• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

success to hack Technisat MIB2 infotainment system

Search This thread

ecubike

New member
Sep 2, 2021
1
1
hi Guys,
i have this device MIB2 STD:
SEAT EasyConnect no NAVI
5F0035842A FW 516T
Only v1 slot SD Card
ihave to do a CP OFF

i'm trying to unlock it by sd card patch, but i have error after update start:

" Error: conflict of variants
Medium: Device Doesn't support this (MainUnit: .....)"

thank's for your help
 
  • Like
Reactions: Limeoff

samproc

New member
Sep 5, 2021
1
0
Hi All, I just tried updating from MST2_EU_VW_PQ_P0359T to MST2_EU_VW_PQ_P0478T and the unit got stuck at the VW logo on restart and will not boot. Does anyone know of a fix? Thanks
 

Limeoff

New member
Dec 11, 2013
3
0
Dubai
Hi I have same error as ecubike
Error: conflict of variants
Medium: Device Doesn't support this (MainUnit:

I have 2 sd card slots
FW version now MST2_EU_SE_ZR_P0516T

Can anybody suggest what I have to do further to apply a patch
IMG_20210918_163600241.jpg
 

autopapapa

New member
Feb 28, 2021
3
0
Hi,

after wrong update my MIB2STD +NAV is in loop rebooting. So, I connect with putty, communications is OK, but I cant do anything, putty only showing in loop what is in log file. Cant enter commands, nothing.

Where is a problem?

Thanks.

EDIT: Solved, must by shorted 2 contacts on board to enter emergency mode on tachnisat too.
how into enter emergency mode。Which pins are shorted on the rboard。Thank you,bro
 

autopapapa

New member
Feb 28, 2021
3
0
Thank you, brother! I am a unit with nav
Is there an easier way?
(hint: the unit is not ready, the software update is not ready. Please wait a moment. It may take 10 minutes).
 

theluke79

Senior Member
Dec 5, 2010
89
6
Kilkenny, Ireland
I have MST2_EU_VW_P0478T
3Q0035842C
H41

I have 1 SD slot
I do NOT have NAV

I need help to unlock all FEC codes.

I am a member of the motorcarsoft.com forum, and I downloaded their patch and guides, but they are too complicated for me and I need to know if the unit can be patched remotely without disassembling.

Also is the UART connection required?

I have OBDeleven pro

PM contacts are welcome
 

theluke79

Senior Member
Dec 5, 2010
89
6
Kilkenny, Ireland
Thanks for the information, there is a lot of information but there is no manual that explains it step by step, for newbies like me.
If someone can explain it in steps I would be grateful
eg the exact connections from the SD to the motherboard, if using RNS Uart ...
my MIB STD2 ZR + NAV continually restarts with the skoda logo due to a bad update.
help please :cry:

EDIT:
I deduce the following:
you have to put the SD card in slot 1 with the FW,
connect the UART (I have doubt if you have to connect the GND or not )
then open the PUTTY on the PC
and finally join the 2 points on the base plate.
is this correct ?
Which image shows the correct connection 1 or 2?
I am VERY new too, What unit do you have? I was hoping that with the UART and Discover Mediam you can avoid messing around with the PINS
 

Xilent2010

New member
Aug 26, 2011
1
0
Is the only problem for updating from 01xx to 02xx that the emmc is too small? Or is the ram also to small?

What is the size different between a emmc from a 01xx unit to a 02xx? I saw in one of the first post, that the emmc is a MTFC8GLWDQ-3M AIT Z. Is it from a 02xx (or higher) unit? (That should be a 64gb)
 

keksbg

New member
Sep 12, 2021
2
0
Hi, is there any big repository that contains different software versions from different regions? I'm looking specifically for Delphi software/firmware as I need it to be able to mess about with my NAR car that I have imported to Europe. Thanks!
 

freakon88

New member
Oct 19, 2021
1
0
Hi, would it be possible to unlock this unit? I need app connect please: P
3Q0035819B / MST2_EU_VW_PO628D THANKS!
 

Amarton

Member
Dec 29, 2011
16
0
Hi.
I need help.
I have a preh mib2 unit with VW P0369T.
The radio always frozen. Ignition off and on the unit always forgot the phone and radio stations.
I tried to reflash the SW but it was not successful. The RED screen says "failed to open file for writing".
I think that this is hardware failure.
What do you think which component is faulty?
44859D28-A791-4632-9824-202F1C59F2FB.jpeg
 

wlado93

Senior Member
Jul 18, 2010
177
100
@Xilent2010 RAM is small, EMMC is OK (4Gb PLUS, 8GB NAV, 64GB Harman units), update is possible to do after adjusting partitions size, but appconnect won't work, unit will reboot itself when phone tries to connect..

