All blend door actuators (this is how they are called) can be replaced without removing the dash. One is on the driver side, the rest is on the passenger. To access the passenger side you simply remove the glove compartment - unscrew everything around it. Driver side is painful. Look for videos how ...

Ah, now I get it, never heard of that issue! Well, that gives me "the next thing" to do. Might as well order up the PCV parts as it will be easier to work on the wiring in that area if I pull off the intake. Thanks again! That also makes it easier to replace the starter, since it gives yo...

Something to look for when you debug the hw part of the cracker. At 500K baud the CAN tick happens every 2 us. Teensy running at 600 MHz is capable of detecting the signal level transition in about 100 ns (0.1 us). The clean signal spread over latency buckets looks like that: us: 83 84 85 86 87 88 8...

Volvo axle lasts for about 10-15 years, depending on driving habits and local roads quality. I can jinx further, at this point my "replaced or repaired" list does not include only the fuel pump ;) Be aware that GKN quality varies. I've got a new axle and it was good for 60k miles, and stil...

Can anyone else please check files from 2010 on in a p1? It appears to me the pin code is not in that position in the 2010 on files. I can't crack any of the files from 2010 on. Any of these BCD sequences look like a pin? $ gcc -o pin pin.c && ./pin 1M84E\ Secured\ Flash.bin 2 | egrep -a &q...

Yes: Diagnostics / Vehicle Communication / ECM / Advanced / Readiness Code.

P2 PIN routine is very different from P3. Brute-forcing CEM PIN on P2 takes up to 42 (older 250 Kbps CAN) or 21 (newer 500 Kbps) years. A bunch of people here on MVS have figured out how to deal with that and get the pin in under 1 hour (usually about 15-20 minutes), see the thread reference in sign...

Try this one. I did a blind grep session on the disassembled code and I think I found the routine. It looks a bit strange. https://a.d-cd.net/yjtJjuiK1Fi6fdJjKAz0Vfg45BM-960.jpg CEM compares if the PIN stored in its flash is all zeroes or the last byte is 0xff and jumps over/skips the XOR sequence....

Not drinking beer? What's the point? =)

The one in VIDA, with the CEM pinout, is correct. Some dozens pages back there's also a picture with the P1 CEM wiring for cracker. You may have seen it already. You want CAN-L, which does not go over 2.5v, or you risk frying the Teensy, which is 3.3v tolerant. Use the latest code: @mikeak2001 figur...