Help Crack NAV Screen Diag PIN Code
Drifting
Joined: Jun 2005
Posts: 1,837
Likes: 4
Well, found out just a bit more, unfortunately its not in the right direction.
I patched the file and burnt a set of discs:
1 with no change to the version number
1 with changes to the internal version number
1 with changes to the Kiwi header version number
None of them loaded. Drat.
Now it seems like the version numbers are funny anyway. The Kiwi spec has that as an 8-octet character field, my disc has
0x23 0x30 0x23 0x31 0x21 0x25 0x23 0x38 or "#0#1!%#8" which is certainly a funny-looking version number, especially as the number inside the software is a simple 1312.
I changed it to "#0#1!%#9" and that didn't load, so maybe I need to crack the version number in order to determine the next legitimate number. Or maybe it just looks at the first part of it.
Of course it could always be some sort of internal checksum, but in that case I'd have expected some sort of message, or at the very least that it would have worked at it for a while. As best I can tell it only read a few blocks off the CDs - about enough to find the file, and read the header, then decide there wasn't anything useful there.
I patched the file and burnt a set of discs:
1 with no change to the version number
1 with changes to the internal version number
1 with changes to the Kiwi header version number
None of them loaded. Drat.
Now it seems like the version numbers are funny anyway. The Kiwi spec has that as an 8-octet character field, my disc has
0x23 0x30 0x23 0x31 0x21 0x25 0x23 0x38 or "#0#1!%#8" which is certainly a funny-looking version number, especially as the number inside the software is a simple 1312.
I changed it to "#0#1!%#9" and that didn't load, so maybe I need to crack the version number in order to determine the next legitimate number. Or maybe it just looks at the first part of it.
Of course it could always be some sort of internal checksum, but in that case I'd have expected some sort of message, or at the very least that it would have worked at it for a while. As best I can tell it only read a few blocks off the CDs - about enough to find the file, and read the header, then decide there wasn't anything useful there.
4th Gear
Joined: Apr 2007
Posts: 4
Likes: 0
Thanks Buffy to your commitment to this. I haven't had a chance to look at the Kiwi documentation you've sent just yet. I'm hoping that I'll be able to finally work on cracking this thing next week.
A lot of the times version numbers can be in Binary Coded Decimal (BCD) format.
When you say you patched the file, what did you do? Could it be that the version numbers are irrelevant and it's just that the checksums are not matching, after you patches?
I'd rather have the NAV system have pretty strict error checking so that we don't brick our systems. And as long as the code that's responsible for updating the NAV's flash isn't itself upgradeable from the loading.kwi file, then we should be safe if we were to screw up some other portion of the NAV software. As long as we can fall back.
A lot of the times version numbers can be in Binary Coded Decimal (BCD) format.
When you say you patched the file, what did you do? Could it be that the version numbers are irrelevant and it's just that the checksums are not matching, after you patches?
I'd rather have the NAV system have pretty strict error checking so that we don't brick our systems. And as long as the code that's responsible for updating the NAV's flash isn't itself upgradeable from the loading.kwi file, then we should be safe if we were to screw up some other portion of the NAV software. As long as we can fall back.
2nd Gear
Joined: Jan 2007
Posts: 2
Likes: 0
Loading a modified disc
When you tried loading your modified disc, did you first clear the system of the old firmware?
In the Lexus forums dealing with this problem, they first take power from the nav system and totally wipe everything from memory by pulling the fuse for about 5-10 minutes.
In the Lexus forums dealing with this problem, they first take power from the nav system and totally wipe everything from memory by pulling the fuse for about 5-10 minutes.
Drifting
Joined: Jun 2005
Posts: 1,837
Likes: 4
Experience seems to bear this out; there are a number of stories on the forum about folks who've had to re-index the windows, etc. after having the battery disconnected but no-one has reported having to reload the nav.