@freakon88 not possible, buy better unit. On some delphi unit's some guys did update to PLUS FW, but there is very big chance that unit will die.

@Amarton EMMC is bad, you can buy another one and ask someone to replace it (guys who are repairing smart TV's should know do that). after replace you must write EMMC backup from another unit (to restore partitions) after that you can start update again
 

mikemanpl

Member
Oct 22, 2006
35
4
Pros! I have a question. I am looking to buy mib2 std to be fitted into 2015 skoda. I can see that I would be able to take care of codes and cp off myself, but I also know that if I fit vw/seat unit into skoda, there will be problem with steering wheel/instruments phone menu that it will be stuck and I will not be able to get out from it. Do you maybe know if this can be solved as diy or is it any more complicated procedure?
 

coesigned

New member
Nov 10, 2021
1
0
Hello all, I have a technistat MIB2 std2 PQ +/Nav model: 5CO35200 SW: 0245 HW: 22.

I have the unit successfully connected through putty, and using the pin short, I am able to access the emergency boot options with:

Enter:
1 - continue boot
2 - Emergency Update
3 - Unlock JTAG
4 - reset Emergency Counter
5 - disable Watchdog
6 - enable Watchdog
7 - enable imx6 USB and release imx6 from reset

I am however looking to obtain the shell. Ideally, I am looking to do this without chip-off, and if it can be avoided, without ISP would be nice. Is it possible to obtain the privilege escalation without that method? Can someone possibly provide some insight? I can provide logs as needed.

My unit is the North American Variant, with the 'MUTE' button. I do not have the navigation button for the POI upgrade. I am trying to use the olli991 github repo, to enable the green dev menu.

Any help would be greatly appreciated. Thank you in advance!
 

Szo_gun

Member
Jun 16, 2021
5
0
Hi,

I have problem with MIB STD2 PQ
(5C0 035 680D).
FACTORY SW: 0356
HW: H30
It stucks on boot loop.
So I decided to do emergency update.

I'm trying with 0363 software.

So I
- connect tx/rx/gnd
- make a jumper
- turn on unit
- choose emergency update on putty
- turn off unit
- remove jumper
- turn on unit
And it stucks on emergency download - just like on photo.

What else I can do?
Or should I do it with 0356 (factory) software?

Anyone has link to 0356 software?
 

Attachments

  • IMG_20211202_191605.jpg
    IMG_20211202_191605.jpg
    333 KB · Views: 1

Top Liked Posts

  • There are no posts matching your filters.
  • 6
    Device: Technisat MIB STD2 PQ nav

    This device does not have serial shell .
    But I successfully hacked the emmc filesystem
    Now serial port has a shell

    Step1.
    Desolder the EMMC chip

    Step2.
    Dump EMMC chip via SD card reader

    Step3.
    qemu-img convert -f raw d:\682C_EMMC_DUMP.bin -O vmdk d:\682c.vmdk

    Step4.
    Start QNX x86 vmware machine to modify the 682c.vmdk

    Step5.
    modify the file /fs/hd1-qnx6/tsd/bin/system/startup
    add following line
    --------------------
    echo ser1 "/bin/login -f root" qansi-m on > /tmp/ttys
    /sbin/tinit -f /tmp/ttys &
    --------------------
    Save the file

    Step6.
    Shutdown QNX6 VM

    Step7.
    qemu-img convert -f vmdk d:\682c.vmdk -O raw C:\682C_EMMC_DUMP.bin

    Step8.
    write C:\682C_EMMC_DUMP.bin to EMMC via SD card reader

    Step9.
    Solder the EMMC chip back

    done.
    ;)
    4
    I can fully unlock all MIB units. If you need it free free to contact me.
    2
    [QUOTE = "nevergiveup3, post: 84106841, member: 11340019"]
    Привет, ребята, есть шанс, что кто-то снова сможет поделиться этими материалами, потому что ссылки выше не работают. Думаю, многие из нас это оценили бы.

    Заранее спасибо.
    [/ QUOTE]
    1
    reading MMC without desoldering

    Maybe somebody found a way to read eMMC without desoldering chip?
    1
    hi Guys,
    i have this device MIB2 STD:
    SEAT EasyConnect no NAVI
    5F0035842A FW 516T
    Only v1 slot SD Card
    ihave to do a CP OFF

    i'm trying to unlock it by sd card patch, but i have error after update start:

    " Error: conflict of variants
    Medium: Device Doesn't support this (MainUnit: .....)"

    thank's for your help