{"id":274307,"date":"2026-06-16T07:00:00","date_gmt":"2026-06-16T11:00:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/06\/16\/honda-civics-and-installing-software-with-android-test-keys\/"},"modified":"2026-06-16T07:50:09","modified_gmt":"2026-06-16T11:50:09","slug":"honda-civics-and-installing-software-with-android-test-keys","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/06\/16\/honda-civics-and-installing-software-with-android-test-keys\/","title":{"rendered":"Honda Civics And Installing Software With Android Test Keys"},"content":{"rendered":"

Honda Civics And Installing Software With Android Test Keys<\/a><\/p>\n

https:\/\/hackaday.com\/2026\/06\/16\/honda-civics-and-installing-software-with-android-test-keys\/<\/a><\/p>\n

Publish Date: 2026-06-16 07:00:00<\/a><\/p>\n

Source Domain: hackaday.com<\/a><\/p>\n

As more and more of the \u2018smart\u2019 infotainment systems in cars begin to age out of support, it becomes increasingly more relevant to figure out how to do something with that lump of computer-and-display sitting prominently in the dashboard.<\/p>\n

Here [Eric McDonald]\u2019s reverse-engineering of the 2012-era Android-based infotainment system in a 2021 Honda Civic is an interesting case study, with recently the discovery made that the head unit of these infotainment systems can be updated via USB by using standard Android Open Source Project (AOSP) test keys as these were left on the file system.<\/p>\n

This is a nice update to his initial reverse-engineering back in the innocent days of 2023, when such a facepalm-worthy exploit seemed unimaginable, but then the \u2018s\u2019 in \u2018infotainment\u2019 has always stood for \u2018security\u2019. In this exploit that [Eric] calls the EvilValet attack, it means that anyone with physical access to the USB port inside the car can theoretically run arbitrary code signed with these test keys, as documented in the GitHub project.<\/p>\n

So far this rather foolish security issue has only been confirmed on [Eric]\u2019s 2021 Honda Civic, but considering how those \u2013 often third-party \u2013 infotainment systems tend to get reused and recycled across generations and car variants, it\u2019s quite possible that more Android-based infotainment systems have this vulnerability.<\/p>\n

This exploit is obviously a double-edged sword, as on one hand it\u2019s great that an owner of one of these cars can now basically do whatever they want with said infotainment system, but on the other hand it means that anyone who slides into your car with a USB stick can do the same.<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Honda Civics And Installing Software With Android Test Keys https:\/\/hackaday.com\/2026\/06\/16\/honda-civics-and-installing-software-with-android-test-keys\/ Publish Date: 2026-06-16 07:00:00 Source…<\/p>\n","protected":false},"author":1,"featured_media":274308,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/hackaday.com\/wp-content\/uploads\/2022\/04\/honda-print-featured.jpg","fifu_image_alt":"","footnotes":""},"categories":[46],"tags":[31,57,27],"class_list":["post-274307","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-android","tag-exploit","tag-security","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/274307"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=274307"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/274307\/revisions"}],"predecessor-version":[{"id":274309,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/274307\/revisions\/274309"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/274308"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=274307"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=274307"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=274307"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}