Melting Slicks
Joined: Jan 2003
Posts: 3,475
Likes: 58
From: California CA
St. Jude Donor '14-'15
Lets Start a bounty
I'm also active on the Treocentral.com forums. And one thing we did a while back was put up a volunteer bounty to Paypal for those who were working on adding some hacking to the Palm treo 700. Well it worked. The people with software knowledge started realizng that the bounty ended up being over $1500.00 to do some hacking on the Palm Treo and they got the hacking done in a couple of weeks and everyone who owned a palm treo benefitted from it.
I will start the bounty at $150.00. Please add you own to this bounty and I will start a paypal account to pay those who finally crack the Nav screen on our c6's.
Mark
I will start the bounty at $150.00. Please add you own to this bounty and I will start a paypal account to pay those who finally crack the Nav screen on our c6's.
Mark
Melting Slicks
Joined: Jan 2003
Posts: 3,475
Likes: 58
From: California CA
St. Jude Donor '14-'15
Lets Start a bounty
I'm also active on the Treocentral.com forums. And one thing we did a while back was put up a volunteer bounty to Paypal for those who were working on adding some hacking to the Palm treo 700. Well it worked. The people with software knowledge started realizng that the bounty ended up being over $1500.00 to do some hacking on the Palm Treo and they got the hacking done in a couple of weeks and everyone who owned a palm treo benefitted from it.
I will start the bounty at $150.00. Please add you own to this bounty and I will start a paypal account to pay those who finally crack the Nav screen on our c6's. This iwll be a great motivation if we can get the hackers to get this handled.
Mark
I will start the bounty at $150.00. Please add you own to this bounty and I will start a paypal account to pay those who finally crack the Nav screen on our c6's. This iwll be a great motivation if we can get the hackers to get this handled.
Mark
Corvette Stories
The Best of Corvette for Corvette Enthusiasts
Every 2027 Corvette Engine Explained
Joe Kucinski
Designer Imagines A Corvette That Looks More Like a Corvette Than the Corvette
Verdad Gallardo
10 Ugly Corvettes That We Still Kinda Love
Joe Kucinski
Top 10 Most Expensive Corvettes Ever Sold on Bring A Trailer
Brett Foote
10 Things Every Corvette Owner Needs (2026 Edition)
Michael S. Palmer
8 Most "Only Corvette Owners Understand" Quirks and Problems
Pouria Savadkouei
10 Reasons the C6 Z06 is Still A Performance Benchmark After 20 Years
Joe Kucinski
How Much Horsepower Every Corvette Engine "LOST" in 1972
Joe Kucinski
Top 10 DOs and DON'Ts for Protecting Your Convertible Top!
Michael S. Palmer
2nd Gear
Joined: Jun 2006
Posts: 2
Likes: 0
What Lexus forum are you referring to? I'm on a few of them and if you mention NAV and hack in the same sentence you get a lot of bitching from the regulars that nothing can be done...blah blah blah.. BMW forum members have done lots of cool things as well as others and here there are lots of people trying things.
3rd Gear
Joined: May 2007
Posts: 3
Likes: 0
I'm definitely willing to help out and get this cracked. Just let me know what I can do.
I've actually created a forum that I hope will be a central area for all of us from the various different sites (GM, Vette, Caddy, Lexus, Mazda, etc) to work together in getting this cracked. It's not completely done yet, but the url is www.navhackers.com
I've actually created a forum that I hope will be a central area for all of us from the various different sites (GM, Vette, Caddy, Lexus, Mazda, etc) to work together in getting this cracked. It's not completely done yet, but the url is www.navhackers.com
Last edited by ChicaneSpeed6; May 6, 2007 at 01:09 PM.
Melting Slicks
Joined: Jun 2005
Posts: 2,858
Likes: 1
From: Burlington County NJ
great idea creating the forum! thanks.
I'm definitely willing to help out and get this cracked. Just let me know what I can do.
