05-11-2022, 09:16 AM | #45 |
Captain
![]() ![]() ![]() ![]() ![]() 1447
Rep 926
Posts |
So heres why OBD probably wont happen here...
The ECU is essentially a computer. And when you want to secure a computer, you encrypt the boot volume, and the boot loader is the only thing that contains the keys to decrypt the volume. This is common in commercial IT space/Cloud where you want to ensure that only authorized systems can boot your disk/read the data. Femto is probably using a physical console port or an IO port to interrupt the bootloader, or introduce an exploit such as a stack overflow, or other vulnerability to interrupt the boot loader and gain access to the keys to decrypt the boot volume of the ECU and read the ECU program and make changes such as creating an entry point for OBD or CAN-BUS access to enable continuous re-tuning, essentially replacing the boot volumes contents. BMW when they read the ECU will be able to checksum the boot volume and see it doesn't match OEM and detect a change to the system. This is a really simple thing to do with the right tools to read the system. In short, if you have physical access to any system, it can be hacked. Its virtually impossible to prevent without building a system, then literally removing the I/O ports. But as the saying goes. if you can build it, you can unbuild it....so again, physical access with enough skill enables anything to be compromised,
__________________
2023 F90 M5
Retired - 2021 G82, 2019 440xi, 2020 X7, 2019 X5, 2013 F10, 2010 F10 |
Appreciate
10
BMWM4CX281.50 Gfit2716.00 GixY2K517.00 Mcc420475.00 GDBimmer44.50 ZulaM580.00 somer966.00 nearwater4me1916.00 WeekendWarriorz670.00 BimmerFix1390.50 |
05-17-2022, 12:47 AM | #47 |
BimmerPost Supporting Vendor
![]() 24201
Rep 190,807
Posts ![]() |
Patiently waiting for an OBD tune, until then I'm enjoying the JB4
__________________
Check out our current sale by clicking on this link!
https://x-ph.com/sale/ Phone number 702-494-9435 ![]() |
Appreciate
1
GixY2K517.00 |
05-17-2022, 10:04 AM | #48 |
Major
![]() 1240
Rep 1,446
Posts |
|
Appreciate
0
|
05-17-2022, 11:53 AM | #49 |
Lieutenant
![]() ![]() ![]() ![]() 517
Rep 571
Posts
Drives: '19 GLA45AMG(his) / '21 X3M40i
Join Date: Sep 2021
Location: Colorado Springs, CO
|
Really?
What was wrong with the old system? You tune it via OBD/Ecutek/Accessport/etc., you break something related to the tune, you pay for it. Simple. Now they lock the DME, you put a piggyback system, and you can still run the risk of breaking it. And folks know that if it was related to the piggyback, repairs will be on their dime. BMW over-complicates their electronics for no apparent reason, IMO.
__________________
Currently: '19 GLA45AMG grey (his) & '21 X3M40i DGM (hers) w/ JB4@Map1
Previous cars: 2022 M4 xDrive in Mexico Blue with Silverstone/Black interior 2014 BE GTR FBO/e85 Last edited by GixY2K; 07-18-2022 at 07:17 AM.. |
Appreciate
0
|
05-17-2022, 11:37 PM | #50 | |
BimmerPost Supporting Vendor
![]() 24201
Rep 190,807
Posts ![]() |
Quote:
__________________
Check out our current sale by clicking on this link!
https://x-ph.com/sale/ Phone number 702-494-9435 ![]() |
|
Appreciate
1
GixY2K517.00 |
05-17-2022, 11:45 PM | #51 |
Brigadier General
![]() ![]() 424
Rep 4,709
Posts |
I think the issue is people want both their tuning and warranty.
|
Appreciate
4
|
05-17-2022, 11:50 PM | #52 | |
BimmerPost Supporting Vendor
![]() 24201
Rep 190,807
Posts ![]() |
Quote:
If your tune had nothing to do with damage or if the damage is not related to the part you installed, your warranty should cover the work. Sounds fair to me, and that's what the law says.
__________________
Check out our current sale by clicking on this link!
https://x-ph.com/sale/ Phone number 702-494-9435 ![]() |
|
Appreciate
1
kyleb350423.50 |
05-18-2022, 03:51 AM | #53 | ||
First Lieutenant
![]() ![]() 282
Rep 374
Posts |
Quote:
|
||
Appreciate
0
|
05-18-2022, 07:52 AM | #54 | ||
Lieutenant
![]() ![]() ![]() ![]() 517
Rep 571
Posts
Drives: '19 GLA45AMG(his) / '21 X3M40i
Join Date: Sep 2021
Location: Colorado Springs, CO
|
Quote:
Quote:
In reality, you can do the same with a piggyback system; break the car, unplug it, and then try to claim it was bone stock when it happened. I think that when this happens, and the item in question surpasses a cost threshold, BMW will conduct a forensic investigation on the DME (locked or unlocked) to determined if any OEM limits were compromised (i.e. boost, torque, fuel trim, timing, etc.) Good theories, but I don't think we're even close to the real reason why BMW is going to these extents to lock us out of their... wait, OUR DMEs!!! ![]()
__________________
Currently: '19 GLA45AMG grey (his) & '21 X3M40i DGM (hers) w/ JB4@Map1
Previous cars: 2022 M4 xDrive in Mexico Blue with Silverstone/Black interior 2014 BE GTR FBO/e85 |
||
Appreciate
0
|
05-18-2022, 12:22 PM | #56 |
Second Lieutenant
![]() 392
Rep 295
Posts |
It might be just general security issues with OTA updates and cars these days with some form of self driving? There was speculation of that MBZ car that was allegedly hacked and crashed on purpose years back.
