(02-22-2023, 09:48 AM)x119 Wrote: For information: Brute force isn't feasible on a SPA car because the ECU locks out after failed attempts. You either have to wait for the lock out to pass or reset the ECU to allow new attempts. This required procedure unfortunately causes too much delay in attempts and instead of XX hrs, you're in to the realms of months / years to brute the PIN. It's much more efficient to either use VIDA to extract a Seed / Key and generate a working PIN, pull the ECU and extract the firmware on a bench or to purchase some magic as loosely outline above..
Today D5T5 announced that now they can brute-force SPA cars:
Quote:CEM PIN DCEM PIN Decoding for SPA/CMA Cars for Configuration Changes
For SPA/CMA cars without the Android infotainment system (iCUP/Google), it is now possible to decode the CEM PIN to modify configurations (e.g., remove speed limits, activate CarPlay, enable parking cameras, activate navigation, remote start, etc.). CEM PIN decoding is possible using VDASH and a compatible diagnostic cable - Volvo DiCE, Super J2534, Mongoose JLR, VOE, VXDIAG. Decoding may take 0 to 24 hours and can be paused and resumed from the same point at any time.ecoding for SPA/CMA Cars for Configuration Changes
Probably they found a way how to keep car unblocked during the brute-force process.
And another thing (that's funny) - they introduced a flat price! @Power6 you rock the world
