==============
                                   Rom 3 Reopener
                                   ==============

StuntTeam - June 8, 2001


Around February 24th 2001 Rom 3 cards received a number of updates that 
where closing the holes on these cards. 
Today we have for you the Rom 3 re-opener!
By sending a series of commands you gain access to the closed DN cards. 

There is however a price you have to pay for re-opening your Rom 3 card:
The re-open method places a 01 at address E010. 
After re-opening you should clean the card.
To afterwards safely use your card in the stream you need to put protection 
on it. The no-otp blocker versions are perfect for this purpose. 

By examining various Rom3 cards we found out that the marking at E011 which 
is a protection of the Hole Closing code also seems to be triggered by bad 
data communications in mostly the newer IRD types.
The re-open method is not responsible for any marks at address E011.

The re-open method will open any DN ROM3 CAM that has taken the update which 
closed overflow and backdoor r/w methods. 

Note that this re-open method can be closed down and it is expected that this 
will happen very soon. So if you want to open your card, you better not wait 
a few weeks. 

To re-open the card you do not need any special unlooper or any other special 
hardware modifications. You can just use a card reader and one of the 
programs that are released today with the re-open option.

The re-open packets will not be released in this document itself to make 
sure you use them in the right way.

    Source: geocities.com/tooliobollocks/dish

               ( geocities.com/tooliobollocks)