Backdoors in TiVo without modifications
Written by hevnsnt   
Tuesday, 21 December 2004
Here are a few Tivo "Backdoors" or "Easter-eggs" that have been found.  Some are pretty useful, and some are kinda funny.. Check em out.
{mos_sb_discuss:18}
Shortcuts  
  • TiVo Button 0 – Tivo Mascot Video
  • TiVo Button Twice – Now Playing
  • TiVo Button 1 – Season Pass Manager
  • TiVo Button 2 – To Do list
  • TiVo Button 3 – Search Using Wish lists
  • TiVo Button 4 – Search By Title
  • TiVo Button 5 – Browse by channel
  • TiVo Button 6 – Browse by time
  • TiVo Button 7 – Record Time/Channel
  • TiVo Button 8 – TiVo's Suggestions
  • TiVo Button 9 – TiVo Showcases

Silly Easter Egg
Turn on Closed Captioning
Go to TiVo – Browse by Name
Type 'SHAGWELL'
Hit Thumbs Up
Watch for silly names


30 Second Skips
Works best to activate in Playback mode
Codes like this one are called select – play –select codes
Doesn't need back door code
Hit select-play-select-3-0-select
You'll hear ding-ding-ding

Sorting Feature in 3.0
From the Now Playing Menu Push:
Slow
0 [zero]
Record
Thumbs Up
(S)0(R)(T)


 

Backdoors in TiVo with modifications

(from http://tivo.samba.org)

Warning: use of any of these codes may cause unknown amounts of harm to your TiVo's data (setup parameters, recorded or scheduled programs, preferences, guide data, etc.). They could conceivably cause your TiVo to act in some way that might upset TiVo Inc. and cause them to terminate your service. Who knows!? Try these codes entirely AT YOUR OWN RISK! They will void your
 warrenty, turn your hair white, make your friends spit at you, and cause your parents to claim they have no idea who you are anymore. But hey, if you're okay with it, so are we.

 Some of these codes WILL damage your unit if you do not read this entire document for the warnings. Read everything here before going and actually doing any of this crazy stuff, okay?

 Most of this information comes from the TiVo Hack FAQ and from various postings to the TiVo forums. Unless otherwise noted, this information only applies to version
 1.3 of the TiVo software, although some codes have been reported to work on the UK software, version 1.51.

 Enabling Backdoor Mode
 ----------------------
The Backdoor mode can be entered using the remote by doing a "Browse By Name"  for "0v1t" (TiVo spelled backwards with zero and one instead of "O" and "I") followed by the "Thumbs-Up" key. The only known way of exiting Backdoor mode is to reboot the TiVo (see "C-E-C Fast-Forward" below).

The backdoor code for 2.0 systems is done the same way, except the code is "2 0 TCD". There is one space between the "2" and the "0", and another space between the 0 and the TCD".

The backdoor code for 2.5 systems is done the same way, except the code is "B D 2 5". There is one space between each character.

Select-Play-Select Codes
 ------------------------
SPSXS is a code of the format "Select Play Select Something Select". These do
not appear to require backdoors to be enabled for them to work.

``S-P-S-9-S - Toggles the Clock display in the bottom right corner. When you arewatching LiveTV or a recording, this will show the time and where you are at in the recording. It's a toggle, so do it again to turn it off. However, when you turn it off, it doesn't disappear, you must go into a Tivo menu and return for it to go away.

``S-P-S-InstantReplay-S - Toggles a Status display in the bottom right corner. This displays what the Tivo is currently doing. Bit useless, really. Do it again to toggle it back off. Like the clock code, it doesn't disappear when you turn it off, you must go into a menu to make it disappear.

``S-P-S-Pause-S - Toggles the fast disappear of the Play bar. Appears to have no other major effect, but who knows?

``S-P-S-3-0-S (1.3, also 2.5, not 2.0 or 2.01) - Toggles 30 second skip mode. This turns the Skip to End button into a 30 second skip button. This was removed in 2.0x, but added back in 2.5.

Clear-Enter-Clear Codes
 -----------------------
C-E-C stands for "Clear Enter Clear". Note: the claim is that all "C-E-C something" combinations will make the same confirmation tones, but they may or may not do
anything. Here are the known and likely unknown ones.

``C-E-C Thumbs-Up - Will allow you to access the TiVo's log files on your TV screen.  Page up and page down allow you to move through the log information and the right arrow you to move through the log files. Use the left arrow key to get back out to the normal TiVo menus.

