According to a member by the name of dave205t, the RSA encryption the 6hp26(TU)/6hp32(TU) has been bypassed. This should allow for uploading a custom file to the TCU finally. For those who don't know, TU stands for technical update and AFAIK, the 6HP26(TU) is the 6HP28 and the 6HP32(TU) was the 6HP34(Link), however was never released to production so I'm not sure exactly what dave205t means. But the good news, is that this method should work for all 6HP transmissions and opens the door to customization of shift points, line pressures, shift speed and possibly transplantation. This can be accomplished using any INPA cable probably much like MHD/bummerboost Flash, however he has yet to decide how he wants to monetize his discovery. This is from dave205t: Other details include the fact that development mode of the DME was not enabled in order for the exploit to work, RayBan81 and Mik325tds have been given test versions of the tool, in which RayBan81 has confirmed writing works on a 325d and Mik325tds has confirmed it working on a 335d(I know, names are confusing). Here is an update from RayBan81 regarding the commercialization of the product: To clear up any confusion about which transmission generation you may have, this is a high value post which i'm reposting here. TL;DR: This only works with 2nd gen, 6HP19TU AKA 6HP21 and the 6HP26TU AKA 6HP28. This will not currently work with the 6HP19 or 6HP26 without additional development not currently planned. And here is another update regarding the status of development and table discovery: We've asked for clarification on what "secure method of flashing" means, most likely a VIN locked flashing process of some kind, in conjunction with safety features to reduce the risk of flashing a brick. UPDATE from DWR: Either way, $100 seems like a good deal to us. Let the transmission tuning begin, I'm ready to see for 7500+ RPM shift points.