Pages: [1] 2 3 ... 6
Author Topic: Anybody reverse engineer VW's "test mode" yet?  (Read 53624 times)
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« on: September 21, 2015, 09:44:13 PM »

Just curious if any TDI IDAPro users have done any reverse engineering of the controversial OBDII code yet.
Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
grifrowl
Full Member
***

Karma: +5/-1
Offline Offline

Posts: 56



« Reply #1 on: September 22, 2015, 11:07:44 AM »

Just curious if any TDI IDAPro users have done any reverse engineering of the controversial OBDII code yet.

First thing I thought of after I read the story. The EPA might take interest in someone with these skills as I would expect it to be much cheaper to pay a few guys to disassemble ecu code than to road sniff every car on the market. Perhaps this job already exists?
Logged
prj
Hero Member
*****

Karma: +1072/-480
Offline Offline

Posts: 6035


« Reply #2 on: September 22, 2015, 11:21:20 AM »

lol i read only the title of the post, i didn't read the contents!

As for TDI.

NOx emissions are affected by combustion temperature, which means:
* EGR rate
* Start of main injection
* pilot injection count and start timing
And of course injection duration.

In case of vehicles with Urea injection:
* Urea injection rate

So it's enough to retard SOI heavily and increase EGR rate to lower combustion temperature and output less NOx.
Then advance SOI back again and lower EGR rate for improved fuel economy and low-end torque at the cost of NOx emissions.

Job done.
You don't need IDA Pro for this.
Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« Reply #3 on: September 22, 2015, 11:30:57 AM »

Any reason to think there are ECUs that do not have special calibration for test mode?

I'm guessing this practice is nearly universal, and for gasoline motors as well.
Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
seishuku
Full Member
***

Karma: +13/-0
Offline Offline

Posts: 131


« Reply #4 on: September 22, 2015, 08:18:05 PM »

I'm somewhat curious on this too, what exactly triggers this "clean mode"?

I am having a laugh though, its still a way cleaner than cars of past years, but CARB seems to think that if something isn't done right now, EVERYONE WILL DIE OR GET CANCER.
Logged
vwaudiguy
Hero Member
*****

Karma: +53/-37
Offline Offline

Posts: 2024



« Reply #5 on: September 22, 2015, 08:26:49 PM »

I'm somewhat curious on this too, what exactly triggers this "clean mode"?

It is my understanding this applies to TDI's that don't have a urea injection system installed. The ecu recognizes it's being run on a dyno from the wheel speed and steering angle sensor (most likely more), and would access different maps during this time.
Logged

"If you have a chinese turbo, that you are worried is going to blow up when you floor it, then LOL."
hopsis
Full Member
***

Karma: +13/-4
Offline Offline

Posts: 174


« Reply #6 on: September 22, 2015, 09:27:52 PM »

I read on some UK site that if You run with the hood open, the hood switch lights a service bulb on the inner side of the bonnet which in turn signals the ecu that it's test mode time. Sort of would make sense since there is no reason for anyone to drive with the hood open normally. Then again, other sites have made claims that there is a separate device installed between ecu and engine harness. That I don't believe as it would have been found on the first day after these cars rolled out of the factory.
Logged
adam-
Hero Member
*****

Karma: +124/-33
Offline Offline

Posts: 2179


« Reply #7 on: September 23, 2015, 12:06:26 AM »

It is my understanding this applies to TDI's that don't have a urea injection system installed. The ecu recognizes it's being run on a dyno from the wheel speed and steering angle sensor (most likely more), and would access different maps during this time.

But what about actual mapping?  People without the know of this would put it on a dyno and wonder why real world is different.

Then, how many cars do they use as a base?  Do they use real world cars on a dyno, or just an engine mounted up on a dyno?  Even with a separate harness installed between the loom and the ECU, there still has to be a pathway that it follows.

If someone disassembles the code, they'll find it fast.
Logged
prj
Hero Member
*****

Karma: +1072/-480
Offline Offline

Posts: 6035


« Reply #8 on: September 23, 2015, 01:11:54 AM »

No need to disassemble, looking at a2l is moe than likely enough...

The thing is, it's not only VW. VW must have specifically ordered this from Bosch, who complied.
Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
adam-
Hero Member
*****

Karma: +124/-33
Offline Offline

Posts: 2179


« Reply #9 on: September 23, 2015, 01:26:56 AM »

So VW asked for a mode they could set with one code word that would allow a "test mode"?  Should Bosch have told them no, because that's the "moral" thing to do?

Then what happens with the compiled software?  Do Volvo, Alfa, BMW just take it and make slight amendments?  Then are all these manufacturers responsible, or is it Bosch, for compiling it in the first place?
Logged
Geremia
Jr. Member
**

Karma: +11/-10
Offline Offline

Posts: 27


« Reply #10 on: September 23, 2015, 02:49:51 AM »

But....aside the method to reduce emission, how does the ecu knows if car is on dyno or on road? From abs inertial measurement (speed changes but always zero accelerations on all axis)?
Is it bosch or conti/simos? (or both  Grin)
Any a2l file to take a look?
 
Logged
spacey3
Full Member
***

Karma: +12/-1
Offline Offline

Posts: 198


« Reply #11 on: September 23, 2015, 03:03:00 AM »

So VW asked for a mode they could set with one code word that would allow a "test mode"?  Should Bosch have told them no, because that's the "moral" thing to do?

Then what happens with the compiled software?  Do Volvo, Alfa, BMW just take it and make slight amendments?  Then are all these manufacturers responsible, or is it Bosch, for compiling it in the first place?

You seem to be thinking along the lines of exactly what has been brought to light now.

http://www.bbc.co.uk/news/world-europe-34328689
Logged
adam-
Hero Member
*****

Karma: +124/-33
Offline Offline

Posts: 2179


« Reply #12 on: September 23, 2015, 03:10:28 AM »

Wonder if now is a good time to buy shares?
Logged
aef
Hero Member
*****

Karma: +69/-46
Offline Offline

Posts: 1600


« Reply #13 on: September 23, 2015, 03:33:10 AM »

No you have to wait
Logged
prj
Hero Member
*****

Karma: +1072/-480
Offline Offline

Posts: 6035


« Reply #14 on: September 23, 2015, 04:39:12 AM »

Do Volvo, Alfa, BMW just take it and make slight amendments?  Then are all these manufacturers responsible, or is it Bosch, for compiling it in the first place?

Usually only Bosch changes the code and adds or removes functionality. The only thing the OEM can do is request a functionality from Bosch or calibrate the existing functionality.
Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
Pages: [1] 2 3 ... 6
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.027 seconds with 18 queries. (Pretty URLs adds 0.001s, 0q)