First Android malware targeting automotive head units
https://securelist.com/android-head-unit-malware/121106/Open linkView original on reddthat.comSyndicated from the fediverse. Read and engage on the original instance.
View original on reddthat.comhttps://securelist.com/android-head-unit-malware/121106/Open linkView original on reddthat.com
8 replies
Sorry boss, I can’t come in today, I have a virus. No, no, I’m not sick. It’s my car.
Depending on your boss this might not count. I had a terrible boss some 10 years back, the city where I lived experienced a massive snowfall overnight. All public transport came to a standstill and also going by car was very difficult since the snowplows couldn't clean everywhere fast enough.
I contemplated if I should just send a message I am not coming at all but then just waited for public transport to run again before going out. I did send a message to my boss that I will be late because of... isn't it obvious.
So I arrived only 2-3 hours or so late, which was exactly when public transport had picked up again. Saw my boss at work who then proceeded to scold me why I didn't just walk through the snow. Which would have taken 2-3 hours as well, so yeah.
It really pisses me off that public transit is allowed to not run in bad weather
There are a lot of shitty android head units out there with no security; many are OEM head units too!
The fact is that most people get Android head units for one app only; the CarPlay/Android Auto interface.
Most people don’t give a shit about the quality of the Amplifiers, connectivity features or CANBUS integration, they just want to be able to use their personal phone and their steering wheel controls.
A cheap Linux Headunit with no cellular connectivity is fine.
Got a recommendation? I've been looking for such a thing for years!
I’m not making any recommendations, but 7” Linux head units are available on certain online markets.
I’m not testing or reviewing units so if you buy this one and are disappointed in the performance, I accept no liability.
https://a.aliexpress.com/_mOkTGKj
The thing you need to look for is a high-quality DAC and if you are using CarPlay/Android Auto wirelessly, fast Bluetooth.
7” screen units will fit into most vehicles with a Double-DIN aperture and are adequate for CarPlay or Android Auto. Wired CP/AA is usually more reliable than Wireless, as long as you have a good cable and your phone doesn’t draw too much power.
There may be lag in the Wireless interface, but at least your phone won’t go flat.
Is it actually open, or is it Tivoized (i.e. DRM'd)? Is the vendor compliant with the GPL? Is it actually a named distro (whether a normal desktop one or a specialized one like Tizen), or some weird half-proprietary thing? Is there community support for it?
The questions I have about these sorts of things usually have nothing to do with hardware specs or features and everything to do with aspects of the system that aren't ever mentioned in the product listing. Frankly, I'm surprised that the product even mentions the words "Linux system" at all, rather than leaving it completely ambiguous about what OS it uses. Last time I was shopping around, which I'm now realizing was a few years ago at this point, it seemed like half the stuff might've even been running some kind of embedded Windows -- that's how unclear it was.
It is difficult to find exactly what you want, most of the aftermarket Headunits run some Android-based system.
Unless you buy a higher-end brand, they will have a cheap DAC and woeful Bluetooth. A second-hand mainstream brand headunit, like an Alpine ILX702 (or ILX207, depending on your market) may be a smarter choice, if you can get one.