``C-E-C Thumbs-Down - Will shut down the myworld program on a TiVo. The myworld program is the brain of the TiVo. Shutting it down is not advisable since the only thing you can do with the TiVo at that point is use the BASH shell if you activated one. If you do have a BASH prompt you can rerun the myworld program to get the TiVo running fully again. If not you need to power down and up the TiVo to get it fully functional again.

``C-E-C-0 (2.0) - This turns off the display of "scheduled suggestions" in the ToDo List. Also makes the clock (see SPS9S) NOT have a black bar behind it.

``C-E-C-1 (2.0) - This turns off the display of "scheduled suggestions" in the ToDo List. Also makes the clock (see SPS9S) have a black bar behind it.

``C-E-C-2 (2.0) - This turns on the display of "scheduled suggestions" in the ToDo List. A "scheduled suggestion" is a suggestion the Tivo is planning on recording. While you can remove these from the ToDo List, it doesn't appear to always cancel the recording, and the suggestion may be added back, and may record anyway, without any user intervention. Hey, it's only a suggestion though.. This may take a while to take effect. Actually, it doesn't take effect until something changes in the ToDo List.

``C-E-C-3 (2.0) - Appears to do the exact same thing as CEC2. I'm pretty certain there's more to this than we are aware of right now.

**2.5 note**: C-E-C 0-3 (the above 4 codes) do not appear to work in 2.5, but they do still affect the "black background" of the clock. They just don't do anything for the suggestions in the ToDo List. To put suggestions in the ToDo list, see the "thumbs thumbs" code below.

``C-E-C 4 - This forces suggestions to be rebuilt (same as 'sendkey dumpState'?).

``C-E-C 5 - Toggles the overshoot correction during fast forwarding on and off.

``C-E-C Fast-Forward - This resets (reboots) the TiVo

``C-E-C Skip-to-end - Turns on "Boat-Anchor" mode. This convinces the TiVo that it should behave as if it has no guide data. Boat Anchor mode is automatic when the unit runs out of guide data, so this is probably only for testing purposes. A bit useless, really.

Enter-Enter codes
 -----------------
E-E stands for "Enter Enter". The following codes must be entered in the "Browse By Name"screen. These codes are generally used to set values on the Tivo. You enter the code, and the prompt will appear, along with the red recording light coming on. You then enter the value. You then enter the code again to set the value in, and the recording light will go off. It doesn't actually stop recording if you happen to be recording something, however. Entering invalid values will cause your Tivo to reboot, so be careful.

``E-E-1 - Gives you Speed1: prompt. Turns the record LED on (indicating the backdoor is open and can be changed?). Enter a number for how fast you want the first scan speed to run at, and then press E-E-1 again. The record LED will go out.

The last two digits of the number must be 00 for an integer multiple speed. The digits to the left of the 00 indicate how many times normal playing speed the scan is running. 300 (which is 3x) is the default Speed1 scan speed, but you can't see that, you can only enter a number. A value of "1" is super slow motion (.01x speed) Unit will revert back to default speed when rebooted.

Does not appear to work in 2.0, although the prompt is still there.

``E-E-2 - Gives you Speed2: prompt. Default is 2000. See Speed1 above. Does not appear to work in 2.0, although the prompt is still there.

``E-E-3 - Gives you Speed3: prompt. Default is 6000. See Speed1 above. Does not appear to work in 2.0, although the prompt is still there.

``E-E-4 - Gives you Rate1: prompt. Function unknown.

``E-E-5 - Gives you Rate2: prompt. Function unknown.

``E-E-6 - Gives you Rate3: prompt. Function unknown.

``E-E-7 - Gives you Inter: prompt. Function unknown. Same as TIVO_INTERSTITIAL_INTERVAL environment variable (?). Interstitials were removed a long time ago, so this is probably useless.

``E-E-8 - Gives you Open: prompt. Function unknown. Same as TIVO_LONGOPEN_INTERVAL environment variable. (?)

``E-E-9 - Gives you Int.disabled, or int.enabled prompt. Toggles "interstitials". Intersititials were little TiVo guy animations that occurred between each menu screen. Most of them were deleted as being too annoying, but the initial boot one remains. Setting the TIVO_DISABLE_INTERSTITIALS environment variable to 1 disables it. Toggling "Int." from the remote causes the animation to play every time you hit the TiVo button. (Reported, may not work for everyone).

