Infiniti/Nissan Nav system Hardware Hacking Thread
#16
Registered Member
iTrader: (3)
The hard drives in these NAV units contain all of the files/graphics/data needed to run the infotainment system in ALL Nissan/Infiniti- even the GT-R. How the units were flashed from the factory determined what configuration to use. Even the map update DVD's contain several different firmware versions. In fact, a headunit from a GT-R will directly plug into a G37 (1 wire has to be changed IIRC) but will not function 100% due to missing sensors and the needed second multi-function switch panel.
The problem is/was that it was never determined if the OS Image (which is Unix/QNX-based) was stored on the HDD or on a ROM chip. Many have tried to clone the HDD to swap in a SSD and that failed for security reasons unknown. I know myg37 forum member Elco and gtrlife forum member Legertas- independently- were working hard at one time on these projects which, ultimately, died.
Because these cars are getting old- in relation to the outdated technology- this project was abandoned and likely won't see any resurrection. For further info:
https://www.myg37.com/forums/audio-v...drive-mod.html
The following users liked this post:
AdamBritt (11-16-2018)
#17
Registered Member
Thread Starter
Won't show up in a Google search as it was never successfully accomplished.
The hard drives in these NAV units contain all of the files/graphics/data needed to run the infotainment system in ALL Nissan/Infiniti- even the GT-R. How the units were flashed from the factory determined what configuration to use. Even the map update DVD's contain several different firmware versions. In fact, a headunit from a GT-R will directly plug into a G37 (1 wire has to be changed IIRC) but will not function 100% due to missing sensors and the needed second multi-function switch panel.
The problem is/was that it was never determined if the OS Image (which is Unix/QNX-based) was stored on the HDD or on a ROM chip. Many have tried to clone the HDD to swap in a SSD and that failed for security reasons unknown. I know myg37 forum member Elco and gtrlife forum member Legertas- independently- were working hard at one time on these projects which, ultimately, died.
Because these cars are getting old- in relation to the outdated technology- this project was abandoned and likely won't see any resurrection. For further info:
https://www.myg37.com/forums/audio-v...drive-mod.html
The hard drives in these NAV units contain all of the files/graphics/data needed to run the infotainment system in ALL Nissan/Infiniti- even the GT-R. How the units were flashed from the factory determined what configuration to use. Even the map update DVD's contain several different firmware versions. In fact, a headunit from a GT-R will directly plug into a G37 (1 wire has to be changed IIRC) but will not function 100% due to missing sensors and the needed second multi-function switch panel.
The problem is/was that it was never determined if the OS Image (which is Unix/QNX-based) was stored on the HDD or on a ROM chip. Many have tried to clone the HDD to swap in a SSD and that failed for security reasons unknown. I know myg37 forum member Elco and gtrlife forum member Legertas- independently- were working hard at one time on these projects which, ultimately, died.
Because these cars are getting old- in relation to the outdated technology- this project was abandoned and likely won't see any resurrection. For further info:
https://www.myg37.com/forums/audio-v...drive-mod.html
The fact that the firmwares are available on the DVD is interesting though. It does lend itself to some reverse engineering, using IDA Pro or something of the like. Knowing the CPU architecture helps too, theyre some debugging tools available, I believe. Again though, its just a matter of time and persistence. I'm not a hardware engineer, so my knowledge plateaus at a certain point. But I think it is doable. Especially if it is QNX. I did poke around some of the firmwares with a hex editor. It looks like the actual firmware is Vxworks and maybe that boots up a QNX operating system.
I really really hate closed systems for this reason. Once they get a little old and you have issues, there's nothing you can do to fix problems. I think it's ridiculous there's so many bluetooth issues with the unit. One thing I think I'm realizing though is that my only real remaining bluetooth issue is bluetooth calling randomly cuts out in the middle of a call. It may be due to my Apple watch. We have two infinitis in my family and my wife said she never had that problem. I got her an apple watch for her birthday and now she's having the same issue...
Ideally it would be awesome if I can find some like minded people to help tackle this project. Mainly to see if we can retrofit the later bluetooth, and also to reverse engineer, or at least somewhat open up or understand how the software on these units work.
Of course, none of this would be needed if goddamn nissan actually supported people who bought their cars.
#18
Registered Member
iTrader: (3)
Well, I wish you luck with your hunt for better BT. I have android and the BT has never given me any issues though, admittedly, I rarely use it. Best move ever was ditching Apple and their iCrap- always a problem.
It will be interesting to see how these projects revive/ evolve. As for me, aside from the headrest speakers I am about to install I am done with any further mods. For now
If I can be of any help...
It will be interesting to see how these projects revive/ evolve. As for me, aside from the headrest speakers I am about to install I am done with any further mods. For now
If I can be of any help...
#19
Registered Member
Thread Starter
Looks like a bunch of guys in russia figured out how to unlock the GTR functionality on these things. Of course you have to be in russia to get them to do it!
