success to hack Technisat MIB2 infotainment system

Search This thread

swenak

Member
Feb 22, 2005
35
1
Hi.

I have upgraded from 253T to 478T. Now I need to CP_OFF, bud cant use patch, that I have dowloaded. Cant use STD2 Toolbox, cant use Update-Approval_SOP4_signed. Still I get after "Parse error, invalid metainfo checksum". Why?

Thanks.

EDIT: Solved with this full reflash - 253T, 253T_CP_OFF, Toolbox for GEM 3.5 + swdownload patch, 478T, 478T_CP_OFF, Toolbox install.
 
Last edited:

swenak

Member
Feb 22, 2005
35
1
Hi,

have next question :) I trying to activate SWaP/FEC, but without succes activation. CP_OFF work correctly, but SWaP/FEC no.

1) I try it with toolbox 8.3, GEM 4.11t and 4.3 too. Dump SWAP to SD, patch it on PC with SWaPPatcher.exe, then upload back from SD to unit with toolbox. Nothing changed. Same I try with FEC and signed_exception_list.txt.

2) I try it with patch for 478T, for first time with downloaded version, next time with patched swap.

Where can be problem? I have ODIS too, months ago i do it with ODIS, but now I cant connect to VAS from VMware via bluetooth, I have it on Windows 11 base system. So I trying it without ODIS.

Thanks!

EDIT: I have done it with ODIS, but if someone can answer, it can help to other users, maybe :)
 
Last edited:

Amarton

Member
Dec 29, 2011
17
0
Hi,
Delphi MIB2 dead after flashing.
There was 227D and I try to flash 231D.
After flashing there was no finalisation screen. The unit didn't turn on anymore.
The display black, there is no lights on the buttons.
The fan gives noise repeatly.
Is there any solution to fix this issue? Emergency update or sometime else?
 

cfurdi

New member
Feb 8, 2022
1
0
Hey guys! I have a 2017 CC that I have brought from California. I have converted and upgraded the MIB2 unit, with the help of knowledgeble guy, from MST2_US_VW_PQ_P0245T to MST2_EU_VW_PQ_P0478T. Everything works great, NAV, CarPlay, Radio, all except the INFO menu which is inactive completly! I push on the button and nothing happens... The unit has 2 SD slots. Any idea how I can fix and re-enable the functionality? Thank you in advance. (I am attaching some pics of the converssion/upgrade stage)
 

Attachments

  • 20201015_191544012_iOS.JPG
    20201015_191544012_iOS.JPG
    2.1 MB · Views: 440
  • 20201015_191723412_iOS.JPG
    20201015_191723412_iOS.JPG
    2 MB · Views: 413
  • 20201015_191623546_iOS.JPG
    20201015_191623546_iOS.JPG
    2 MB · Views: 315
  • 20201015_191644845_iOS.JPG
    20201015_191644845_iOS.JPG
    2.1 MB · Views: 299
  • 20201015_191839227_iOS.JPG
    20201015_191839227_iOS.JPG
    2.1 MB · Views: 288
  • 20201015_193529780_iOS.JPG
    20201015_193529780_iOS.JPG
    2.1 MB · Views: 485

TimmyUK

Senior Member
Nov 30, 2010
110
38
Can I flash from P0245T directly to P0367T or will something break?
Think it depends on your hardware version. I've held off upgrading from 2xx to 4xx for this very reason.

Hardware versions HW2x are designed for software versions 02xx , HW3x for SW03xx & HW4x for SW04xx. I believe upgrading involves editing the metainfo2.txt cpu values, but until I can understand the process I'm not moving, and I'm in no hurry. I value my head unit too much to risk.

Seen too many bricked DM units such as this example
And recovery doesn't look much fun either.
 

FredSV

New member
Feb 15, 2022
1
0
I have acquired a Technisat head unit MIB STD2 ZR +/NAV; Part # 3Q0035874B; S/W 0363 which is not booting (black screen).

Going through emergency update procedure with firmware version MST2_EU_VW_ZR_P0363T on SD Card in 1st slot.

PuTTy screen is telling me:

----------------------------------------------------------
Whole lot of boot stuff then ......

!!!Emergency!!! - Welcome to QNX Neutrino on the Texas Instruments J5 ECO MIBSTD2_MAIN (ARMv7 Cortex-A8 Core)
J5e.QNX.init.ready
Unable to access /dev/name/gns_client
Starting tsd.mibstd2.main.root...
00:00:05.268 [Info] [mcp] [FREQ:20000000]
00:00:05.271 [Info] [mcp] [PERF:0x648c5ef:IO1] J5e.MCP.init.start
00:00:05.286 [Info] [mcproot] CM is restricted
---------------------------------------------------------

...... and then it just hangs.

(The bold highlight above is mine)

Can anyone tell me what is: /dev/name/gns_client or what "CM" is.

