how to root???

[Misschihiro]

hi all, the only prerequisite is the muc has been rooted, but how to root the MCU???

[it-gemini]

Good question :) Did you do it?

[Randvegeta]

Yup. Rooted

[lau85]

Rooted with what firmware version?
It was super easy few months ago, but they have added some changes with latest versions.

[Randvegeta]

Upto 2020.44

2020.48 no longer uses the tesla1 token. Need another way.

[GENOV7]

I am very excited about 2020.48

[vacekj]

Would anyone be willing to point in the right direction to rooting and flashing a Model 3 on latest firmware?

[stiffler-m]

Would anyone be willing to point in the right direction to rooting and flashing a Model 3 on latest firmware?

BIOS

[Anton30Z]

Hello
How to root on the last firmware????

[stiffler-m]

Hello How to root on the last firmware????

it is difficult to get root on a recent firmware

[vdiravka]

I have dull access to IC. I can ping CID and GW from there. But ssh too CID is disabled:

################################################################################
# Config: /etc/ssh/sshd_config_prod                                            #
# Date: Tue Dec  5 11:16:33 PST 2023                                           #
# Authorized principals:                                                       #
#   tesla:motors:vehicle:5YJSA1E22GF1XXXXX                                     #
#   tesla:motors:vehicle:5YJSA1E22GF1XXXXX                                     #
#                                                                              #
# SSH allowed: vehicle parked                                                  #
################################################################################
tesla1@cid: Permission denied (publickey)

Any tips how to bypass?

About gw, it's a pity that diagnostic port closed and doesn't accept command printf "\x12\x01" |socat - udp:gw:3500 to open 23 shell port

[strmotors]

I have dull access to IC. I can ping CID and GW from there. But ssh too CID is disabled:

################################################################################
# Config: /etc/ssh/sshd_config_prod                                            #
# Date: Tue Dec  5 11:16:33 PST 2023                                           #
# Authorized principals:                                                       #
#   tesla:motors:vehicle:5YJSA1E22GF1XXXXX                                     #
#   tesla:motors:vehicle:5YJSA1E22GF1XXXXX                                     #
#                                                                              #
# SSH allowed: vehicle parked                                                  #
################################################################################
tesla1@cid: Permission denied (publickey)

Any tips how to bypass?

About gw, it's a pity that diagnostic port closed and doesn't accept command printf "\x12\x01" |socat - udp:gw:3500 to open 23 shell port

That was an old method of rooting, by copying ssh keys of ic to local server and rooting cid. They have fixed that around 2020. There is no new public method.

[vdiravka]

That was an old method of rooting, by copying ssh keys of ic to local server and rooting cid. They have fixed that around 2020. There is no new public method.

agreed, looks like the main fix was closing printf "\x12\x01" |socat - udp:gw:3500 and accessing Gatewey shell :(