Hacking Volvo XC60

Camping mode VOLVO XC60 is suitable for camping. Some customers told me they're unloading. Several minutes later, the tailgate can't close anymore Opps, I didn't test the scearuo before. Here is the engineering report: The car put idle, and several minutes, both car and VOLVO+ go to sleep mode In sleep mode, VOLVO+ wakes up every 3 seconds (3000ms). The on duration is roughly 10ms to detect packets on the CAN bus. It shall detect packet then enter active mode Therefore, humans shall press the tailgate button in the 10ms window, whose probability is 10/3000 = 0.3% (1 success in 300 trials). Try to tweak parameters: Every second (1000ms) listens 10ms. Success rate 1%. 1 success in 100 trial, too bad Every seconds (1000ms) listens 500ms. Success rate 50%. 1 success in 2 trials. Extremely bad power consumption VOLVO+ enters sleep 10 minutes later after cars entering sleep mode. It sacrifices some battery life, but not solves the problem (why can't I have a party with tailga

VOLVO made the A-SS default on. I spent hundreds of hours to learn CAN bus programming from scratch to make the A-SS default off. The article illustrates the idea to hack car, and A-SS OFF development detail.  Build development Tool I typically interact with CAN bus via Raspberry Pi + Linux toolchain Pro Raspberry Pi had built-in WiFi, bluetooth, high performance Convenient can-utils package It's basically a computer and we can write program Con No commercial or GUI based tool, higher entry barrier No technical support, develop everything on our own No solid mechanical structure, I spend a lot of time debugging toolkit before doing experiment Hardware selection Raspberry Pi 3B+ Candlelight FW based USB-to-CAN bus converter Adjustable DC-to-DC converter module for 12V-to-5V I made several HW and picture below is the one I'm using I also had a outdoor version, which used Raspberry Pi ZW to reduce size Debian Linux had can-utils package, whose candump can sniffer CAN bus The com

After completing the remote tailgate control function, then I wanted to develop auto start-stop (A-SS) default-off feature. I would like to discuss this feature first Many people don't like A-SS it drained more battery power undoubtedly, used starting motor more times. Many people stopped the feature as engine on. I like this feature really, especially some traffic light with 90 seconds. However, as queuing to turn left/right, the A-SS start latency was sometimes quite annoying I consulted many people, roughly 3 views to this feature Always enable A-SS Always disable A-SS Default A-SS off, and enable A-SS on-demand The Russia developer's product remember the A-SS state as engine off, and remains the status in the next engine start. The logic is fine to the 1st/2nd, but not good for the 3rd one: I shall *remember* to disable A-SS before engine off, which adds more burden Finally, I defined A-SS OFF feature by default. Car owner doesn't remember any rule . As I recalled this,

I made the next PCB revision with following changes Remove unused pads Use SMT to mount devices (much better quality than hand soldering) Add my study room (QQM Lab) silk print The product is named "VOLVO+", which adds some feature to the VOLVO car 30 PCB placed together, they're already assembled Make some units with OBD2 connectors Live demo Here's the eBay link

In IC design house, "sample back" means the IC is manufactured from the fab and packaged. This also means starting of high intense verification work. Every time, I would look the IC carefully. Watch its silk print, check size, big or small. The IC carries the team's wisdom and effort ---- My PCB is manufactured by  JLCPCB , the PCB sample backed on 2019/5E. This is the "sample back" event for VOLVO+ I studied the way to solder 48QFP in youtube, and practiced (destroyed) several CPUs. After several rounds of trial, I finally assembled a PCB with all components. Burn the FW and test it on the car. The tailgate closed as expected I made it ! I'm engineer, I make product with profession, and I'm proud of creation

After the  low power prototype  completed, I put VOLVO+ on my car over night. In the next day, I found the battery voltage dropped deeper than expected. It seems VOLVO+ drained too much current. Measuring low current consumption is not equal to low-power design completed... I put a LED blinking every 0.1 seconds as receiving CAN bus packet. I sit in the driver seat as the car is locked. Several minutes later, the car entered sleep mode but I saw the LED still blinking. The car alarm system detected something moving and triggered the alarm. I can't stop the alarm and finally the OBD2 fuse was broken and I can't do any experiment There are 3 possible reasons that LED blinking as the door locked LED blinking makes car send CAN bus packet The car still sends CAN bus packet, if it enters sleep mode VOLVO+ wakes up the car, so CAN bus packet appeared Repair the car My OBD2 connector lost power because fuse is broken. Although the car is still in warranty, it's probably not good i