There are no obvious debugging menus, no firmware versions listed anywhere, and no clear manufacturer. Starting from scratch, we know virtually nothing about the head unit. The 8-inch models can connect to WiFi networks and theoretically download firmware updates wirelessly, but this functionality doesn't seem to be in use yet. All models support Apple Carplay and Android Auto. A higher trim model has an 8-inch screen, and the top of the line model has the 8-inch screen as well as an embedded GPS mapping system. There are a few SKUs for the head units on the Crosstrek and Impreza. If we can root the base device, we can potentially root every head unit on every vehicle sharing the same platform. The same head unit appears to be used on the 2018+ Crosstrek, as well as the latest Forester and Ascent. In 2017, Subaru launched a new version of their StarLink head unit on the Impreza. Because this isn't an old Android version, we'll have to put a little more work in than usual. If this was Android, we could most likely find plenty of pre-existing PoCs and gain root rather trivially as most vehicle manufacturers never seem to update Android. This vehicle has an interesting head unit that's locked down and running a proprietary, non-Android operating system. Charlie Miller & Chris Valasek's Paperīack in June, I purchased a new car: the 2018 Subaru Crosstrek.

What follows is a technical account of gaining persistent root code execution on a vehicle head unit. This exercise, while perhaps less important than the medical security research I've worked on the past, is a bit more practical and entertaining.

Qnx 6 keygen serial