Originally Posted by feets
OK, we got into the system this evening. Everything was fully accessible with the exception of the gear shift and *PING* the ESP. It saw the controller but we could not access it. It holds the secrets we're looking for. Getting into the engine controller was easy but it won't help us here.
I guess I'll have to use my Chrysler contacts and try to get into the system using their SDS.
I knew it was a long shot going into it. I've also got E-mails out to the SPOM and tech reps to pick their minds. Maybe we've still got a chance.
We know it can be fully disabled because they do it on the demonstration rides like the one I took in Arlington, TX.
Good work feets! Are you sure it is actually the ESP controller we access to and not the CAB and or ECU? Assuming you manage to get a way in and actually invoke the dyno mode, the next obvious question is will we be able to invoke it without having access to all the MB/DC diagnostic kit? There is nearly always a way to access features and diagnostic modes via an obscure combination of ignition and switch/control inputs but you need inside information to find out what they are.
I'm still looking at the speed sensor route but I think the pesky sensors are the variable pulse width current loop type which give a combined direction, air gap and speed signal. I'm still looking at their output trace and comparing it with various Bosch datasheets.