``E-E-Tivo - If in Debug mode (see C-C-E-E 2 below), lets you set the TiVo's clock. Warning: setting this value may cause all of your Guide data to get "expired". If you want to play with this, keep in mind that TiVo may get mad at you for downloading several copies of your Guide data over the course of a couple of days. The best way to fix a messed up clock without reloading all the Guide data is to do the "Make a Test Call" option. The format of the time entry you use is the same as the format for the settime command. (?)

``E-E-Rewind - Lets you set the "Offset:". Defaults to 2000.

``E-E-FastForward - Lets you set the "Delay:". Defaults to 957.

``The Offset and Delay control the overshoot correction. When you set them, go to any recorded program, play it, pause it, and press FF to do a frame advance. This makes the new values you put in take effect. For 1.3 like correction, use Offset of 1000 and Delay of 750.

Clear Clear Enter Enter codes
 -----------------------------
C-C-E-E stands for "Clear Clear Enter Enter". The following codes must be entered in the "System Information" screen.

``C-C-E-E 2 - Turns on or off "Special Mode: DEBUG" (Note: you have to leave the "System Information" screen and re-enter it to see this flag turned on.) Starts sending debugging output to the /var/log/tvdebuglog file. This setting will STAY ON after a reboot. Not advised to leave this on for long periods of time.

``C-C-E-E 3 - Seems to initiate a call. (a special one?)

``C-C-E-E 7 [works even without Backdoors enabled] - Causes a message to be written to /var/log/tven saying: SetupDebugContext::onNumber[94]: USER PROBLEM LOGSTAMP .

I'm guessing that Customer Support tells customers who are having problems to do CCEE7 around the time that the problem occurs, and then when they upload the logs, they can help locate what was going on when the problem happened.

``C-C-E-E 8 - Takes you to the "Channels You Watch" page with NONE OF THE CHANNELS SELECTED! I guess this might be a quick way to clear your channel list. Fortunately you can just back out of it without losing your current channel list. I didn't try going forward from that screen... AVS Forum member "android" warns that this doesn't work ... and that it just hangs his machine..

``C-C-E-E 0 [works even without Backdoors enabled] - It allows you to enter your own "Dial-in configuration code"! It does not appear to let you directly change the TFA value.

 TFA stands for Toll Free Authorization.
 Possible values:
 0=[Access] denied ["you probably didn't ask, but you used a local, so QED"]
 1=No decision [made yet] (you got time)
 2=Oh you requested (we'll get back to ya)
 3=Yeah, I guess so
 4=Researched and you are out of luck
 5=You had your chance but did nothing

The Dial In Access code (the 000 part) can be changed via some special key sequences.... Anyway, when Tivo CS gets a really unusual problem that needs files downloaded to the unit, they can tell the customer to change the access code and it'll then download certain types of files.. These may be predefined debugging type things or may be files the guy just then put on the server.

Best case scenario: Your daily call fails. Worst case scenario: Your Tivo breaks by downloading and running some weird debug thing and is unrepairable without a whole drive backup.

Teach Tivo (not in 2.5?)
 -----------------------
To activate Teach Tivo, turn on Backdoors, then go to the suggestions list. Special codes here:

1,2, or 3 - Goes directly to different sections in Teach Tivo. 4 - Turns on the "Teach Tivo" menu item in the suggestions list. This won't be immediately visible until the list rebuilds or you change the list in some way (thumb down a program and move the cursor will do it).

Triple Thumb codes (new to 2.5?)
 --------------------------------
New codes, it seems like. There's only a few of these, and they are still being found. Consider them experimental.

``- Thumbs Down, Thumbs Down, Thumbs Up, Instant Replay - If done in the ToDo List, it will turn on "Scheduled Suggestions". If done in the Now Playing List, it will display the "hidden" recordings, like the Teleworld Paid Program. These recordings are those in reserved space.

``- Thumbs Down, Thumbs Up, Thumbs Down, Instant Replay - If done in Now Playing, it will take you to a new menu called "Clips on Disk". This menu has the same content as the hidden recordings, but broken up into clips like they are in the Showcases. If you don't have any clips for whatever reason (haven't gotten any yet, your cable operator pre-empts the clips program, etc), this will reboot the machine.

``- Thumbs Down, Thumbs Up, Thumbs Down, Record - Do it from the Tivo Central main menu to get the "MenuItem Back Door". It shows the current date in both the number of days since Jan. 1st, 1970 (an internal date format) and also in the normal style. Not sure of the purpose here. This also seems to do something (don't know what) if you do it from the Showcases screen.

 {mos_sb_discuss:18}

Last Updated ( Monday, 24 January 2005 )