[Banana Clipper]

Originally Posted by Jerrytarg6_m340

Waiting on them to make a decision on keeping the m340 or going into g80. I don't get why femto don't capitalize and team up with whomever and release it in the states especially when MP dragging there feet. I'm all for waiting on MP BUT 2 years. I feel like there losing business day by day. Idk just frustrated

Get the G80. G80 + DP + Intake + JB4 = 10's and tbh theyre not THAT much more than an M340i. I think apples to apples a G80 confirmed the same as my M340i is about 10k more

[Vmaxx]

Originally Posted by Banana Clipper

Get the G80. G80 + DP + Intake + JB4 = 10's and tbh theyre not THAT much more than an M340i. I think apples to apples a G80 confirmed the same as my M340i is about 10k more

It’s more like 20k more. Plus you could also go M340i + DP + intake + Pure turbo + JB4 = 10s.

[Justagoodguy]

Any updates ? Maybe someone went to them last week and knows at least newest info?
I dont wanna send DME to fucking russia after all the shit they've done in Ukraine.

[Scottycs]

Mission still isn't doing shit.

Secondly, I don't think that FEMTO attacked Ukraine....

[bm5bullit]

I gave up my 2021 M4 because I waited and waited to see if anybody could come up with an answer for the "catfish" front end on the car and sold it for my M340i. Not exactly the same car but the looks are more in line with the traditional BMW look.

[xnick101]

Originally Posted by Scottycs

Mission still isn't doing shit.

Secondly, I don't think the FEMTO attacked Ukraine....

To add to that, FEMTO is now located in Finland and the turn around time is faster now.

[Justagoodguy]

Originally Posted by Scottycs

Mission still isn't doing shit.

Secondly, I don't think the FEMTO attacked Ukraine....

Dude, femto pays taxes to russia, which contributes to the murder of innocent citizens. An fucking femto dont public any fucking post with a condemnation of the war.
You know, when you come to Ukraine and you hear the siren that warns of an air strike, you see bombed out houses and dead people in the street, you can well understand the hatred of all things russian.
After the third shelling of my city, I hated those bastards and want nothing to do with a country that kills civilians by the thousands.
That is why I am waiting for a decision from femtoevo after the war.
Btw, you still might not understand me, though.

[Vmaxx]

Originally Posted by xnick101

To add to that, FEMTO is now located in Finland and the turn around time is faster now.

They just have a remote location in Finland , they are still based in Russia.

[GD1981]

Aside from the war aspect of it, I’m just apprehensive to ship out my DME overseas, period.
MP sucks btw.

[Scottycs]

Believing all russians support the war is ludicrous... but way to place judgement on 150+ million people. What is happening is ludicrous, but the people in Russia are NOT in control.

Joe Biden is an idiot, but that doesn't mean every US citizen is an idiot.

Originally Posted by Youonlyliveonce

Dude, femto pays taxes to russia, which contributes to the murder of innocent citizens. An fucking femto dont public any fucking post with a condemnation of the war.
You know, when you come to Ukraine and you hear the siren that warns of an air strike, you see bombed out houses and dead people in the street, you can well understand the hatred of all things russian.
After the third shelling of my city, I hated those bastards and want nothing to do with a country that kills civilians by the thousands.
That is why I am waiting for a decision from femtoevo after the war.
Btw, you still might not understand me, though.

[bese60]

Originally Posted by Youonlyliveonce

Dude, femto pays taxes to russia, which contributes to the murder of innocent citizens. An fucking femto dont public any fucking post with a condemnation of the war.
You know, when you come to Ukraine and you hear the siren that warns of an air strike, you see bombed out houses and dead people in the street, you can well understand the hatred of all things russian.
After the third shelling of my city, I hated those bastards and want nothing to do with a country that kills civilians by the thousands.
That is why I am waiting for a decision from femtoevo after the war.
Btw, you still might not understand me, though.

BMW uses Uyguir muslims in China.... yet to see a protest. We all eat the shit the media tells us. not to take away from what is going on but yeah. this is the life we live

[00dyb58]

Originally Posted by MissionPerformance

With that that being said, we have learned our lesson and will not be making this unlock available to public until either one of these 3 things happen:

1) We are able to fully secure the unlock process against data-loggers so no user can log traffic and reverse engineer our process. (Also applies to BMW engineers as that is how the tuning "locks" are created by BMW)
2) Any other major company puts in the hard work and unlocks these 2021 DMEs over OBD2 port with no need to Bench Flash.
3) You, the end users, group up together and force every public tuning company to sign a non compete agreement for the 06/2020+ DMEs. Yeah I know, that's a wishful thinking but worth a try.

