Cheap Android car head unit found loaded with bloatware and spyware-like apps
MALWAREredteam/daily · 1 source
- Severity
- Low
- Sources
- 1
What happened
A Civic owner bought a low-cost aftermarket Android head unit from Amazon and used Claude to analyse its firmware, as might be done with a smart TV. The unit shipped with a voice assistant using WebView that reportedly consumed about a third of processing power while idle, Baidu location services, a call recorder, a DAB radio client and Adobe Acrobat. Schneier notes that this illustrates the insecurity of IoT software and that AI is lowering the barrier to reverse engineering.
For IT people · Written by AI from 1 source · Wrong?
What to do
- No action needed: this one is for your information.
General advice for this kind of story
Full story timeline · 1 update
- Fri 30 OctoberBloatware in Aftermarket Auto PartsSchneier on Security
Who reported · 1 outlet
Schneier on Security