Researcher Exposes Critical Security Flaw in Honda Civic Infotainment Systems

This vulnerability reveals a critical weakness in vehicle security: Honda left AOSP test signing keys in production systems, allowing anyone with brief physical access to the car's USB port to execute arbitrary code. The 'Evil Valet' attack demonstrates how connected vehicles' security depends not only on software but also on physical access controls, raising urgent questions about automotive supply chain security and the convergence of vehicle engineering with cybersecurity.