NavPro connectors - possible hack to enable carnet on MIB1

[fredgroves]

Has anyone got a complete pin out guide to the NavPro infotainment unit?

Its a linux device so am looking to see if it can be hacked

Am looking for some access point to get started on, that could be a USB port or a console port or a network port. (failing that I could attack the bluetooth)?

I'm fairly sure that like most automotive kit, IT security will have been the last thing they bothered with.

Once I'm in, there are some interesting possibilities

[kevinm]

PM me your email address. I can get you the pin outs from ELSA.

[fredgroves]

thanks!

pm sent

[kevinm]

No problem. I'll send it this evening.

[fredgroves]

Actually, I might have found a way

Reading this here:

http://forums.vwvortex.com/showthread.php?7159156-Discover-Pro-Hack-may-be-possible&p=87593838

Basically, need to use VCDS to enable a diagnostic menu in the NavPro (which is the same as the Audi MMI unit - its a Harman Nvidia-Tegra 2 based unit, using QNX 1.2b. )

Once you have that, you have some serious low level access to the unit.

Next trick is to plug in a USB ethernet adapter, configure it in the menu.... so you can connect the device via a portable router to your phone.... which then enables you to activate the carnet Google navigation and inform stuff **without the VW carnet mobile phone module** (aka "premium phone prep") that was never available in the UK.

http://www.club-q5.ru/forum/showthread.php?t=4572

Ok, so you will have some clunky network kit in your car, but it sounds like a fun piece of car/network hacking to me

[fredgroves]

Actually, its not VCDS you need, its VCP

[fredgroves]

Kevin,

Thanks for the email!

Interesting.

I expected to see some other connectors on the back.

The "premium phone prep" device (which is basically a mobile phone) connects to this unit somehow and it definitely connects over a serial connection (the link I provided earlier talks about changing the routing on the QNX box to use the new ethernet connection and not the default PPP one - PPP is serial).

At least I am fairly sure - I need to find the link I had that showed an American dismantling his "carnet module"

[kevinm]

I understood that the premium bluetooth is built into the Discover Nav with an amplifier located in the side in the boot. The same amplifier is used with Premium bluetooth and the comfort/advanced bluetooth you guys have as an option in the UK.

[Sootchucker]

Kevin is right. The phone module is located inside the Infotainment Electronics unit in the glovebox, and amplifier in the rear C pillar.

From the VW Self Study Manual on the MK7.

[fredgroves]

This was the link I was referring to :

http://www.golfmk7.com/forums/showthread.php?t=9618&highlight=carnet

A gadget which has to be basically a mobile phone in a box, buried behind the clocks...

Which is weird really, I'd have thought it would have been with the other gubbins in the glovebox.

BTW the other bizarre thing I found from what Kevin gave me.... the NavPro unit has a connector for a "TV aerial". I guess somewhere in its buried functionality it has a TV receiver too.

Might be fun to figure that one out!