mib2-toolbox VS mqb-pm

The free traffic info isn't bad. You can change which channels the unit subscribes to (see TMC channel research). I enabled all useful channels on my unit and it does show traffic quite accurately. Now in my country there are not really any detours possible, there's just one highway that connects to cities/villages together, so any detour doubles to triples the distance driven (and thus it's not worth it).

They are working on it over on the dark side. Lol. https://github.com/jilleb/mib2-toolbox

In answer to OP's question: it's likely this person has used the MIB2High toolbox available on GitHub to customize images and startup screens for the unit.

That's pretty cool! I wonder how properly they were really signed - there are _so many_ mistakes even in systems that at least don't use an example key off the Internet.

The most common ones I know of are:

* Out-of-bounds write issues allowing "signature was validated" flags to be overwritten in Flash memory, like https://github.com/jglim/UnsignedFlash

* State machine mistakes, like https://github.com/bri3d/VW_Flash/blob/master/docs/docs.md - allowing Flash to be written again after it was already written, without an erase first.

* Filesystem parsing mistakes, like those in a number of VW AG head units: https://github.com/jilleb/mib2-toolbox/issues/122

* The use of RSA with E=3 and inadequate padding validation, like https://words.filippo.io/bleichenbacher-06-signature-forgery... .

* Failure to understand the system boundaries, like in the second part of https://github.com/bri3d/simos18_sboot where "secret" data can be recovered by halting the system during a checksum process.

* Hardware fault injection issues, as used in https://fahrplan.events.ccc.de/congress/2015/Fahrplan/system... .

Fundamentally this is of course, a very hard problem, since in the "protect against firmware modification" case, the attacker has physical access. But, compared to the state of the art in mobile devices and game consoles, automotive stuff is still way behind.

For split screen you need to do something with the MIB 2 toolbox from what I remember.

The big one, a vulnerabilities in the firmware update mechanism which allows installing customised firmware packs, scripts, tools, ssh etc: https://github.com/jilleb/mib2-toolbox/pull/125

You mean stuff like split screen? It's possible but it must be either coming from your vehicle's manufacturer or you have to mess with properties and/or toolboxes (such as MIB2 Toolbox) to get it.

As far as I know, there's a MIB toolbox and MIB2 Patches to unlock stuff.

Try the MIB 2 toolbox You can modify the aspect ratio and such

Another option is to download the app from GitHub: https://github.com/jilleb/mqb-pm/releases And patch it with AA AIO Tweaker: https://github.com/shmykelsa/AA-Tweaker

It's literally called Performance Monitor. https://github.com/jilleb/mqb-pm

Great to see that someone is interested in this topic even through there is little documentation available. I am not sure if you are aware, but there is a working bridge between exlap and android auto (https://github.com/martoreto/aauto-vex-vag), which might be useful for you. Connection through sockets works, there are also credentials hardcoded in one of the files which should work for you. There even is an archived project that utilizes this data source in android auto (https://github.com/jilleb/mqb-pm).

Even if OEMs felt comfortable enough to let random app developers onto their cars CANBUS App developers are not gonna spend a ton of time customizing their apps to deal with every single permutation of "In cabin air temperature" nvm the tons of other CAN messages you need to run infotainment systems. See this app for how big of a hassle it can be.

I use Torque PRO and Performance Monitor. I would recommend installing PM with AAAD as you would need a rooted phone otherwise. Look at the readme of those apps for further information to set it up.

Also, I created this feature request on GitHub in which I stated that I want to help you with bug/feature testing, so if you need it, hit me up!