Anyone got any ideas how I can get this to work?

For the record, I'm doing this at the desktop without the MIB2 display or the vehicle's CANBUS connected.
Could this be part of the problem?
 

trannamptv

Member
Sep 20, 2020
15
3
anyone have a way to access the shell ( adb ) from the mainboard ? Because currently the computer does not recognize the device when the cable is plugged in through a normal USB port
 

Attachments

  • z3191885560906_ab2fb28dd8d2f3d8804e6c7af7b6d08c.jpg
    z3191885560906_ab2fb28dd8d2f3d8804e6c7af7b6d08c.jpg
    1.1 MB · Views: 286
Last edited:

Lotus_Omega

New member
Sep 5, 2006
3
0
Hi guys,

Somebody knows what can I do after an EMMC replace?
Without the VCRN and VIN number (without the RPMB section)?
I saw a Skoda device without VCRN and VIN (after an EMMC change) and all functions was activated.
I tried to save the EMMC with toolbox but it doesn't work unfortunately.

Thanks in advance.
 

kruky

New member
Jun 16, 2009
2
0
Hi,

I have a problem with reading the emmc in:


Skoda Technisat
MIB STD2 PQ + / NAV
5L0 035 200A
HW: H05
SW: 0138


The radio has the CP removed, but I want to unblock the mirrorlink.


I connect everything according to the instructions, but Windows does not see the variable disk.
It only appears for a moment and then disappears.
In disk management it appears as drive E - no media.


I have tried on two different SD / USB adapters.
I tried the power supply from the adapter and external (3.3V).


Still no results.
Someone can help?
Hello,
I'm trying to read emmc chip but so far unsuccessful. Everything connected as it should be. How did you solve the problem? Did you use another SD card reader? SD card reader power supply or external one?
Thank you so much.
 

Attachments

  • IMG-2580 .jpg
    IMG-2580 .jpg
    996.1 KB · Views: 265

kruky

New member
Jun 16, 2009
2
0
Hello,
I'm trying to read emmc chip but so far unsuccessful. Everything connected as it should be. How did you solve the problem? Did you use another SD card reader? SD card reader power supply or external one?
Thank you so much.
Update: I've changed the USB SD card reader and it works like a charm! Thank you anyway.
 

cristhianocastilho

New member
Apr 23, 2022
3
1
I have a MIB2 PQ with CP-OFF, but with not all the FECs, is possible to add FECs that I haven´t?
Hello good day. I saw you offering help on this MIB STD2 ZR with NAV.
Is it possible that I can play video and moving video on it and activate MONITOR PERFORMANCE (SPORTS) and LAPTIMER like the GTI and GLI?
 
Last edited:

SVH

Member
Feb 28, 2007
31
0
Hi
I have MIB STD2 PQ/NAV Technisat 5c0 035 200 B with bad EMMC
I want change emmc
Please share full emmc backup (img or better bin)

Thanx
 

Top Liked Posts

  • There are no posts matching your filters.
  • 7
    Device: Technisat MIB STD2 PQ nav

    This device does not have serial shell .
    But I successfully hacked the emmc filesystem
    Now serial port has a shell

    Step1.
    Desolder the EMMC chip

    Step2.
    Dump EMMC chip via SD card reader

    Step3.
    qemu-img convert -f raw d:\682C_EMMC_DUMP.bin -O vmdk d:\682c.vmdk

    Step4.
    Start QNX x86 vmware machine to modify the 682c.vmdk

    Step5.
    modify the file /fs/hd1-qnx6/tsd/bin/system/startup
    add following line
    --------------------
    echo ser1 "/bin/login -f root" qansi-m on > /tmp/ttys
    /sbin/tinit -f /tmp/ttys &
    --------------------
    Save the file

    Step6.
    Shutdown QNX6 VM

    Step7.
    qemu-img convert -f vmdk d:\682c.vmdk -O raw C:\682C_EMMC_DUMP.bin

    Step8.
    write C:\682C_EMMC_DUMP.bin to EMMC via SD card reader

    Step9.
    Solder the EMMC chip back

    done.
    ;)
    4
    I can fully unlock all MIB units. If you need it free free to contact me.
    2
    [QUOTE = "nevergiveup3, post: 84106841, member: 11340019"]
    Привет, ребята, есть шанс, что кто-то снова сможет поделиться этими материалами, потому что ссылки выше не работают. Думаю, многие из нас это оценили бы.

    Заранее спасибо.
    [/ QUOTE]
    1
    reading MMC without desoldering

    Maybe somebody found a way to read eMMC without desoldering chip?
    1
    hello have a mib std2 pq+nav ... i want to install it on a jetta 2013 this radio was remove it from crashed jetta 2017 i need cp remove it and help with the retrofit im able to donate to someone that can help me
    Check mibwiki and telegram channel. You will get help faster there.