Open ECU? - Page 22 - Toyota GR86, 86, FR-S and Subaru BRZ Forum & Owners Community

jamesm · 05-28-2013, 11:29 PM

Better yet, just have everyone donate CPU time. It works for curing cancer, why not cracking ecus

. Or use ec2 and just see how much it ends up costing. I'd donate some time to that, provided the end result was under gpl.

Sensisnow · 05-28-2013, 11:40 PM

Quote:

Originally Posted by jamesm

Better yet, just have everyone donate CPU time. It works for curing cancer, why not cracking ecus

. Or use ec2 and just see how much it ends up costing. I'd donate some time to that, provided the end result was under gpl.

I already have one rig dedicated to mining bitcoins, which I could switch over to crack this code, plus another 3 computers that are currently laying dormant. Someone would just need to write the software to allow our cpu/gpu to get to work on this.

jamesm · 05-28-2013, 11:56 PM

As I understand it, the issue with getting romraider and such running is the handshaking process when pulling/flashing the rom. If we can pull a rom with ecuflash (older version preferably so as to avoid the need for a tactrix cable) we would then still need to create table definitions.

It's also worth noting that though stock tables are not encrypted, ecutek flashes are. So, anyone with an ecutek flash will need to have ecutek remove the 'lock' before you can pull or burn.

This is just what I've gathered from my own research and experimenting with j2534. I'm by no means the authority on this.

xwd · 05-29-2013, 11:13 PM

So from some digging on the romraider forums it seems there is some renewed interest in this. Shankenstein posted some links in the Techstream thread. Seems another vendor Alientech has figured out how to read and modify the roms but with limited support right now.

http://www.alientech-to.it/en/news/s...r-ecm-titanium
@ItsRealFast , according to one of the posts on the forums someone got a rom by grabbing a temporary file unpacked during a reflash using Techstream. However it didn't include the bootloader or info that would give insight into the handshaking and comm protocol. Usually the algorithms used aren't all that hardcore, that's why Ecutek, epifan, and now alientech have reverse engineered it.

Flasher · 07-24-2013, 07:36 AM

Any news on that topic?

xjohnx · 08-15-2013, 03:03 PM

Looks like more progress is being made. You can view the OEM rom dump with scoobyrom, still need a definitions file though otherwise it's just pretty to look at.

LOOK MOM, I'M TUNING!

Sing4LTS · 08-15-2013, 06:25 PM

Sweet!

Deadspool · 10-09-2013, 07:08 PM

I'm standing by for ECUFlash testing, I already have an OP 2.0 for my talon.

Very familiar with that software.

Sportsguy83 · 10-09-2013, 07:24 PM

Quote:

Originally Posted by ItsRealFast

Also Lets Go Heat!!

Yes sir!! 3-peat anyone??

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Great dealership in NE Ohio.. (still has multiple pre-order slots open)	eikond	BRZ First-Gen (2012+) -- General Topics	15	03-02-2012 01:03 PM
Open Air FR-S Concept	Rampant	FR-S & 86 Photos, Videos, Wallpapers, Gallery Forum	22	02-01-2012 11:01 PM
Open Deck Block	nrclptcnsmniak	Engine, Exhaust, Transmission	36	01-27-2012 01:00 PM
Keep your eyes/cameras open in SoCal?	Buggy51	Scion FR-S / Toyota 86 GT86 General Forum	14	10-10-2011 10:21 PM

05-28-2013, 11:29 PM	#295
jamesm Banned Join Date: Mar 2013 Drives: 2013 FR-S Location: Orlando, FL Posts: 2,929 Thanks: 1,166 Thanked 2,293 Times in 1,180 Posts Mentioned: 313 Post(s) Tagged: 4 Thread(s)	Better yet, just have everyone donate CPU time. It works for curing cancer, why not cracking ecus . Or use ec2 and just see how much it ends up costing. I'd donate some time to that, provided the end result was under gpl.

05-28-2013, 11:56 PM	#297
jamesm Banned Join Date: Mar 2013 Drives: 2013 FR-S Location: Orlando, FL Posts: 2,929 Thanks: 1,166 Thanked 2,293 Times in 1,180 Posts Mentioned: 313 Post(s) Tagged: 4 Thread(s)	As I understand it, the issue with getting romraider and such running is the handshaking process when pulling/flashing the rom. If we can pull a rom with ecuflash (older version preferably so as to avoid the need for a tactrix cable) we would then still need to create table definitions. It's also worth noting that though stock tables are not encrypted, ecutek flashes are. So, anyone with an ecutek flash will need to have ecutek remove the 'lock' before you can pull or burn. This is just what I've gathered from my own research and experimenting with j2534. I'm by no means the authority on this.

05-29-2013, 11:13 PM	#298
xwd Senior Member Join Date: Feb 2012 Drives: 2013 DGM Subaru BRZ (Subie #9) Location: ATL, US Posts: 2,667 Thanks: 123 Thanked 860 Times in 552 Posts Mentioned: 32 Post(s) Tagged: 0 Thread(s)	So from some digging on the romraider forums it seems there is some renewed interest in this. Shankenstein posted some links in the Techstream thread. Seems another vendor Alientech has figured out how to read and modify the roms but with limited support right now. http://www.alientech-to.it/en/news/s...r-ecm-titanium @ItsRealFast , according to one of the posts on the forums someone got a rom by grabbing a temporary file unpacked during a reflash using Techstream. However it didn't include the bootloader or info that would give insight into the handshaking and comm protocol. Usually the algorithms used aren't all that hardcore, that's why Ecutek, epifan, and now alientech have reverse engineered it.

07-24-2013, 07:36 AM	#299
Flasher Smartass Join Date: Jan 2013 Drives: Toyota GT86 & Impreza STi Location: Germany Posts: 104 Thanks: 60 Thanked 17 Times in 10 Posts Mentioned: 1 Post(s) Tagged: 0 Thread(s)	Any news on that topic?

08-15-2013, 03:03 PM	#300
xjohnx Grip>Slip Join Date: Jun 2012 Drives: 13 SWP BRZ Ltd - Innovate Powered! Location: RVA Posts: 3,563 Thanks: 656 Thanked 1,716 Times in 1,031 Posts Mentioned: 45 Post(s) Tagged: 3 Thread(s)	Looks like more progress is being made. You can view the OEM rom dump with scoobyrom, still need a definitions file though otherwise it's just pretty to look at. LOOK MOM, I'M TUNING!

08-15-2013, 06:25 PM	#301
Sing4LTS Member Join Date: May 2013 Drives: 13' FR-S Location: La Porte, TX Posts: 32 Thanks: 4 Thanked 1 Time in 1 Post Mentioned: 0 Post(s) Tagged: 0 Thread(s)	Sweet!

10-09-2013, 07:08 PM	#302
Deadspool Much title. Wow. Join Date: Mar 2013 Drives: 2013 BRZ Sport-Tech Location: Edmonton, AB Posts: 716 Thanks: 118 Thanked 292 Times in 163 Posts Mentioned: 8 Post(s) Tagged: 0 Thread(s)	I'm standing by for ECUFlash testing, I already have an OP 2.0 for my talon. Very familiar with that software.

User Name		Remember Me?
Password