success to hack Technisat MIB2 infotainment system

Search This thread

Szo_gun

Member
Jun 16, 2021
5
0
I solved the problem with reading emmc.
@torque-limiter - did you do it?

But I have another problem:
Windows shows 3 partitions as separate drives.
The total capacity is 15GB.
The emmc.imgc image is only 560 MB.
It should be?

The problem arises when I want to read via VM QNX:
/ fs / hd1-qnx6.
The folder is empty (contains only cd0).

Someone can help? Maybe an error when converting to VMDK?
Will someone send a script for conversion?
 

Attachments

  • dyski.PNG
    dyski.PNG
    35.7 KB · Views: 391
  • MIB 3 dyski.PNG
    MIB 3 dyski.PNG
    16.5 KB · Views: 391
  • qnx pusty.PNG
    qnx pusty.PNG
    42.5 KB · Views: 398

bimbogigi77

New member
Apr 8, 2008
2
0
Hi,

after wrong update my MIB2STD +NAV is in loop rebooting. So, I connect with putty, communications is OK, but I cant do anything, putty only showing in loop what is in log file. Cant enter commands, nothing.

Where is a problem?

Thanks.

EDIT: Solved, must by shorted 2 contacts on board to enter emergency mode on tachnisat too.
Sorry,
i have the same problem. Can you help me please?
How did you manage to solve?
Thanks.
 

nLz_phone

Senior Member
Nov 18, 2015
129
54
Chemnitz
Honor 8
Honor 10
Hi folks,
for the MIB STD2 PQ/ZR there is a toolbox.

Anyone tried it out?
It is possible to dump SWaP and replace it by custom, anybody was able to geht new features like Mirror-Link with this?
If nobody tried yet i will have to :)
 

TimmyUK

Senior Member
Nov 30, 2010
110
38
I'm still familiarising myself with the toolbox. Installation was straight forward and I have patched mirror link. However my App Connect SWAP code is supported but not installed so I can only presume this only unlocks apps that would normally be blocked when driving.
 

tehfalcon

New member
Mar 14, 2018
1
0
I solved the problem with reading emmc.
@torque-limiter - did you do it?

But I have another problem:
Windows shows 3 partitions as separate drives.
The total capacity is 15GB.
The emmc.imgc image is only 560 MB.
It should be?

The problem arises when I want to read via VM QNX:
/ fs / hd1-qnx6.
The folder is empty (contains only cd0).

Someone can help? Maybe an error when converting to VMDK?
Will someone send a script for conversion?
How did you solve the problem? I have the same issue and its p*ssing me off
 

willfook

New member
Aug 15, 2021
4
1
Hola,

después de una actualización incorrecta, mi MIB2STD + NAV se reinicia en bucle. Entonces, me conecto con masilla, las comunicaciones están bien, pero no puedo hacer nada, masilla solo muestra en bucle lo que está en el archivo de registro. No puedo ingresar comandos, nada.

¿Dónde hay un problema?

Gracias.

EDITAR: Resuelto, debe hacer un cortocircuito con 2 contactos a bordo para ingresar al modo de emergencia en tachnisat también.
Hola Swenak, ¿cómo se debe hacer un cortocircuito con 2 contactos a bordo para entrar en modo de emergencia en technisat?
¿podrías explicarlo?
(Soy un novato)
Gracias
 

Amarton

Member
Dec 29, 2011
17
0
I tried to patch Seat 0514T navigation.
MIBStd2_Online_Approval doesn't work because there is no 47112, 47113 47114, 47115 variant in the file.
Who has proper metainfo2.txt for MIBStd2_Online_Approval?
 

willfook

New member
Aug 15, 2021
4
1
Thanks for the information, there is a lot of information but there is no manual that explains it step by step, for newbies like me.
If someone can explain it in steps I would be grateful
eg the exact connections from the SD to the motherboard, if using RNS Uart ...
my MIB STD2 ZR + NAV continually restarts with the skoda logo due to a bad update.
help please :cry:

EDIT:
I deduce the following:
you have to put the SD card in slot 1 with the FW,
connect the UART (I have doubt if you have to connect the GND or not )
then open the PUTTY on the PC
and finally join the 2 points on the base plate.
is this correct ?
Which image shows the correct connection 1 or 2?
 

