Let the hacking begin... (Model S parts on the bench)

[appleguru]

Thanks, I do not have a harness.

So give it 12v and it should power up with nothing else connected?

You almost certainly won't get the screen to come on with just power, but you should be able to see the LEDs on the MCU board which will tell you how far it is booting. If you have/can make an Ethernet cable and connect to the IC port you should be able to ping the MCU (192.168.90.100) and gateway (192.168.90.102) if it is booting. Here are the power connections:

I also had an IC I wanted to run, so my harness has a few more wires (IC power, IC wake, CAN between MCU and IC...):

Also, if you use a PC power supply like me for 12V make sure you put a load on the 5V rail or you won't get stable power (I just plugged in an old hard drive I had lying around, worked fine).

MCU power connectors were these:
31372-1000 Molex | Mouser
31372-1100 Molex | Mouser

With these pins (for power):
1326030-2 (Loose Piece) TE Connectivity | Mouser

Alternatively, if you remove the MCU PCB, you can connect two alligator clips or similar to the power pads (which come in via a large flat ribbon cable from the speaker amp behind):

 

[appleguru]

Oh, also, MCU + IC when on with screens were drawing around 73W. So I'd make sure to use at least a 100W power supply. (You could probably get away with smaller for just the MCU, but... bigger is better )

 

[HankLloydRight]

Great, thanks for the details.

This is well within my ability to do, but exceeds my interest to get it running right now.

Would you be interested in a little project if I ship this MCU to you and you throw it on your rig just to see what it does or doesn't do? Maybe I can sell it for parts or part it out.

 

[appleguru]

Great, thanks for the details.

This is well within my ability to do, but exceeds my interest to get it running right now.

Would you be interested in a little project if I ship this MCU to you and you throw it on your rig just to see what it does or doesn't do? Maybe I can sell it for parts or part it out.

My wife will kill me.... but sure, I’m in 8)

 

[Codemonkey]

About to “join the club”. Going to install a Raspberry Pi for permanent MITM access.

 

[HankLloydRight]

My wife will kill me.... but sure, I’m in 8)

Cool, thanks! I'll box it up tomorrow or Tuesday and get it out to you.

 

[supratachophobia]

You can power it up with 12v and ground on the correct pins, no idea what the black wire out the side is, maybe a ground loop? All the tesla black wires I’ve found have been ground.

do you have pics? Feel free to share privately if that works better, but they are very easy to power on with a pc power supply and a few wires.

Maybe the cut end of a diagnostic interface that sits behind the pocket?

 

[appleguru]

Maybe the cut end of a diagnostic interface that sits behind the pocket?

At least on my bench MCU, this “wire out the side” is an antenna (for Bluetooth I think?)

It plugs into J1 with an SMA plug, you can see where it goes on my “alligator clip” photo above.

 

[appleguru]

A photo of the antenna lead:

 

[HankLloydRight]

I posted in the wrong thread.

Here are some pics of the MCU, for anyone who's curious. The first pic is the rogue wire. The stickers show that it's a Premium audio model, too.

 

[Trebek1762]

About to “join the club”. Going to install a Raspberry Pi for permanent MITM access.

Is there a diference in doing this versus setting up an OVPN server remotely and putting your own .ovpn file in /var/spool?

 

[Codemonkey]

Is there a diference in doing this versus setting up an OVPN server remotely and putting your own .ovpn file in /var/spool?

I don’t have root access to the CID.

 

[supratachophobia]

I posted in the wrong thread.

Here are some pics of the MCU, for anyone who's curious. The first pic is the rogue wire. The stickers show that it's a Premium audio model, too.

View attachment 385184 View attachment 385185 View attachment 385186 View attachment 385187 View attachment 385188

That's totally an antenna of some sort.

 

[mongo]

That's totally an antenna of some sort.

All conductors are
(but I would not want the conductor exposed, if that is what I am seeing)

 

[mmccord]

I don’t have root access to the CID.

Yet... right?

Hoping to root mine next weekend. Waiting on some cables.

 

[Gesteur]

Hi Guys,

Will rooting a 1yo tesla, void the standard warranty of 8y on battery and motor?

How does tesla figure out if you got root? Can they refuse repair at SC?

I was reading different threads here, some say you ll get blacklisted from updates and mobile app, some say they don't and still have lte & supercharging on.
What s the truth??

If they get blocked, from where do they get new firmware updates?
Someone must have the newest version , so they would be unrooted, if it was the case Tesla blocked updates.
How would you pull a firmware from a normal car without disassembling the CID...

 

[BigD0g]

No, it doesn’t void your warranty, but if you brake it, then it’s on you not tesla.

There’s ways for tesla to figure it out, there are ways to hide! Hint never post publicly and always delete relevant logs...

They do not blacklist you from the mobile app, they technically don’t blacklist you from software updates, they just place you last on the list.

There are ways to install firmware if you have an image, so that’s not a problem, now getting the image on the other hand is the hard part

You can pull a firmware by getting root

 

[biotour]

do you need root to swap the autopilot computer?

 

[Restrected]

do you need root to swap the autopilot computer?

Swap with same model? Upgrade? What exactly are you trying to do?

Just swapping with same model does not require root, but does require a redeploy.

 

[Kendo]

I also had an IC I wanted to run, so my harness has a few more wires (IC power, IC wake, CAN between MCU and IC...):
View attachment 384851

Great, thanks for the details.

can you give me please the distributor and the part number of the other connectors. for IC and MCU.

Many thanks!