Pleasingly unlawful gadget.

Try an eBay search for "can filter 18 in 1".

Big Clive

Found it on Ali... https://www.aliexpress.com/item/32815482362.html $76/5pc.

Ryan Coleman

S4 is an Audi. The W222 and W166 are Mercedes models.

mikenco

Yeah, I thought that. Mileage would flag up at the next MOT these days. Nothing a dealer would risk doing.

mikenco

Very professional and a little scary.

Bill Kerr

Would this work on cars over 3 years old (in the UK), since it is dead easy to find the mileage at each MOT (UK vehicle safety check)? Such a big 'jump back' would be easy to spot by going to https://www.check-mot.service.gov.uk and simply typing the 'number plate' into the box. Every MOT result, including the vehicle's mileage is there to see. (Free) (at the moment...). Just a thought.

Keith Miller

I wonder how they do that. An offset can be implemented bidirectionally as long as there is no underflow. ECU to Dash: subtract; Dash to ECU: add.

Mike Page

My old 2004 Buick stored the mileage in the gauge cluster and in the ECU. If they didn't match, it would throw an error code and fail inspection. I know because the gauge cluster failed and I couldn't get one from a junkyard - I had to get a rebuilt one, and I had to tell them the mileage so they could program it in.

David E. Blankenship

Found it on AliExpress looking for mileage correction. 12 us bucks. US $12.16 24%OFF | CAN Filter 18 In 1 ForMB CAN Filter 18In1 Lowest price 18in1 for Benz/forBMW Universal Odometer adjust Super CAN Filter for BMW CAS4 and FEM, MB W212 W221 W164 W166 W204 https://s.click.aliexpress.com/e/ClLdpmZw

Witold Witkowski

Just basically blocks the mileage data from the pcm updating the mileage data in the cluster, all other functions work fine. The data is permanently stored in the pcm usually and in a couple of other ECUs.

Boris von Shithousen

I have made a couple of joule thieves. One worked, the other just didn't. 😭

Neil Tonks

Is he data that travels through this bridge of the same port that engines can be remapped to increase performance, or is this something totally different. I guess you could really screw up the EMU if you tinker around with the "apply at your own risk" products....Interesting video ✓

Oh yes nefarious and awesome because of that fact! It didn't seem that badly constructed either. I am not a programming type, but I'd love to see an analysis of the code by a programming type. I had to go back and re-watch because I've been bitten by the Joule Thief bug (again) and was busy winding teeny tiny transformers. Now my fingers hurt after winding half a dozen of various sizes, but I have the wiring sorted on all of them and they have been stuffed into a bag for future use. I love this channel!

Michael Thompson

Thanks for another great video, Clive. It's interesting that this is a CAN bridge, joining two busses together. Hence two transceivers. You couldn't just sniff and hack with the MCU, the timing would fall apart. Though an FPGA might be fast enough. Timing is the reason there's a crystal at all - CAN timing is very fussy. I suppose as long as traffic is forwarded across the bridge within a timeout period (say a few milliseconds) it might go undetected. But the mechanic did say there were several warning lights ... I don't know much about the SAE upper layer protocols but if they're anything like CANopen the important process data is contained in single packets, very little stateliness or protocol-awareness would be necessary. Just whack on an OBD-II sniffer to figure out which packets you care about and the bit rate, then implement your naughty tweaks directly in the CAN receive interrupt. The CAN peripherals handle Layers 0 and 1 and (all things being equal) you don't have to think about any upper layers as long as you're fast / transparent enough. I haven't used STM32 for CAN but NXPs use the dedicated SRAM much the same way as a short FIFO on a UART, except there are 32 "mailboxes" which you configure using an acceptance mask. It's a bit like IP Ports; it helps keep different parts of the protocol separate. Essentially, it gives you more elastic to cope with interrupt latency. Worth pointing out that it is widely believed many STM32 parts have been reversed engineered for the chinese counterfeit market, so that seems like an obvious choice.

Mike Page

PSA group cars (Peugeot, Citroen etc.) have a feature which prevents this from working, the odo data is stored in both the ECU and at the dash unit. Each are compared and whichever is the higher gets re-written to the other unit. This is processed locally on each unit so spoofing the data from either unit would not work like this. It is designed to prevent changing out either unit for a second hand one with lower mileage, you would have to change both then have the ECU setup correctly for your car. They make it more effort than it is worth.

The Tinkering Shed

I was going to ask if the "real" data was still saved somewhere, but you answered that at the very end. You focus was fine in the video when you first zoomed in, could read the chip no problem, it went to hell when you zoomed back out. Very Interesting video, thank-you

At least one early disk compression program did this, but instead of actually compressing the files on the disk it just hooked into the "get free disk space" function and doubled the number before returning it.

Berkeloid

Im amazed something like that works! I have a hard time getting OEM modules communicating some times. Some data links are quite picky. Just the fact the data lines aren't twisted can throw codes in some systems.

Coil B

Oh! I can see using one like that "mileage blocker" for rental cars that have mileage limits/fees. Let's drive out to Vegas!

Nani Isobel

Damn… That’s some shady ass shit!!! Can I get a device that sits in between my HDD & Computer that is programmed for pass-through SATA-II & Reports that my HDD has 70%+ Free Space???? So then maybe I can have some “Free HDD Space” & stop getting those stupid pop up messages nagging me that “Your Disk is Almost Full” even though it’s almost always 95%+ full!!!! ;)

Zane Revai

I just used the 40,000 km one on my car. Paint is now shining, tyres are new, interior smells like a new car, and changed all the logbooks accordingly 🤣

Mike Wynne

What search keywords did you use?

Big Clive

found them on ebay and google for as little as £40... very naughty... certainly worth checking for marked screws around the clock binacle if buying a used vehicle

Julian Butler

I love naughty electronics, too. So many of mine always seemed to overheat or let smoke out, though. [frowny face]. I imagine it was throwing errors because it wasn't adapted to whatever the updated codes were on the vehicle. EMS is one of those things that dealers update (firmware) when posh vehicles come in for service. The maker of this device would have to stay current with every service bulletin to avoid crossing anything or forgetting to emulate the latest signals in each update, or for each localization. Neat stuff!

merc w166 2012 on m class...... merc w222 '2012on S class' ... i'm presuming S4 is the audi system

Julian Butler

Thanks Clive.

Nuts 'n' Proud

Does this work on my wife? Wouldn't mind a few miles less.

Bas

Do they have a setting to change my 10 year old van into a 10 month old boat?

I need one that can lop off 150000km and remove dents on my old beast.

Wim

Delightfully deceiving

AESFTW