BlackWorksInc
New member
I think what BlackWorksInc is saying, and what the TSB implies, is that you can't do what you just did without a passcode, presumably only available from Toyota to a dealer. There is apparently a gaping hole in their security, allowing a generic version of Techstream to bypass the passcode.
That makes it look to me like all of the security resides in the Techstream SW, not in the immobilizer ECM itself. If so, that's a flaw, because the Techstream SW is available to anyone who wants to pay for it, and thus can not be considered secure. The ECM should have code in it to compare an encrypted version of the passcode to an internal value unique to that ECM, and refuse to reset if they don't match.
That's what's confusing for me, because you can't get a Pass Key for reseeding the immobilizer anywhere but Toyota (not the Techstream, it only pulls the Immobilizer code to send to Toyota, they do the crunching and send it back to you); not to mention you need to be a Shop Foreman, Service Manager, or Parts Manager to even get authorization to get that pass key.