what is it?

Straight from Wikipedia,  QAM stands for quadrature amplitude modulation, the format by which digital cable channels are encoded and transmitted via cable television providers.  So if you have a QAM tuner in your TV, computer, or digital cable box you can tune these channels.   Cable companies can encrypt these channels so that only the digital cable box or cable card can decrypt these channels.   I have not seen a good crypto attack published.  It is either pretty strong or the ones that have figured it out want to keep their free digital cable.

Testing your local cable provider for QAM channels

I don't have a QAM tuner in my TV so I will be using a Silicon Dust HDHome run to connect to my computer.  I have the older version but this new Dual below solves some of the shortcomings of my tuner mainly having two coax inputs, one for each tuner while the DUAL uses an internal splitter.  This also works out because I want to make a DVR of my computer and this is compatible with every program I would want to use.



I know from testing that my service provider blocks analog cable channels with a notch filter or band-stop filter either in my box or the box at the street.  This article will not suggest or condone bypassing this filter to get analog cable for free because this is illegal.  What you probably didn't know is that when you get cable internet you also get the higher frequency digital channels usually reserved for tuning with your rented cable box and corresponding digital cable plan.    I have heard there is some law that says that if it is available over-the-air then the cable company has to leave the channels unencrypted.  These signals are not blocked because it may be costly to have a filter that blocks digital cable and not cable internet, not possible, or they just don't care (winner).
So in my case I plug in the HDHomeRun connected to my coax cable split from my cable modem and install the software.   You put in info like zip code and provider to get the device set up.  For the provider you want to choose digital cable because this is what we are after.  The below screen is finding a QAM channel.  On the Program tab 941:0 appears meaning this is not encrypted.  You can then hit view and see the channel.  In this case it turns out to be CNN HD which is the first channel I happened to find.


So this was not normal, it looks like my cable provider was accidentally leaving various channels unencrypted.  That means that I wanted to search for more than just my HD locals such as ABC, CBS, NBC, PBS, FOX which were also there.  You can manually seek or you can scan and see what is found.  I came up with the list below.  What is not shown on this list was Discovery HD which is one of my favorite channels.  SCORE!  More than this there is no copy protection on these recordings because they are completely unencrypted.   In part two of this article I will tell you about options on recording these digital cable channels with MythTV or Windows Media Center 7.

Double Bonus Time

When I was searching through these channels which will change on the whim of your cable provider,  I noticed something.  Every once in a while a new channel would pop up at the end of the range of channels such as 114-123 for example.  When I actually tuned these transient streams I figured out that these where OnDemand choices that people were buying and watching on their digital cable boxes.  They ranged from SD to HD quality.  They also were being remotely controlled by the person's box who was watching it.  The stream would pause, rewind, and stop as controlled.  This made it slightly less fun to watch but if one stream paused you could usually find the same movie etc on another channel.  Using this method I could see and record every new release that was out there.  Word of caution, people rent some crazy stuff and you don't know what is going to show up so some parental guidance is needed starting around 9pm.   Since I found this flaw I think the service provider upgraded the encryption of the OnDemand system for encryption because I have not seen a stream like that pop up recently.

Try it yourself for free with no setup or hardware purchase!!!


So all you really need to try this out is a newer TV set with QAM tuners.  You connect your coax cable to the TV set and look for scanning the digital channels.  See what you find for free.  Also there is another feature that the Silicon Dust HDHomeRun website provides.  You can go here and put in your zip code and pull down your cable provider.  Apparently silicondust samples (with consent in the app) the tuners that are deployed in your area and show what they are able to tune.  You can basically find out what free channels your are going to be provided with no setup or hardware purchase.  You can see beforehand if your provider encrypts as they should or left some gaping holes for you to find.
Thinking about a part two of this article where I will tell you about options on recording these digital cable channels with MythTV or Windows Media Center 7.  Let me know in the comments what you think.

13 comments:

Randy said...

Wow, a first comment by me :).

I've been using this method ever since I bought my first digital TV (and still have it, I love my Panasonic plasma).

