Cheap car stereo from Amazon came loaded with hidden extras

A Honda Civic owner bought a cheap aftermarket car stereo on Amazon, then asked the AI tool Claude to dig into its software. The unit reportedly came with a call recorder and Baidu location services installed before he used it. Security writer Bruce Schneier shared the story on his blog.

What was found

The device is called a head unit. It is the screen and stereo in the middle of the dashboard. According to the report, this one carried a lot of extra software, often called bloatware. A less charitable name is spyware.

• A voice assistant that reportedly used about a third of the unit's processing power, even when idle
• Baidu location services
• A call recorder
• A DAB radio app, which is nearly useless in the U.S.
• Adobe Acrobat, presumably for reading PDFs

The voice assistant also included WebView. That is an Android part that lets apps show web content.

What is not known

The material does not name the brand or model. It also does not say whether the recorder or location tools actually send data anywhere. The findings are reported, not independently confirmed here.

Schneier says the bigger point is that an ordinary person could do this kind of digging with AI help. He expects more stories like it. For shoppers, that may mean more cheap gadgets get inspected, and more hidden extras come to light.