the 3-byte pin you need is actually hex-coded decimal, in other words digits 0-9 and never using A-F, and will appear in hexadecimal exactly how they would be entered. the 3-byte pin for the cem is located in encrypted cem eeprom, and also located in ecu eeprom. if you read the ecu bin using a tool ...

Don't need a flipper, just use an SDR dongle and SDR#. record the audio from the frequency that matches the remote, open it in audacity, zoom all the way in, and decode your 1s and 0s manually. Thats how I broke direktstart FM remotes 15 years ago. Cheap pocket oscilloscope works on antenna just as...

Amazing writeup! Fascinating read and a real insight on how a lot of this stuff works. Thank you for this. Why not just remove the fuel injection fuse instead? More convenient to rewrite part of the ECU code so it wont start unless you input a specific sequence of buttons. Brake, cruise etc. :wink:

Don't need a flipper, just use an SDR dongle and SDR#. record the audio from the frequency that matches the remote, open it in audacity, zoom all the way in, and decode your 1s and 0s manually.

Thats how I broke direktstart FM remotes 15 years ago.

If you have the UEM pin (i dont know what it is, would love to know, someone DM me) you can read and write the fob list manually, otherwise you have to use the official method with the 2 serials on a new fob only

Read UEM with im608 and program remote Only new with codes label. Someone have any clue how to program used fobs? I know its possible if you have the old UEM with keyfob to move fobinfo from UEM to another used UEM. But thinking of keyfob without known UEM? Theres a encryptioncode i think is needed...

I used this CAN hat for RPI https://www.waveshare.com/2-ch-can-hat.htm and it's better in almost every single way, in that it's wired internally to the correct pins, so it's plug n play and has no messy wires. This is exactly the hat I use for all of my projects, it works really well but I couldn't...

I just popped in to this thread to show my appreciation and gratitude for this information, it's been a major help. Yesterday I was able to crack my CEM pin over OBD (despite the CEM problems my car has) which I think is just the coolest thing ever. Definitely some very talented brain-power being pu...