__________________
![]() M3Cx, E92 M3 6MT Previous cars: '21 Supra, '17 GT-R, '15 GT3, '13 GT-R '09 GT-R, '06 Z06, '06 Evo MR, '05 M3, '03 Evo, '00 Miata. |
Appreciate
0
|
05-23-2022, 02:00 PM | #57 |
Captain
![]() ![]() ![]() ![]() ![]() 1447
Rep 926
Posts |
Regarding the locking out of the DME question.
We have the S58 with at least 4 different tunes, potentially 5. X3M, G87 M2 & M2C, M3/4, M3/4C, M4CSL (tune with some more forged bits). Tuning basically allows you to access different engine performance levels that BMW would rather you pay for, clearly...
__________________
2023 F90 M5
Retired - 2021 G82, 2019 440xi, 2020 X7, 2019 X5, 2013 F10, 2010 F10 |
07-15-2022, 12:26 AM | #58 | ||
Private
![]() ![]() 45
Rep 65
Posts |
Quote:
__________________
2022 G82 M4 Competition XDrive
2018 Audi TTRS Unitronic Stage 2 FBO E85 (Sold) 2013 BMW 335i F30 M Sport Stage 2 MHD FBO (Sold) |
||
Appreciate
0
|
03-22-2024, 07:05 PM | #59 |
Lieutenant Colonel
![]() 1250
Rep 1,973
Posts |
Bump
Any pyogrsss on an obd unlock, it’s been a while, you’d think someone would have cracked it by now Is anyone actually working on it? Physically shipping the dme and then having to avoid push software updates which may be necessary or offer increased usability in the infotainment, isn’t the best solution I remember when I bought my f80 new the dme was locked too |
Appreciate
0
|
03-23-2024, 12:40 PM | #60 | |
BimmerPost Supporting Vendor
![]() 24201
Rep 190,807
Posts ![]() |
Quote:
this requires a lot of time and money to be done. Then after the OBD unlock is released, other companies can easily reverse-engineer it and start offering the OBD solution themselves. I spoke to a few tuning companies, and they all said it's not worth the money and effort when its going to be stolen in a few months.
__________________
Check out our current sale by clicking on this link!
https://x-ph.com/sale/ Phone number 702-494-9435 ![]() |
|
03-23-2024, 05:05 PM | #61 |
Brigadier General
![]() ![]() 1357
Rep 3,349
Posts |
Defeating hardware encryption requires a very specific skill set. It’s not hard to find someone who understands board and chip architecture, but finding someone who understands that as well as fault injection and leveraging JTAGs in an unorthodox manner to extract firmware are few and far between.
Even then, you still don’t get signed firmware binary that you can overwrite to your own value to flash via OBD, so the only thing you can do is pull the firmware down and modify it to your liking (I.e.Femto) and apply that using a similar method. You would need someone to reverse engineer the signed firmware update process and figure out a way to apply that custom rom and bypass the trusted update process in order to achieve an OBD only unlock that elimates the requirement for physical hardware.
__________________
2019 Ruby GT350 - Gen 5 Whipple on corn making 855RWHP.
Sold: 2018 F80 Part Deux /DCT /YMB /Full SS /CF Trim /ZCP /ZEC w/Black 666M Sold: 2015 F80 /DCT /YMB /Full SS /CF Trim /ZEC /ZLP /HK /S&TVC- 18''///M |
Appreciate
0
|
03-25-2024, 10:04 AM | #62 |
Private First Class
![]() ![]() 107
Rep 121
Posts |
We're going through the same dilemna in the Audi world (8Y RS3). The RS3 has always been known as being a very tunable beast, but this new ECU is really peeing in our Cheerios as well. The only options we have right now are piggy-back (JB4, Race Chip, etc.) or sending your ECU away for a $4k+ bench tune. Gone are the days of a remote OBD tune from the comforts of your own garage. Looks like Syvecs will offer a stand-alone solution for $5k for the people going balls to the wall, but it's definitely not a practical option for the ones looking for Stage 1/1+ or even Stage 2 E30. So what's left? The only stop-gap I see are piggy-backs and I think JB4 is the best solution.
|
Appreciate
0
|
03-27-2024, 03:11 PM | #63 |
Boost Addict
51
Rep 129
Posts
Drives: M3CX, 335is ST 6MT
Join Date: Nov 2016
Location: Delray Beach, FL
|
Reputable shops near me were speculating it's due to epa compliance and wanting to avoid an audit. The EPA doesn't like engine modifications obviously, so selling tuning services would be more hassle than worth. Likely costlier in the long run.
|
Appreciate
0
|
03-27-2024, 06:47 PM | #64 | |
Brigadier General
![]() ![]() 1357
Rep 3,349
Posts |
Quote:
I don't think anyone in the business wants to lose their shop and livelihood over something crazy like that.
__________________
2019 Ruby GT350 - Gen 5 Whipple on corn making 855RWHP.
Sold: 2018 F80 Part Deux /DCT /YMB /Full SS /CF Trim /ZCP /ZEC w/Black 666M Sold: 2015 F80 /DCT /YMB /Full SS /CF Trim /ZEC /ZLP /HK /S&TVC- 18''///M |
|
Appreciate
0
|
Post Reply |
Bookmarks |
|
|