http://siriustrouble.wordpress.com/
Printable View
I will not continue to work if you listen to it. If you only turn it on to check to see if it is still working it will not be able to receive the update from the satellite to shut it off. In other words...it is not a flaw at all. Go ahead and leave it turned on and you will see that it will in fact deactivate.
I currently have an old Clarion PNP Tuner, that I believe slipped through the cracks and never received a deactivation signal when I canceled one of my subs. Partly because, I didn't turn it on until 8 months after I deactivated it. When I was considering reactivation,I powered it up. To my surprise it was still active. I double checked the billing. No bills for that unit. It still works today:)
Have you left it on for a few hours straight?
The Stiletto updated all of the channels the day I put up the site. It has worked every time I turn it on for both Satellite or Internet radio.
I left the Stiletto on yesterday afternoon for an hour (Satellite) and also decided to turn it back on last night for four hours (2 Satellite/2Internet) to test your theory. The Stiletto still works. Once again, this is not the same issue with old deactivated units.
Sirius has been contacted and I fully intend to demonstrate proof of concept. So until then I think folks should stop speculating what it is and let me do my job.
Have you read the thread on Sirius Backstage Forum? The problem YOU are talking about is widespread and some units are working up to three years after deactivation. Once again, this vulnerability is completely different. I was able to activate the unit bypassing the Satellites first, tricking the receiver into believing it was activated, and permitting Channel and Software updates to download.Quote:
Originally Posted by SiriusBuzz
No I have not.
So, you are telling us that you have manually changed something that has activated your new receiver? Why not tell everyone? How would it hurt Sirius? They might sell a few more units to people wanting to get it free and once they do Sirius can release a patch a month or so later...turning all of those pirates into customers.
Deactivation signals are sent out periodically, and at some point a receiver that is not being paid for will be shut out of the system. Sirius nor XM send out all deactivation bursts constantly.
I have in the past had both XM and Sirius receivers that have gotten "free" service for a period of time, but ultimately, they do get deactivated.
I was able to talk with an executive at Sirius yesterday about the issue. I have posted an update on the site that I think ALL SUBSCRIBERS would find very interesting to read. I think the fact that the higher ups are contacting me means I have definitely found something. Don't you?
Either that or they are getting ready present you with a C&D because what you are spreading around the internet is unfounded and damaging to their company.
I am not saying that is what they are doing but it sure is a possibility.
That being said...I still think you should release this security vulnerability :)
I have to disagree with you about this being unfounded. I have presented the steps to do it. I have presented them with a video demonstrating the unit in action. A week later it still works. I'm not sure here but it appears this is a more widespread issue.
I'm not saying it is unfounded. I am merely posing another possibility (to which there are many) as to why they are showing concern :)
It has been a week now since I contacted them and posted the blog. This is the latest development regarding my personal SL100 which I think a lot of you will find interesting.
It appears the Internet Radio has been blocked leaving me with a message saying Connection Error. I tried a different Wi-Fi network and still the same. I contacted them right away with this good news because it shows me they are trying to fix the issue. At first it is also blocked my Satellite signal but after replicating the steps I used the first time, I was able to "reactivate" the Satellite service.
I hope whatever method they used does not cause permanent damage to the SL100. There is no message about subscriptions, just a connection block. If I were to switch my service to the radio around Christmas or sell it I hope that whoever legitimately activates it is able to use the Wi-Fi component, which was the major draw to buy this thing in the first place.
If that is the case then I think they should be liable for damaging the unit. The reason is because I am cooperating with them to address the problem. Especially since I am not listening to the device, which means I am not stealing content and I have fully cooperated with them on resolving this vulnerability issue.
Looks like this guy got that cease and desist. His website has been removed.