Removed backdoors and built a custom Honda Civic head unit launcher

a user (u/Crunchy-Nut1) on our r/claudecode subreddit community connected claude code to his honda civic's chinese head unit.

he found that:

- a voice assistant was always listening for its wake word and running a hidden webview that consumed ~30% cpu even when nobody was talking - a call recorder was preinstalled on the device handling his bluetooth calls - the firmware had a root backdoor left by the vendor. - a startup script silently installed any apk placed in a hidden folder, then deleted the file. - the vendor's update app could push new firmware remotely. - baidu location services and a vendor log collector were running in the background. - the listing claimed device had 8 cores and android 15. the actual hardware had 4 cores and android 9, with a security patch from october 2021.