Activity Stream

Filter
Sort By Time Show
Recent Recent Popular Popular Anytime Anytime Last 24 Hours Last 24 Hours Last 7 Days Last 7 Days Last 30 Days Last 30 Days All All Photos Photos Forum Forums Articles Articles
Filter by: Last 24 Hours Clear All
  • Group.america's Avatar
    8 replies | 336 view(s)
  • klipseracer's Avatar
    Today, 02:19 PM
    From ncat10 previous post: TCU: GS40 More searching, its made by Siemens.
    53 replies | 1012 view(s)
  • klipseracer's Avatar
    Today, 02:14 PM
    BuraQ
    53 replies | 1012 view(s)
  • klipseracer's Avatar
    Today, 02:03 PM
    Transmission is: Getrag GS7D36SG
    53 replies | 1012 view(s)
  • klipseracer's Avatar
    Today, 01:57 PM
    Also, someone who is going to be very helpful with the details, ncat10
    53 replies | 1012 view(s)
  • VargasTurboTech's Avatar
    Today, 01:56 PM
    Remember when everyone used to argue that 2-6 cylinder logging wasn't needed, and seeing #1 was giving you the whole story? Funny how everyone forgets that now that 6 Cyl logging is available for the JB...:)
    1 replies | 30 view(s)
  • AdminTeam's Avatar
    Today, 01:46 PM
    Welcome to a real enthusiast forum zhpasta.
    0 replies | 2 view(s)
  • klipseracer's Avatar
    Today, 01:45 PM
    I can setup a Bitcoin address or setup a crowdfunding campaign somewhere with someone notable in the community who can be trusted with the money if we get to that, but we are a long ways from that still. I have no N54, hence why my bimmer boost mobile app has been delayed since I can't get my bench to work, since I think there is a problem with either my lab power supply or perhaps one of the other modules I purchased. I also have no TCU to access or play with because of this, not to mention a DCT powered vehicle at the moment. But I desparately need this information to continue, and if anyone has any inside dealer contacts to try and glean some information from on how the flashing process works in more detail this will be very helpful. We need to get a bootlader to look at. At least a rom file from the TCU of some kind. And I need to know the processor inside this TCU as well. Those two things are a starting point.
    53 replies | 1012 view(s)
  • Group.america's Avatar
    15 replies | 258 view(s)
  • alpinedevil335's Avatar
    53 replies | 1012 view(s)
  • 135pats's Avatar
    Today, 01:30 PM
    Klipse this is so far over my head on the programming side but count me in 4 some funding if we ever get to that point. We need a solution and an MT swap is lame.
    53 replies | 1012 view(s)
  • Tzu's Avatar
    Today, 01:28 PM
    Tzu replied to a thread CAN Cable for Coding Injectors? in N54
    Not horror stories, some just dont work. I bought the one-stop-electronics cable maybe 3 years ago, never had a problem.
    4 replies | 71 view(s)
  • rooringhusky's Avatar
    Today, 01:24 PM
    So much for this groupbuy. No one ever buys anything on this site lol :rolleyes:
    19 replies | 671 view(s)
  • I6+TT=FTW's Avatar
    Today, 01:18 PM
    I've been using Motul Xcess 5w40 for the last 1.5 years, with change intervals around 6-7, and have been very happy. Nice to see a blackstone confirming what I thought. No oil cooler or oil catch can on my end though. Recommended by some local porsche guys (my main techs), they have been using it in their race cars for years.
    5 replies | 116 view(s)
  • klipseracer's Avatar
    Today, 01:18 PM
    RTA Please read my post above, as I think you could be the most helpful at this point. I have the reversers. They are experts at x86/ARM assembly and they can learn any other assembly if necessary. I can provide them with all the details for them to look at and see if finding an exploit on the boot loader or tuning values is possible. If so, then perhaps we can crowdsource some of the expense, which I do not see costing a ton to be honest. These guys are quite cheap considering their capabilities. They just help me beat 2048bit network comms encryption by reversing the algorithm and creating my own server issuing my own private key for an online mmo.