My provider is Comcast, and when you order service without a HD box, they will provide a free analog box. Funny thing is that this box actually BLOCKS your way to HD channels that you're supposed to get for free. This is why I have Comcast so much that I've always tried to get what I am entitled to for free. So, I did was still keep the analog box 'cause certain channels such as ESPN, ESPN2, etc. are filtered through this analog box. I also used a co-axle splitter to have another cable run directly to my TV. I then had my TV scan for ALL channels to see what it could detect. Most of the free HD channels were instantly picked up. I love it. And Comcast, kiss my stinky asssssssssssssssssssss

jhonden said...

This is a good post. Though it is not legal to do so but the lesson learned can be used for some good purpose also over the time.

LT Power Cable Manufacturer
RG-59 Coaxial Cables

Vivek Gupta said...

gud Post.U may contact Relemac's Dealer for gud quality Lan Cable

Brian Monroe said...

jhonden. Actually this is legal. Cable companies are required by law to provide you with basic over-the-air channels in their original broadcast format (HDTV). What they choose to lock down or not lock down is up to them. As long as you're not bypassing encryption they're offering it for free.

S.Valconi said...

Haha jhonden suck it!!
you suck it and you die!!

bleh_wanna_b_hacker said...

^^^---- LOL

Does anyone, including the author, think there's a better chance of getting more channels with a better high grade quality coaxle cable? I've see a youtube video where a guy uses just speaker wires as an antenna. Also on another video there's a guy who usues two beer cans to make a homemade antenna, then he hangs it right on the glass of his window. It then shows him getting a few cable channels. Is there a certain known hack on how to use a tv with an already build tuner, to get free cable channels? Maybe even satellite?

Peter Newman said...

After running the PC scan is it possible to run oc-ax to TV, run a channel scan and watch the new channels?

Peter Newman said...

After running the PC scan is it possible to run oc-ax to TV, run a channel scan and watch the new channels?

Jim Parris said...

An update .. Comcast in my area (suburb of Chicago) has encrypted all of their stations, digital or otherwise - so this method no longer works. You have to get an additional piece of hardware from Comcast for $10 a month (in addition to whatever you're paying for basic cable).

I checked HDHomeRun's channel page for my zipcode, and they have channels listed, but this is not true. They are all encrypted now, (even basic channels that are supposed to be free, like Public Television).

If this change isn't nation-wide yet, it will be soon. :(

Fuzzy Puppies said...

Your comment about "by law required to unencrypt local TV stations" is correct, but not 100%.

By law, the FCC requires that all HYBRID cable operators provide, free of charge, all local stations via unencrypted ClearQAM channels. These can be picked up in the clear without any need for authorization/decryption directly wiring the line into your HDTV's built-in tuner.

Once a provider ditches their hybrid analog/digital setup in exchange for an all-digital setup (eliminating analog conserves significant bandwidth, so this is inevitable over the next several years), the rules no longer apply. All-digital providers are free to encrypt or unencrypt anything they see fit, no matter how much anyone complains to the FCC about it.

So that change that you noticed how you all of a sudden can't pick anything up, that's why. The analog spectrum was eliminated, and what little unencrypted digital channels you picked up before, now have been encrypted. Comcast seems to have been the first to do this, Time warner is following suit (already has in some areas), and all of the local cablecos eventually will too. The reason being that it eliminates cable theft and when someone cancels service, they don't have to pay someone to snip the line - it becomes as simple as a checkbox on a computer screen.

Jason Nichols said...

You aren't doing anything tricky. Our customer support and technicians have been telling people to do that since early 2000's at least. The reps in your area just suck ass

Jason Nichols said...

He was probably picking up signal leaked from a bad tap or bad wiring in someone else's house/apt. If you use shit cable, you'll get shit service. If you use decent cable, you'll get the services you should be getting. If you use the cable of the gods sprinkled with fairy dust, you will still get the service you pay for. If you want more, you'll have to do something illegal...

Guzzi sager said...

Very informative and well written post! Quite interesting and nice topic chosen for the post.

Panasonic - 14" Toughbook Notebook - 4 GB Memory - 500 GB Hard Drive (CF-53JCLBX1M)

Panasonic - 14" Toughbook Notebook - 4 GB Memory - 320 GB Hard Drive