[Jonnyboi]

I thought that hacking the Voi scooter should have it's own thread as well. How is it coming along for you guys?

[RSB0]

Replaced dashboard only.
Segway app connects, can change lights and name but scooter keeps locked, can't ride it.

Waiting for a reset procedure to come up online or maybe some "stock firmware" flash that can remove reset the lock.

[MikeLee]

some pics of VOI, Segway Kickscooter ES4 - Scooter Sharing Version - SNSC1.0
To view images REGISTER or LOGIN for full access.

To view images REGISTER or LOGIN for full access.

To view images REGISTER or LOGIN for full access.

To view images REGISTER or LOGIN for full access.

[serrt2]

Replacing the main board and dash works but seems tricky to get a legit main board :/ (tips of verified sources are welcome). Otherwise cracking the fw of the main board Would be the best option then you just need a new dash for 30$.

[serrt2]

some pics of VOI,think its ES4,who confirm?

Its a ES4 with a different baseplate, not foldable and lacks rear suspension

[MikeLee]

some pics of VOI,think its ES4,who confirm?

Its a ES4 with a different baseplate, not foldable and lacks rear suspension

Ok,there are versions of VOI foldable,with lacks and rear suspension?

[Ben J]

Nice pictures.
Why go to effort of blocking out serial number, but leave barcode visible ?

[RSB0]

There are 2 kind of scooters, both based on the Ninebot ES4

Old Brainless
-> Folding mechanism
-> Tracker is below the scooter, not connected to control board.
-> Apparently the scooter unlocks by somekind of bluetooth mechanism with some hidden code sent by the app still to be known.
-> Underlights

New Brain (like the one you show)
-> No Folding mechanism
-> Tracker is in front of the scooter connected to the control board.
-> The scooter unlocks like most rentals, using that control that receives unlocking .
-> No underlights

By now there are reports that just replacing the dashboard is not enough because the control board is flashed with somekind of custom firmware that keeps the scooter locked.

Reflashing the controlboard with the original (comercial) firmware probably does the job BUT there are still no know procedure online like there is allready for the xiaomi m365.

Share what you can find.

[Anonymous2]

There are 2 kind of scooters, both based on the Ninebot ES4

Old Brainless
-> Folding mechanism
-> Tracker is below the scooter, not connected to control board.
-> Apparently the scooter unlocks by somekind of bluetooth mechanism with some hidden code sent by the app still to be known.
-> Underlights

New Brain (like the one you show)
-> No Folding mechanism
-> Tracker is in front of the scooter connected to the control board.
-> The scooter unlocks like most rentals, using that control that receives unlocking .
-> No underlights

By now there are reports that just replacing the dashboard is not enough because the control board is flashed with somekind of custom firmware that keeps the scooter locked.

Reflashing the controlboard with the original (comercial) firmware probably does the job BUT there are still no know procedure online like there is allready for the xiaomi m365.

Share what you can find.

Good information you got there. I believe that you could in theory flash the original firmware via JTAG to USB. And a developer has put the original firmware on GitHub, for both the control board and dash. Hope someone can test this out and share us the result.

https://github.com/Ch4rlus/ninebot_firmware

[serrt2]

New Brain (like the one you show)
-> No Folding mechanism
-> Tracker is in front of the scooter connected to the control board.
-> The scooter unlocks like most rentals, using that control that receives unlocking .
-> No underlights

The tracker is just connected to vcc, - and acc so no real communication there BUT the tracker got a bt chip on it so might communicate with that but I don't think so. If you take one out it remains on the map for days (most likely till someone reports it)