Recently, I'm reading SAE and ISO standards about OBD II. As far as I know, to write memory blocks of ECU, you need to have an authorized access, via seed/key method, mentioned in ISO14230-3 and J2190. My question is, how can those ECU flasher (for example KWP2000 PLUS. I mean those flashers, which could modify memory blocks via diagnostic interface, not those ones which need to desolder chips or do some BDM programming. ) work? Have those seed/key algorithm been cracked?
I just got some information. Is there any relationships between (pass-thru) J2534 and the KWP2000 plus?