Cheap Android car head unit found loaded with bloatware and spyware-like apps

The article describes AI-assisted reverse engineering of a cheap aftermarket Android head unit bought on Amazon for a Honda Civic. Pre-installed components reportedly included a voice assistant using WebView that used roughly a third of CPU while idle, Baidu location services, a call recorder, a DAB radio client and Adobe Acrobat. No CVEs, affected firmware versions or vendor names are given, and no remediation is stated. The main point is that non-specialists can now audit opaque IoT firmware using AI, so more such findings should be expected.

For security analysts · Written by AI from 1 source · Wrong?