2011-06-04 17:06 - GeneralWIN! I've now successfully decoded the iPad <-> TiVo communication protocol.
First, the app uses mDNS to locate the TiVo. Then it connects to the TiVo on TCP port 1393 with SSL, and it exchanges null-terminated JSON back and forth. Once I wade through the details of the schema, I should be able to hack something together. I'll probably prototype something in python, then look at putting an Android app together.