I've actually created a forum that I hope will be a central area for all of us from the various different sites (GM, Vette, Caddy, Lexus, Mazda, etc) to work together in getting this cracked. It's not completely done yet, but the url is www.navhackers.com
I've actually created a forum that I hope will be a central area for all of us from the various different sites (GM, Vette, Caddy, Lexus, Mazda, etc) to work together in getting this cracked. It's not completely done yet, but the url is www.navhackers.com
3rd Gear
Joined: May 2007
Posts: 3
Likes: 0
No problem. Feel free to join up if you want to contribute! I privately emailed some of the people from other forums (caddy, GM, etc) that I have run into that are actively getting somewhere on cracking this. I figure if we get all our heads together on this, then it would be even easier to crack. I'll be putting up a CVS if it's requested, along with other stuff (space for ISO & shareable filestorage, etc).
Corvette related:
OMFG. I ran with a C6 Z06 last night and a Twin Turbo C5 Z06. I have a (sigh) MazdaSpeed6, which is damn quiet, and with the windows closed you could hear the turbos from the C5 spooling up 150 yards up the road. Just unreal. Rolling down the highway at 70 MPH and he was just vaporizing the tires just by rolling into it a little.
Corvette related:
OMFG. I ran with a C6 Z06 last night and a Twin Turbo C5 Z06. I have a (sigh) MazdaSpeed6, which is damn quiet, and with the windows closed you could hear the turbos from the C5 spooling up 150 yards up the road. Just unreal. Rolling down the highway at 70 MPH and he was just vaporizing the tires just by rolling into it a little.
Last edited by ChicaneSpeed6; May 7, 2007 at 03:52 PM.
2nd Gear
Joined: Mar 2007
Posts: 2
Likes: 0
Hi everyone!
I have started working on the Denso navigation we have in some of our Saab cars. ( 9-5 -05 -> )
It seems to be very related to the one you can find in your cars.
Firmware in flash, loading.kwi seems to being build identically etc....
I got my loading.kwi file apart with Buffys tool.
And i have a romdump from my flashchips inside my nav unit.
ChicaneSpeed6> I´m trying to register an account on Navhackers but I'm getting an error message saying "The confirmation code you entered was incorrect" all the time.
I dont get any code-field or anything to verify....
Any ideas? (tried both Firefox and IE)
I have started working on the Denso navigation we have in some of our Saab cars. ( 9-5 -05 -> )
It seems to be very related to the one you can find in your cars.
Firmware in flash, loading.kwi seems to being build identically etc....
I got my loading.kwi file apart with Buffys tool.
And i have a romdump from my flashchips inside my nav unit.
ChicaneSpeed6> I´m trying to register an account on Navhackers but I'm getting an error message saying "The confirmation code you entered was incorrect" all the time.
I dont get any code-field or anything to verify....
Any ideas? (tried both Firefox and IE)
Last edited by Hedis; May 7, 2007 at 04:56 PM.
3rd Gear
Joined: May 2007
Posts: 3
Likes: 0
It's all fixed now. Sorry. :-/
Melting Slicks
Joined: May 2006
Posts: 2,324
Likes: 0
From: MN
I'm going to stick my head in the lion's jaw here, but what the hell.
Why on earth is this thread still alive? It has been going for MONTHS and MONTHS without result. If someone could crack the nav system's computer code to make it play dvd's, cook soup, or shoot monkey butts out one of the box's slots, don't you think SOMEONE would have found a way by now and made the method known to the world?
With all this time and effort, someone could have either built a new piece of equipment and started a multi-million dollar corporation to sell it, OR you could have gone to your favorite electronics store and bought a replacement unit and had it installed.
Accept it - the nav system does NOT play dvd's. It doesn't do a lot of things. It does what GM wanted it to do. No more, no less. If you don't like it, remove it and replace it with something you do like.
Why on earth is this thread still alive? It has been going for MONTHS and MONTHS without result. If someone could crack the nav system's computer code to make it play dvd's, cook soup, or shoot monkey butts out one of the box's slots, don't you think SOMEONE would have found a way by now and made the method known to the world?