Infiniti EX j50 (2007-2014) - 2010-2014 IT08
It is possible!!!! Just wish we can figure out how!
Infiniti EX j50 (2007-2014) - 2010-2014 IT08
It is possible!!!! Just wish we can figure out how!
#20
Registered Member
iTrader: (1)
I wonder if we could do a snapshot of our drives and then either send one off to the Russian guys or however they handle it then compare the before and after. I don't want to take money from these guys for figuring it out but sending money and car parts half a world a way on a chance for it to work or not get scammed doesn't inspire much confidence.
#22
Registered Member
iTrader: (3)
Well, we all know how good the Russians are at hacking- if one believes the hype. Good for them! Be interesting to see how they did it and how we can do the same.
However, upon further review of their website (xanavi.ru) and after translating the YouTube video description, it would seem that this functionality is perhaps a separate "module" moreso than it is "hacking," or unlocking, the hard drive.
From their YouTube video description:
"Nissan / Infiniti (2010-2017) - telemetry menu from Nissan GTR
Nissan / Infiniti 2003-2017 - the organization and conclusion of telemetry based on the Nissan GTR for regular on-board computers Nissan Connect Premium 08it.
The specialists of our company successfully managed to add telemetry from the sports legend Nissan GTR R35 !! Now every Nisaan / Infiniti owner will be able to receive readings like a sports car. The amount of information and its processing depends on the installed sensors in the car.
The menu is activated by pressing the key 6. Control both from the steering wheel buttons, the control console, and touch from the screen. Each owner, at his discretion, can combine and display the information he needs. The work was carried out by the company Xanavi.ru. Help by phone +79626860739 www.xanavi.ru"
We will see...
However, upon further review of their website (xanavi.ru) and after translating the YouTube video description, it would seem that this functionality is perhaps a separate "module" moreso than it is "hacking," or unlocking, the hard drive.
From their YouTube video description:
"Nissan / Infiniti (2010-2017) - telemetry menu from Nissan GTR
Nissan / Infiniti 2003-2017 - the organization and conclusion of telemetry based on the Nissan GTR for regular on-board computers Nissan Connect Premium 08it.
The specialists of our company successfully managed to add telemetry from the sports legend Nissan GTR R35 !! Now every Nisaan / Infiniti owner will be able to receive readings like a sports car. The amount of information and its processing depends on the installed sensors in the car.
The menu is activated by pressing the key 6. Control both from the steering wheel buttons, the control console, and touch from the screen. Each owner, at his discretion, can combine and display the information he needs. The work was carried out by the company Xanavi.ru. Help by phone +79626860739 www.xanavi.ru"
We will see...
Last edited by ILM-NC G37S; 12-01-2019 at 03:02 PM.
#24
Registered Member
iTrader: (1)
Here's the reply I got from them:
Hello,
So I guess if anyone figures out how to add sensors to the CANBUS that would be needed. I'm wondering if they somehow took the system from a GT-R and added to that SUV they showed it on. But that seems like too much work for showing off the enabled sensors.
Hello,
Yes, it possible to unlock. But sensors will not display the values (a lot of them) beauces no such info at the CAN bus, so you should to add device for target messages at CAN bus. We have closed that project so i can't provide same device.
Thanks
Simon
The following users liked this post:
ILM-NC G37S (12-03-2019)
#25
Registered Member
iTrader: (3)
However, their video (for the FX) was back in 2017. Two years later, it is safe to say that any of these projects are now dead- as was confirmed by the email reply. Too costly for such little gains especially when one can use a app for the same task.
Fun while it lasted...
Last edited by ILM-NC G37S; 12-03-2019 at 11:37 AM.
#26
Well as an IT person I would like to congratulate OP on his efforts. 2013 G37S 7AT here. If I can be of any help on this LMK. We run a Note 8 and an Active S8 and the bluetooth connectivity has been nothing short of perfect since we have owned this car.
#27
Registered Member
Thread Starter
Their reply is interesting. I am pretty sure they did somehow unlock the GTR menus on the regular 08IT units, but the sensors providing the data arent on the canbus. There's gotta be a way to manipulate these units, if not for the GTR menus, then for other purposes.
#29
Just in case you haven't seen this, the GTR gauges for the G37 are working well and have been in testing since March 2023:
https://www.myg37.com/forums/audio-v...ml#post4320953
PLUS, if you have a 2010+ G37, with Navigation, you can add the Tire Pressure Menu using a $15 cable and laptop.
https://www.myg37.com/forums/audio-v...ml#post4320953
PLUS, if you have a 2010+ G37, with Navigation, you can add the Tire Pressure Menu using a $15 cable and laptop.
The following users liked this post:
ILM-NC G37S (06-27-2023)
Thread
Thread Starter
Forum
Replies
Last Post
darcyrenee08
Audio, Video & Electronics
4
10-16-2014 07:57 PM
stevelam
Audio, Video & Electronics
6
04-15-2014 09:12 PM