    53 replies | 1012 view(s)
  • klipseracer's Avatar
    Today, 01:14 PM
    Hack is a very broadly used term. But to discover the private key? Its essentially impossible to do and a waste of time without massive massive amounts of luck. I'm going to take a grain of sand and throw it onto a beach, kick some other sand over it, let the tides come in and out a few times and then tell you to go find it without telling you which beach or even if you're on the right side of the planet. This is not exact math but it gives you the sense of futility involved. Encryption isn't tough because it points a lot of guns at you or anything 'secure' in that sense. It is not secure at all really, especially if you find out the password. It only serves the purpose of security because it inundates you with choices. I believe it has 1024 bit RSA signature, but I'm not sure. I don't think 1024 RSA has ever been hacked by the way, and there are research teams that go out and try to do just that, to be the first ones. Yes, I quit messing with the 360 when this came about but I remember watching this story develop. Had to do with resetting the cpu over and over keeping the cpu in a low clock speed and then using a timing attack to determine if the key they were using was any have any effect on the boot time or something. Took a few days of resetting the 360 if I remember correctly. If in fact 1024 bit encryption is used to sign these TCU roms, then we are fucked in terms of brute forcing. I mean, if you all have extra cycles, then perhaps someone can get a rom and figure out how the signature is calculated(RSA?) and then try to brute force this using distributed processing. I mean, I'd run it just for the off chance that I stumbled upon a thousand playmates who wanted to suck my dick for free. On the other hand, the more likely and what I can see as the only option is to get a true hacker on it. We need to figure out what kind of unit this TCU is, I don't even know right now. I need to know what processor it uses. The DME is an Infineon TriCore. Then once we know the processor, we need to find a plugin for Hex Rays IDA Pro and give it to the one of a half dozen reverse engineers I know. I've even ran t his idea by a couple of them and they love the idea of it. I hire reverse engineers for unscrupulous projects I have here and there, typically to get people to reverse engineer encryption algorithms for network communication in games, then I write private servers or whatever I feel like after that. Because of this I know quite a few very skilled reverse engineers. Also chinese 'companies' with teams of people looking for a big job if someone can finance it. If someone can provide me more details on this TCU, which all I know is sumberged in the transmission fluid inside the mechatronic or whatever, get me a ROM file, and the hard ware specs on the TCU itself, I can start somewhere. There may be also a different file for flashing the bootloader, likely this would be a dealer only file. I know these files exist for the msd80/1 and they are difficult to find as they include the boot loader in addition to the other things. What I need to help plan this and find out whats possible: 1) Model number of the DCT(I'm lazy) 2) Module name of the TCU, English, German, etc for researching purposes 3) Hardware specifications on the TCU, Primarily type of processor, programmable memory ranges 4) Most importantly, I need a ROM file. More specifically, if it exists and I'm fairly certain it does, a DEALER SPECIFIC rom file which includes the boot loader in it. I want as many different versions of this as possible, especially older ones and the newest ones.
    53 replies | 1012 view(s)
  • 1StopSpeed.com's Avatar
    Today, 01:10 PM
    I know some of you were worried about camera angle. Well I have now figured out that you can use the go pro arm that comes with the camera and our mount and have adjustable angle from left to right. See pics below.
    22 replies | 836 view(s)
  • Dueclaws's Avatar
    15 replies | 258 view(s)
  • Unklejoe's Avatar
    Today, 12:47 PM
    It makes them pricks because other sports cars are easily tunable. Corvette...Mustang...EVO....STi... all of those cars are more likely to be owned by a dick head than the average BMW yet the manufacturers don't seem to have many problems dealing with it. All of those cars are easily flashed. What BMW should do is allow them to be flashed but implement a method of detecting it. But that's all a dream.
