Thank you my friend. Think it's better explanation than from the manufacturer. What about using the mcu clips that come with the orange 5 instead of soldering? Can orange 5 be used on renesas mcu? Thanks again
I think the manufacturer uses a custom key, but i don't know how the software finds the security bytes in detail. i know that the input current of the MCU will change after the correct combination is entered. maybe the current changes after every byte just a little bit, just a guess. Do you know more?
@@kostelectronics You're right. Security bytes are discovered by side-channel attack. If you disassemble the Monitor ROM routine and measure the current drawn by the processor (by measuring voltage drop on small resistance in series with the processor) you can determine which branch was taken after sending one security byte. BTW, what is the N-E switch for?
Thanks for the vid. Question...I'm troubleshooting a device with the same mc and it has a six pin header labeled Programming BCU. would I be able to do this read/write via that, or does the chip need to be desoldered?
i did sec and then test ss , and said no ss found . also u say " try scan " , if not works . i didn't see anywhere on orange5 scan button . i am trying to read hc908 and read and get all AD . i do not know how to skip security .
I need some help I’m looking for the same methods that you were doing in this video But I am no programmer What you see on the screen means nothing to me because I don’t understand it To make a long story short I need someone to compare two chips With 95% same data Except for a few different changes I want remote start and heated seats I don’t know how to read the information to copy the information and program it to the chip that does not have it I would appreciate you can get back to me
I live in Kazakhstan. I am your subscriber. I'm a beginner. I want to learn. I have orange 5, and I did on your video.))) Thank you very much. can I ask you if I have any questions?
hello thanks detail video orange5 clone mc68hc908ap64 How can I find the password of the protected mcu? The search section in the program does not work thanks
I did not film the whole time. Usually it takes 2-3 minutes until the chip Comes off. I use never more than 280 Celsius for leaded solder what was the case here. for lead-free i use max. 350 Celsius, but i hate lead-free :) I recommend to apply some flux around the chip before you try to remove it. A preheater makes this work much easyer and safer for the PCB. BR Matthias
this is fabulos :), i have same problem with my car and with the same module :( can you share please the dump files ? I don't have the possibility to have a good chip from where to dump the files :(. Thank you in advance Great work!
