[Munchkinguy]

He starts with a serial port, then an SSH prompt for a root password, and a bit of searching to find it was made by Harman and that it runs the closed-source realtime OS QNX. From there he finds an official Subaru update, from which he can slowly peel away the layers and deduce the security mechanism. The write-up lays bare his techniques, for example at one point isolating the ARM assembler for a particular function and transplanting it bodily into his own code for investigation.

https://hackaday.com/2019/04/16/jail...-a-subaru-qnx/

[Dunt Dunt Dunt]

What year?

If it was from when Harman still owned QNX.... that's a pretty old software installation.

[Invictus0]

What year?

If it was from when Harman still owned QNX.... that's a pretty old software installation.

The GitHub readme says it's a 2018 Subaru Crosstrek

https://github.com/sgayou/subaru-sta.../doc/README.md