一位软件架构师发现2021款本田思域信息娱乐系统存在严重安全漏洞，允许通过前置USB端口安装未经授权的应用程序。该漏洞源于系统依赖公开已知的Android测试密钥进行软件更新，这可能被利用来安装恶意软件。此恶意软件可能访问车辆传感器以录制对话、跟踪位置和捕获视频，然后利用汽车的连接功能窃取数据，但它不会危及驾驶安全系统。 AI
排序理由 该集群描述了特定消费产品的漏洞，而不是新的模型发布或重大的行业转变。
在 Mastodon — mastodon.social 阅读 →
AI 生成摘要 · Google Gemini · 来自 2 个来源。 我们如何撰写摘要 →
A software architect determined that they could practically install anything they want on the infotainment system of their 2021 Honda Civic through the front USB port. While the head unit required a signed AOSP file to update itself, the AOSP test key is publicly known, meaning a…
2021 Honda Civic infotainment system can be jailbroken via USB — flaw uses public Android test keys to in… A software architect determined that they could practically install anything they want on the infotainment system of their 2021 Honda Civic through the front USB port. While…