With all this time and effort, someone could have either built a new piece of equipment and started a multi-million dollar corporation to sell it, OR you could have gone to your favorite electronics store and bought a replacement unit and had it installed.
Accept it - the nav system does NOT play dvd's. It doesn't do a lot of things. It does what GM wanted it to do. No more, no less. If you don't like it, remove it and replace it with something you do like.
Melting Slicks
Joined: Jun 2005
Posts: 2,858
Likes: 1
From: Burlington County NJ
worst post of the day. This is something that people have been working on in their SPARE time for a while. YOU DONT KNOW WHATS POSSIBLE TO DO ON THESE THINGS. I hope you dont work in a career that is technical or involved problem solving. And if you've kept up with the thread, you would have seen that results have come and progression has been made. if you dont see the rewards of getting this to work, thats too bad.
I'm going to stick my head in the lion's jaw here, but what the hell.
Why on earth is this thread still alive? It has been going for MONTHS and MONTHS without result. If someone could crack the nav system's computer code to make it play dvd's, cook soup, or shoot monkey butts out one of the box's slots, don't you think SOMEONE would have found a way by now and made the method known to the world?
With all this time and effort, someone could have either built a new piece of equipment and started a multi-million dollar corporation to sell it, OR you could have gone to your favorite electronics store and bought a replacement unit and had it installed.
Accept it - the nav system does NOT play dvd's. It doesn't do a lot of things. It does what GM wanted it to do. No more, no less. If you don't like it, remove it and replace it with something you do like.
Why on earth is this thread still alive? It has been going for MONTHS and MONTHS without result. If someone could crack the nav system's computer code to make it play dvd's, cook soup, or shoot monkey butts out one of the box's slots, don't you think SOMEONE would have found a way by now and made the method known to the world?
With all this time and effort, someone could have either built a new piece of equipment and started a multi-million dollar corporation to sell it, OR you could have gone to your favorite electronics store and bought a replacement unit and had it installed.
Accept it - the nav system does NOT play dvd's. It doesn't do a lot of things. It does what GM wanted it to do. No more, no less. If you don't like it, remove it and replace it with something you do like.
Racer
Joined: Sep 2004
Posts: 265
Likes: 0
From: Westminster MD
I'm going to stick my head in the lion's jaw here, but what the hell.
Why on earth is this thread still alive? It has been going for MONTHS and MONTHS without result. If someone could crack the nav system's computer code to make it play dvd's, cook soup, or shoot monkey butts out one of the box's slots, don't you think SOMEONE would have found a way by now and made the method known to the world?
With all this time and effort, someone could have either built a new piece of equipment and started a multi-million dollar corporation to sell it, OR you could have gone to your favorite electronics store and bought a replacement unit and had it installed.
Accept it - the nav system does NOT play dvd's. It doesn't do a lot of things. It does what GM wanted it to do. No more, no less. If you don't like it, remove it and replace it with something you do like.
Why on earth is this thread still alive? It has been going for MONTHS and MONTHS without result. If someone could crack the nav system's computer code to make it play dvd's, cook soup, or shoot monkey butts out one of the box's slots, don't you think SOMEONE would have found a way by now and made the method known to the world?
With all this time and effort, someone could have either built a new piece of equipment and started a multi-million dollar corporation to sell it, OR you could have gone to your favorite electronics store and bought a replacement unit and had it installed.
Accept it - the nav system does NOT play dvd's. It doesn't do a lot of things. It does what GM wanted it to do. No more, no less. If you don't like it, remove it and replace it with something you do like.
I guess Mercedes didnt know that when i entered the secret code in my Euro comand unit (head unit) and it played DVD's while it was moving. Yes, it has a DVD player, but it was disabled from the factory when the car is in motion. Without someone figuring out it for the mercedes, i wouldnt have my video player.
Lets not give up, I am sure there is hope that someone will get it.
Last edited by YellowSled; May 29, 2007 at 04:10 PM.