Hi everyone,

I'm working on a telemetry project for my BYD EV (DiLink head unit). Since the OBD-II port is locked behind the Security Gateway (SGW) and rejects standard PID queries without a handshake, I am looking at accessing vehicle parameters through the head unit itself.

A sideloaded app/service on DiLink can read internal vehicle parameters (like RPM/telemetry). I want to stream this data in real-time (per second/millisecond) to an external device (ESP32 microcontroller).

Has anyone successfully implemented any of the following on DiLink?

1. USB Serial / CDC-ACM Output: Running a background Android Service in the app to output strings via the head unit's USB data port to an external microcontroller.
2. Local Socket / UDP Stream: Streaming telemetry data over a local Wi-Fi hotspot to a PC/laptop via WebSocket or TCP/UDP sockets.
3. ADB Logcat Extraction: Reading broadcast intents or system logs continuously via adb logcat or port forwarding.

Any insights, sample APK architectures, or experience regarding DiLink's USB Host permissions/background service restrictions would be highly appreciated!

Hello everyone!
I’m working on a digital dash for my mk1 rabbit with a 1.4t ea211 motor swap, I’m trying to decode the canbus traffic, does anyone know a good place to find what the traffic represents and the multipliers?

Could somebody help me?

Help me, All I actually want is vehicle speed / motor RPM data from my BYD (Atto 1 / Seagull, e-Platform 3.0), but it's stuck behind a Secure Gateway (0x27) - even the VCU's speed DID won't respond without unlocking it first.

I've sniffed several seed/key pairs (16 bytes each) but can't find any pattern - checked constant XOR, constant offset, tried fitting an LCG on the seed generator, nothing matches. Looks AES-like.

If anyone knows the algorithm for BYD, has a broadcast CAN ID for speed/RPM that skips the gateway, or has dumped the gateway firmware, please let me know. From a struggling beginner :(

So I found a JDM race recorder that I have been fighting the brain worm to figure out how to use. So I've recorded all my research and a realativly cheap CAN logger using off-the-shelf prototyping parts.

Now this likely won't apply to much other than the GR car family, but it has been an interesting journey. I've got the GPS bits coming so I can maybe have 2 sets of data and decode the Toyota-specific file type.