    52 replies | 1171 view(s)
  • DavidV's Avatar
    Today, 12:45 PM
    WOW. That looks awesome!:scared-eek::scared-eek:
    3061 replies | 236704 view(s)
  • triggz's Avatar
    Today, 12:41 PM
    triggz started a thread Wedge Log vs V8Bait Log in N54
    Since nobody wants to post a log of Wedge's flash showing all 6 cylinders I decided to show the results. Car is running FBO+100%Meth+94 Oct. I asked Wedge for a Pump/Meth map and he sent me a map stating 12.5* of timing. I figured it's aggressive but safe based on my mods. I logged it and it looked great, BEFORE 6cylinder logging was available. Tested it out again and the results were not impressive. First off, it clearly shows the map is targeting close to 14* of timing which is way too much for 94/Meth. It's safe to say you need E85/Meth/FBO to run this type of tune. http://www.datazap.me/u/triggz/wedge...25-26-27-28-29 Now here is the tune I run on a day to day basis which is much smoother while cruising and the car responds well post shift. http://www.datazap.me/u/triggz/v8bai...25-26-27-28-29 I'm sure if I dropped the additive to 50 from 60, the logs would be even cleaner or adjust auto shift boost reduction. Going for a dyno session this saturday and I will test Wedge's map with a 50 additive, 55 additive and 60 additive along with V8Bait's map 50/55/60 and see if the added timing really produces the results that everyone's butt dyno claims to be feeling. Just be careful what you guys are running out there. You can't just load a tune without logging. I'm sure Wedge's map could be adjusted so that it looks cleaner but he's so busy that I rather not waste my time. FYI, I NEVER had an ugly log with BMS maps. I personally think they are the safest and most reliable Bimmerboost maps you can use for your car.
    1 replies | 30 view(s)
  • MSIZZLE's Avatar
    Today, 12:34 PM
    its not an opinion its a fact! A simple way to see it is in your fuel economy, single digits to get the car rolling and move all that weight, once cruising it gets normal economy because the cars own weight is not as much as burden on the engine at that point. Same as when you push a car by hand, hard to start but once rolling the weight is not as much of a factor.
    8 replies | 336 view(s)
  • 135pats's Avatar
    Today, 12:23 PM
    Welcome. So in your mind something that rides the CAN feed and interecepts/relays certain values (real or not) back to the TCU...that's the more viable solution? It does seem clear that at this point, there isn't any substantive path forwards towards actual read/write ability on the TCU. And we still don't have a particularly strong understanding of how it interacts with the DME.
    53 replies | 1012 view(s)
  • ajsalida's Avatar
    Today, 12:07 PM
    Nah you just announce the first annual Bimmerboost Worldwide Automotive Hacking Tournament in hacker forums. First to crack N54 6HP21 TCU wins. Grand Prize includes tour of BB skyscraper & penthouse plus keys to Sticky's M3 for a night. Case of pop tarts and an inflatable girlfriend.
    53 replies | 1012 view(s)
  • klipseracer's Avatar
    Today, 11:51 AM
    You always gotta respect the sleeper.
    3 replies | 251 view(s)
  • Remonster's Avatar
    Today, 11:50 AM
    BMW builds a product and they guarantee that product against defects for 4 years / 50,000 miles. They can't guarantee that it will continue to function properly when a random assortment of aftermarket parts have been added onto it or when the calibration of the engine computer has been altered by any random guy. How does that make them pricks? They can continue to offer warranty coverage on their own Performance Parts because those parts were developed alongside the original car and have been tested just as thoroughly as the stock car and are known to work properly. If you build & boost a motor, you're absolutely insane if you expect the original warranty coverage to still apply.
    52 replies | 1171 view(s)
  • uniter's Avatar
    Today, 11:16 AM
    uniter replied to a thread Twin Disk Clutch in N54
    I have this. CM fucked up my order 3 times resulting in 4 months of downtime and lots of out of pocket for what should have been a simple one day job. That said, they covered parts and of course not labor. Ive reviewed it before on this forum. It works well, I have a dual bronze disk version. Holds plenty of torque, no slip. I hardly stall it but valets and mechanics regularly do. Chatter is there: You cant hear it with the clutch in, really... You cant hear it while playing the radio... People know you arent a bitch... If you are looking to get this kit - its nice, just req engineering specs and double check everything with a micrometer. Replace your guibo, get a defiv kit, solid disk hubs, ssk, solid trans mounts, diff & axles. It'll slay all day. As a final note, the throw out bearing is adjustable. If you set it according to CMs instructions itll be a coin toss of wrong. Try both settings out experimentally. You will thank me.
    9 replies | 285 view(s)
More Activity