// HACKER NEWS — CYBERSECURITY
I Turned a DirecTV HR54-700 into a Standalone Jellyfin Box
My friend Hector gave me this thing for free on Saturday. Thanks, Hector.
It was a DIRECTV HR54-700 Genie DVR. I do not have any use for DIRECTV service, but the hardware is decent and it runs Linux, so obviously I was going to screw with it.
By Sunday night I had Jellyfin video and audio playing through the receiver's own Broadcom decoder and HDMI output.
After that the job was mostly making the proof usable: persistent root, a TV UI, remote navigation, search, auth, transport controls, Wi-Fi, reboot persistence, and finally removing the development PC from the runtime path.
The finished box boots on its own, joins Wi-Fi, talks directly to Jellyfin, and plays media from the DIRECTV remote. No dish. No helper PC.
The root filesystem is read-only SquashFS. The hard drive has normal Linux storage, a huge recording partition, and a firmware staging partition.
The useful part is that DIRECTV already shipped all the hard media stuff:
I had no reason to replace Linux or write a video driver. I wanted to reuse all of that.
The receiver has a boot-time plugin mechanism that eventually runs a deployment path as root.
The useful bug was simple: one part of the loader verified a genuine signed image, while a later part resolved what it mounted by filename. Those were not bound tightly enough to the same file.