Does anyone know how to read the memory in a '96XP MPEM module? I'l like to
be able to read the hours meter on my skis without going to a dealer 40
miles away.

I did figure out that the key actually has a chip, the Dallas Maxim DS2401
silicon serial number. I already have some electronics projects in my
garage which use their 1-wire interface, so i plugged my 4 keys into the
1-wire network and and read the 8-byte address for each key!! (I actually
figured this out backwards, first plugged the key into my network, read the
codes, and figured out the chip family, DS2401)

So therefore, seadoo most likely uses the 1-wire protocall to interface with
the memory (using the MPEM programmer). Since 1-wire networks only have 1
master, which should be the MPEM computer, it must look for a particular ID
with the Search ROM command, and when it matches, then dumps its memory into
an eprom in the programmer. Another ID would likely reverse or upload data.
This is only a guess...

Does anyone out there know the exact details of the SeaDoo interface? I
could then mimick the commands with my computer and interface with the MPEM
memory, for only a few dollars worth of parts!

Otherwise, i could hook up a digital storage oscilloscope and record the
communication with a MPEM programmer plugged in, and figure it out that
way...but its a lot of work and it would look funny at the dealership to
carry in a tektronics O-scope (which i could actually hide up front above
the gas tank, but it would still need power but i could use an inverter and
battery for that).

Second question, would the memory be encrypted? if so, the encryption code
has been out there for 10 years, it must be known...


Cy

(obviously one of my hobbies is electronics...and i hate to be told it can't
be done!!)

Archived from group: rec>sport>jetski