# 054 - It's A Calibration, Not An Update!

- Show: [Unnamed Reverse Engineering Podcast](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast)
- Published: 2022-02-11
- Length: 1h 16m
- Episode: 54
- Page: https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update
- Listen: https://unnamedre.com/episode/54

## Summary

Willem Melching, head of OpenPilot at comma.ai, details his journey from hobbyist electronics to reverse engineering automotive ECUs. He explains how he bypassed security on a VW Golf power steering module by exploiting a calibration protocol to dump firmware, then used Ghidra and binwalk to modify safety limits. Melching also describes the architecture of OpenPilot, an open-source Level 2 driver assistance system that supports over 150 cars by reverse engineering their CAN bus communications.

## Chapters

- [0:28](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update#t=28) Introduction: Willem Melching and comma.ai
- [1:07](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update#t=67) Background: From LEGO Mindstorms to Embedded Engineering
- [7:13](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update#t=433) Audi Q8 FlexRay Hacking and FPGA Interceptor
- [19:59](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update#t=1199) VW Golf Power Steering ECU Reverse Engineering
- [33:03](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update#t=1983) Extracting Firmware: Binwalk, XOR, and Ghidra
- [44:32](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update#t=2672) Modifying Calibration Files and Flashing
- [53:34](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update#t=3214) OpenPilot: Architecture, Safety, and Community
- [1:12:22](https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update#t=4342) Favorite Tools: Oscilloscopes and GLScopeClient

## Topics

- [Debugging & failure analysis](https://hardwarepodcasts.com/topic/debugging-and-failure-analysis)
- [Embedded firmware](https://hardwarepodcasts.com/topic/embedded-firmware)
- [Microcontrollers & dev platforms](https://hardwarepodcasts.com/topic/microcontrollers-and-platforms)
- [Connected products & IoT](https://hardwarepodcasts.com/topic/connected-products-and-iot)
- [Security & privacy](https://hardwarepodcasts.com/topic/security-and-privacy)

## Most relevant to

early-stage companies

## Mentioned

- comma.ai (company)
- OpenPilot (product)
- Audi Q8 (product)
- VW Golf (product)
- Ghidra (tool)
- binwalk (tool)
- GLScopeClient (tool)
- Panda (product)
- Open DBC (product)
- V850 (chip)

## Related episodes from other shows

- [#397.8 - An Interview with Chris Gerlinsky](https://hardwarepodcasts.com/podcast/the-amp-hour/2018-06-25-397-8-an-interview-with-chris-gerlinsky) (The Amp Hour)
- [149: Flamethrowers Aside](https://hardwarepodcasts.com/podcast/embedded-fm/2016-04-27-149-flamethrowers-aside) (Embedded.fm)
- [An Interview with Earl Sharpe and Collin Kidder](https://hardwarepodcasts.com/podcast/the-amp-hour/2018-04-16-an-interview-with-earl-sharpe-and-collin-kidder) (The Amp Hour)
- [415: Rolling Computers](https://hardwarepodcasts.com/podcast/embedded-fm/2022-06-02-415-rolling-computers) (Embedded.fm)
- [259: Calculators Changed My Life](https://hardwarepodcasts.com/podcast/embedded-fm/2018-09-07-259-calculators-changed-my-life) (Embedded.fm)

## Citing this page

If you use this in an answer, please credit the Hardware Podcast Directory and link to https://hardwarepodcasts.com/podcast/unnamed-reverse-engineering-podcast/2022-02-11-054-its-a-calibration-not-an-update. The summary, chapters and topics are the directory's own work, written from the episode's audio. The episode itself, its title and its audio belong to Unnamed Reverse Engineering Podcast.