HackTV is a software package which turns the HackRF One into an analog TV transmitter.

There are two versions of HackTV:

• fsphil's main repo – the “official” HackTV
• Captain Jack's fork – which adds support for several video encryption and CA systems, e.g. Videocrypt and Eurocrypt.

I've put together some pages about the work I've done with HackTV:

• The Videocrypt PPV Token System – (TODO) – A description of the never-deployed Videocrypt token PPV system, based on Phonecard-style smartcards
• BSB DMAC receivers including the Trac Satellite modification to the Ferguson SRB1.

./hacktv -f 855250000 -g 36 -s 14000000 -m i --filter VIDEOFILE

• -f: Modulation centre frequency. 855.25 MHz is UHF channel 69.
  • Alternatively 471.25MHz is Channel 21.
• -g: Transmit LNA gain.
• -s: Sample rate. A multiple of 14 MHz is required for VideoCrypt.
• -m: Mode. VSB-modulated PAL System-I
• --filter: Enable VSB modulation filter. Improves video quality, but VSB-AM usually looks good without it.

For other channel/frequency mappings, refer to the frequency list on Wikipedia.

At least for the BBC Selector decoder box I borrowed, the channel assignments are:

• Programme 1 and 3: C46 = 671.25 MHz
• Programme 2 and 4: C40 = 623.25 MHz
• Selector video out: C35 = 583.25 MHz

./hacktv -f 1093e6 -D 10000000 -g 36 -s 14000000 -m pal-fm --filter VIDEOFILE

• -f: Modulation centre frequency. With “FSS LNB” (10 GHz LO), this would be a tuning frequency of 11378 (MHz).
• -D: Deviation.
  • This is total deviation (twice the ± deviation).
    • ASTRA used 16 MHz/V deviation in a 26 MHz bandwidth channel, with 0.7V between white and black levels. This implies a 0.3V sync level, giving a 1V peak-to-peak video signal with 16 MHz total deviation (± 8 MHz). This is given in "Baseband parameters for FM TV transmission" (archive link)
    • The practical minimum for an ASTRA receiver and VideoCrypt decoder to work is around 9 MHz total deviation (± 4.5 MHz).
  • The HackRF is limited to 20 MHz bandwidth.
    • To go higher, a LimeSDR or similar high-bandwidth SDR transmitter is required.
  • Using Carson's rule: Peak freq deviation = (RF bandwidth - 2 (maximum video freq) ) / 2 MHz
    • ASTRA: $\left( 26 - \left(2 \times 5 \right) \right) \div 2 = \left( 26 - 10 \right) \div 2 = 8 \, \mathrm{MHz}$. This is HackTV's default.
    • HackRF maximum: $\left( 20 - \left(2 \times 5 \right) \right) \div 2 = \left( 20 - 10 \right) \div 2 = 5 \, \mathrm{MHz}$. This is a HackTV deviation parameter of -D 10000000.
• -g: Transmit LNA gain. 47dB in this example.
• -s: Sample rate. A multiple of 14 MHz is required for VideoCrypt.
• -m: Mode. FM-modulated PAL.
• –filter: Enable PAL pre-emphasis filter. Requires de-emphasis to be enabled in the receiver or decoder.
  • On the SVA1, this is done by setting the “De-emphasis” switch to “In”.

./hacktv -f 1092.56e6 -g 36 -s 20250000 -m dmac-fm --filter VIDEOFILE

1092.56 MHz is Galaxy, Channel ID 0x70B2. Other options on a BSB receiver are:

The IF frequency can be obtained from the transponder number with the following formula:

$F_{IF} = ({Transponder} \times 19.18) + 939.12 \, \mathrm{(MHz)}$

The satellite frequency can be obtained from the IF frequency:

$F_{SAT} = F_{IF} + 10769.18 \, \mathrm{(MHz)}$

To set the Channel ID, use the --chid command line parameter, e.g.: --chid 0xB4 for Power Station.

./hacktv -f 1378.56e6 -g 47 -s 20250000 -m d2mac-fm --eurocrypt tv1000 --filter VIDEOFILE

Include -o soapysdr:lime in the HackTV command line.

I can't recommend the LimeSDR, the hardware is horribly unreliable. Mine failed irreparably after only a few hours of use. The warranty being only 30 days should tell you everything you need to know!

The ASTRA “Decoder” port is pinned as follows:

Looking into the rear panel of the decoder	Looking into the plug
21-pin SCART female (socket)	21-pin SCART male (plug)

The decoder connects to the satellite receiver using an ordinary SCART cable, which connects the “in” pins on one side to the “out” pins of the other (and vice versa).

To feed video into an SVA1, make the following connections:

• Supply video to the decoder on pin 20 (with ground on pin 18)
• Take video out of the decoder from pin 19 (with ground on pin 17)