Welcome to Tesla Motors Club
Discuss Tesla's Model S, Model 3, Model X, Model Y, Cybertruck, Roadster and More.
Register

Let the hacking begin... (Model S parts on the bench)

This site may earn commission on affiliate links.
#1,868
Krash said:
I have some photos here and here if that helps anyone identify them for you.
Click to expand...
If you figure this out, I'd like to do the same. I have an MCU2 I want to dump the chip off of.
Krash said:
I have some photos here and here if that helps anyone identify them for you.
Click to expand...
teslamotorsclub.com

I retrofit MCU2, IC2, Tuner2, and FSD Computer into my HW2.0 Car

Here's my story of my DIY HW2.0 retrofit for MCU2, IC2, TUNER2, and FSD Computer: I want to begin this post by offering the most honest caveat I can: I do not encourage you to repeat anything I have done. In fact, now that Tesla is offering the MCU2 and FSD Computer retrofits officially, I...
teslamotorsclub.com teslamotorsclub.com

has an image where @KyleDay apparently managed to dump the MCU2 but I was unable to find information on the actual pin locations. Maybe you/we can extract that information from this picture :)


1691085156782.png
 
#1,869
His last post says vulnerability was closed... unless other ones exist...
teslamotorsclub.com

I retrofit MCU2, IC2, Tuner2, and FSD Computer into my HW2.0 Car

Here's my story of my DIY HW2.0 retrofit for MCU2, IC2, TUNER2, and FSD Computer: I want to begin this post by offering the most honest caveat I can: I do not encourage you to repeat anything I have done. In fact, now that Tesla is offering the MCU2 and FSD Computer retrofits officially, I...
teslamotorsclub.com teslamotorsclub.com
 
#1,870
brainhouston said:
His last post says vulnerability was closed... unless other ones exist...
teslamotorsclub.com

I retrofit MCU2, IC2, Tuner2, and FSD Computer into my HW2.0 Car

Here's my story of my DIY HW2.0 retrofit for MCU2, IC2, TUNER2, and FSD Computer: I want to begin this post by offering the most honest caveat I can: I do not encourage you to repeat anything I have done. In fact, now that Tesla is offering the MCU2 and FSD Computer retrofits officially, I...
teslamotorsclub.com teslamotorsclub.com
Click to expand...

I can read that in several ways but I believe he's saying the ability to modify the config closed... if those pin assignments are directly to the eMMC, I don't know how that could possibly get closed in order dump the eMMC. I'd like to get a dump even if the vulnerability of the current firmware on the eMMC has been patched from being able to make changes.

Or even better, if he has a copy of the eMMC from way back then!

I'm considering just removing the eMMC like I do with the MCU1 Tegras but it's more difficult with it being on the main board.

I'm essentially looking for this but for MCU2

github.com

Poking at the Tesla Model 3 MCU and a closer look at its eMMC · Issue #4 · lewurm/blog

Previous related posts: #1 and #3. As I mentioned in the last post I got some LEDs blinking. Before I present the findings, I should first outline some parts on the MCU board: Ethernet switch: Marv...
github.com github.com
 
Last edited:
  • Helpful
Reactions: brainhouston
#1,873
cloneguru said:
If you figure this out, I'd like to do the same. I have an MCU2 I want to dump the chip off of.

teslamotorsclub.com

I retrofit MCU2, IC2, Tuner2, and FSD Computer into my HW2.0 Car

Here's my story of my DIY HW2.0 retrofit for MCU2, IC2, TUNER2, and FSD Computer: I want to begin this post by offering the most honest caveat I can: I do not encourage you to repeat anything I have done. In fact, now that Tesla is offering the MCU2 and FSD Computer retrofits officially, I...
teslamotorsclub.com teslamotorsclub.com

has an image where @KyleDay apparently managed to dump the MCU2 but I was unable to find information on the actual pin locations. Maybe you/we can extract that information from this picture :)


View attachment 961974
Click to expand...
Thank you, that's what I was looking for. Managed to get the small partitions, now reading the whole flash, at less than 2mb/s it might take a whole night :)
 
#1,875
#1,878
peeledbanana said:
Nvm found it! GitHub - PSPReverse/PSPTool: Display, extract, and manipulate PSP firmware inside UEFI images
Click to expand...
This is the one important one. PSPTool just helps you extract data and build payloads.
github.com

GitHub - PSPReverse/amd-sp-glitch: Supplemental material to our paper: "One Glitch to Rule Them All: Fault Injection Attacks Against AMD's Secure Encrypted Virtualization"

Supplemental material to our paper: "One Glitch to Rule Them All: Fault Injection Attacks Against AMD's Secure Encrypted Virtualization" - GitHub - PSPReverse/amd-sp-glitch: Supplemen...
github.com github.com
 
  • Like
Reactions: peeledbanana
You must log in or register to reply here.

Similar threads

F
Redeploy firmware to version mismatched IC
Replies
2
Views
4K
Model S
SigRed12
SigRed12
B
  • Solved
Basket of issues - only while in home garage - 2017 Model S MCU 1
Replies
10
Views
641
Model S
banana_head
B
100d
Bluetooth keeps dropping
Replies
7
Views
304
Model S
100d
100d
C
  • Question
Android Auto Display Audio - AUX
Replies
10
Views
2K
Model S
CMPT PAD
C
S
Autopilot and Supercharging on a 2013 Model S 60
Replies
28
Views
712
Model S
scgaskill
S
Top
Back
Blog
New
Forum list
Marketplace
Menu