What about doing the opposite of #3? Have every customer sign a non-compete? If you can control who uses the software, you can control who signs the agreement. You can accomplish this by requiring an identity and tie it to something they have, like the car or mfa device (NFC, phone, etc).

Account and Car setup

• Customer signs up creating a username and password
• Customer associates their Identity to the VIN of the car
• Customer signs NDA/Non-Compete
• Customer signs off on TOS

Security Controls

Customer will require multiple factors

• What they have: The car sending VIN via ODB
• What they have: NFC device and/or phone tied to a SAML 2.0 Identity controlled by Mission Performance
• What they know: Username & Password tied to an Identity provider

Authentication workflow

Software will only deploy it's payload if the following controls are met

• ODB transmits known VIN to MP software
• MP Software successfully authenticates known VIN
• Software sends a SAML 2.0 response to Mission Performance's IDP (Azure, Okta, etc)
• User either has NFC device, or second factor on phone
• Software sends it's payload after multiple factors are reached, data is sent unencrypted

This assumes a bit and is not easy to implement. Lots of service providers have this in place for their services already. If you can crack the DME, implementing an industry standard SAML 2.0 compliant authentication mechanism should be doable. You can argue a bad actor can simply sign up and then ultimately capture the unencrypted traffic after signing up (to reverse engineer), but so could every public tuning company who signs a non-compete agreement. This would accomplish one of your pre-requisites. It forces your competitor to be a known customer.

EDIT: Here's a general article on implementing SAML in your applications - https://developer.okta.com/docs/guid...on/saml2/main/

[kuzdu]

wonder if the same encryption that was on the TCU is on the ECU. If so i assume xhp can help.

[Justagoodguy]

Originally Posted by Scottycs

Believing all russians support the war is ludicrous... but way to place judgement on 150+ million people. What is happening is ludicrous, but the people in Russia are NOT in control.

Joe Biden is an idiot, but that doesn't mean every US citizen is an idiot.

Originally Posted by bese60

BMW uses Uyguir muslims in China.... yet to see a protest. We all eat the shit the media tells us. not to take away from what is going on but yeah. this is the life we live

Dudes, there's no use arguing with you.
I don't think I'm going to continue this conversation.
The only thing I want to do is to wish that no war comes to your house (as it did to me) and that you understand what I am talking about.

[bfiddy8]

Originally Posted by 00dyb58

What about doing the opposite of #3? Have every customer sign a non-compete? If you can control who uses the software, you can control who signs the agreement. You can accomplish this by requiring an identity and tie it to something they have, like the car or mfa device (NFC, phone, etc).

Account and Car setup

• Customer signs up creating a username and password
• Customer associates their Identity to the VIN of the car
• Customer signs NDA/Non-Compete
• Customer signs off on TOS

Security Controls

Customer will require multiple factors

• What they have: The car sending VIN via ODB
• What they have: NFC device and/or phone tied to a SAML 2.0 Identity controlled by Mission Performance
• What they know: Username & Password tied to an Identity provider

Authentication workflow

Software will only deploy it's payload if the following controls are met

• ODB transmits known VIN to MP software
• MP Software successfully authenticates known VIN
• Software sends a SAML 2.0 response to Mission Performance's IDP (Azure, Okta, etc)
• User either has NFC device, or second factor on phone
• Software sends it's payload after multiple factors are reached, data is sent unencrypted

This assumes a bit and is not easy to implement. Lots of service providers have this in place for their services already. If you can crack the DME, implementing an industry standard SAML 2.0 compliant authentication mechanism should be doable. You can argue a bad actor can simply sign up and then ultimately capture the unencrypted traffic after signing up (to reverse engineer), but so could every public tuning company who signs a non-compete agreement. This would accomplish one of your pre-requisites. It forces your competitor to be a known customer.

EDIT: Here's a general article on implementing SAML in your applications - https://developer.okta.com/docs/guid...on/saml2/main/

I recognize another IT professional when I see one..lol

It's a great idea. But I'm not sure if MP wants to spend time to implement the solution or even spend money hire a third party to do that work.

[georgez949]

Originally Posted by blu_g20b58

This tune is the next Half Life 3

Next gta 6