B2 detection again. What is the PIN number? I would like to see if the Correct B2 was getting into the short list when CALC_BYTES = 3. Notes: From his CALC_BYTES = 3 run. shuffle order: 3 1 5 0 2 4 best candidates ordered by latency: ( B2, range 3) 0: 55 lat = 2623755 1: 73 lat = 2618088 2: 82 lat ...

First two bytes are clearly 03 55. Third byte in your CEM is hard to crack (there was a theory why some CEMs have problems with the third bytes, lost somewhere in this rather long thread), but if you set CALC_BYTES to 2 and leave it overnight on a battery charger, you'll get it brute forced in unde...

First two bytes are clearly 03 55. Third byte in your CEM is hard to crack (there was a theory why some CEMs have problems with the third bytes, lost somewhere in this rather long thread), but if you set CALC_BYTES to 2 and leave it overnight on a battery charger, you'll get it brute forced in unde...

vtl wrote: ↑19 Jan 2022, 14:12 Try a few times and collect the logs. Don't need to go after position 3, just reset and start over. Post logs here.

Here is the log from attempt #2 (lost the log from attempt #1). Also failed. Will give it yet another try.

Pin 3 : CANLS-H Pin 11: CANLS-L Pin 6 : CANHS-H Pin 14 : CANHS-L Pin 4 : Chassis ground. Pin 5 : Signal ground. Remember when you flip it over the pin orders reverse. Run you hand across the bottom of the board. Are any of the rails pushing out? Thanks. The plug actually has numbers next to pins, s...

Try a few times and collect the logs. Don't need to go after position 3, just reset and start over. Post logs here. 120 Ohm resistor better be out for the in-car cracking. Also you need a good power to the board. Thanks, I will try to repeat a few times. But I'm not sure if I'm able to desolder the...

I think the bottom of the board is relatively flat. I connected to the car, after swapping these pins (6<->11). This time CEM has been detected, and the cracking process started. The suspension selector light were glowing. Unfortunately it could not find the PIN after 30min, I suspect the best candi...

RickHaleParker wrote: ↑19 Jan 2022, 13:00 The same color wire for two different functions would be lame and unprofessional. Some of the cable manufactures do tie the two grounds together, that the only place two wires of the same color make any sense.

To be fair they are not exactly the same, one is green, the other is green/white.

Bingo! You got the CAN LS -L and the CAN HS -L connected to Signal ground and Chassis ground ( Green wires ). CANHS = CAN High Speed, CANLS = CAN Low Speed. -H = the high side of the CAN bus, -L = the low side of the CAN bus. Thanks - I just checked the connection again. The way I detected the OBD ...

Thanks for all the responses. It is 2007 S60R. I attached 2 pictures of the cracker. I will check the battery and try other things after work in the evening. I do not have the common ground between OBD2 and Teensy. I will try that too. And I will try to comment out the code and let you know in any o...