Attachments

  • 1.PNG
    1.PNG
    722.7 KB · Views: 531
  • 2.jpg
    2.jpg
    56.9 KB · Views: 518
Last edited:

djkns

Member
Oct 11, 2010
23
0
Thanks for the information, there is a lot of information but there is no manual that explains it step by step, for newbies like me.
If someone can explain it in steps I would be grateful
eg the exact connections from the SD to the motherboard, if using RNS Uart ...
my MIB STD2 ZR + NAV continually restarts with the skoda logo due to a bad update.
help please :cry:

EDIT:
I deduce the following:
you have to put the SD card in slot 1 with the FW,
connect the UART (I have doubt if you have to connect the GND or not )
then open the PUTTY on the PC
and finally join the 2 points on the base plate.
is this correct ?
Which image shows the correct connection 1 or 2?
For my unit (mib std2 pq w/ nav) image 1 is correct. Rx connect to Tx and Tx connects to Rx
 
Last edited:

olivierbrt

New member
Aug 18, 2021
4
0
Hello,

I would like to upgrade my MIB2 from MST2_EU_VW_ZR_P0363T to MST2_EU_VW_ZR_P0478T. My part number is: 3Q0035846A. Is this possible? I have the 0478 firmware so I would like confirmation before doing so.

Thank you,

Olivier
 

djkns

Member
Oct 11, 2010
23
0
Hello,

I would like to upgrade my MIB2 from MST2_EU_VW_ZR_P0363T to MST2_EU_VW_ZR_P0478T. My part number is: 3Q0035846A. Is this possible? I have the 0478 firmware so I would like confirmation before doing so.

Thank you,

Olivier
Yes, you should be able to. As long as the firmware is for the right unit ( Technisat for Technisat, Harman for Harman, Delphi for Delphi). Make sure you have the correct one
 

olivierbrt

New member
Aug 18, 2021
4
0
Ok thank you for your answer. Because I saw people who had had problems doing some major update (passage from 02XX-> 03XX, 03XX-> 04XX). So I want to make sure that I can go straight from 0363 to 0478
 

olivierbrt

New member
Aug 18, 2021
4
0
Hello,

I want to activate Sport HMI for my MIB2. I used the patch FEC_ALL_CID_OFF_CP_OFF_SPORT and I know that now I need tu upload a generated FEC Code to the MIB2 using OBDEleven, VCP or ODIS. Unfortunately, I have only VCDS... I know that it's possible to create an FTP server to access to all filesystems of the MIB2. Can I use this function to generate a new FecContainer.fec file with all FEC's code and simply replace the original ?
 

Yassoun

New member
Nov 3, 2010
1
0
Hello,
i have a question.
Is it possible to DOWNGRADE the firmware of a tech ZR unit?
I updated the F/W but I did know that new 5xxT F/W were not a good idea.
I would like to return to 479T to apply all the patches I need (Full L
ink and No CID).
Thank you.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 7
    Device: Technisat MIB STD2 PQ nav

    This device does not have serial shell .
    But I successfully hacked the emmc filesystem
    Now serial port has a shell

    Step1.
    Desolder the EMMC chip

    Step2.
    Dump EMMC chip via SD card reader

    Step3.
    qemu-img convert -f raw d:\682C_EMMC_DUMP.bin -O vmdk d:\682c.vmdk

    Step4.
    Start QNX x86 vmware machine to modify the 682c.vmdk

    Step5.
    modify the file /fs/hd1-qnx6/tsd/bin/system/startup
    add following line
    --------------------
    echo ser1 "/bin/login -f root" qansi-m on > /tmp/ttys
    /sbin/tinit -f /tmp/ttys &
    --------------------
    Save the file

    Step6.
    Shutdown QNX6 VM

    Step7.
    qemu-img convert -f vmdk d:\682c.vmdk -O raw C:\682C_EMMC_DUMP.bin

    Step8.
    write C:\682C_EMMC_DUMP.bin to EMMC via SD card reader

    Step9.
    Solder the EMMC chip back

    done.
    ;)
    4
    I can fully unlock all MIB units. If you need it free free to contact me.
    2
    [QUOTE = "nevergiveup3, post: 84106841, member: 11340019"]
    Привет, ребята, есть шанс, что кто-то снова сможет поделиться этими материалами, потому что ссылки выше не работают. Думаю, многие из нас это оценили бы.

    Заранее спасибо.
    [/ QUOTE]
    1
    reading MMC without desoldering

    Maybe somebody found a way to read eMMC without desoldering chip?
    1
    hi Guys,
    i have this device MIB2 STD:
    SEAT EasyConnect no NAVI
    5F0035842A FW 516T
    Only v1 slot SD Card
    ihave to do a CP OFF

    i'm trying to unlock it by sd card patch, but i have error after update start:

    " Error: conflict of variants
    Medium: Device Doesn't support this (MainUnit: .....)"

    thank's for your help