Blog - HAKSTUFF

Introduction Welcome to another infotainment device teardown!

Introduction Now that we’re fresh into the start of 2026, I thought it would be interesting to take a look back at the state of automotive cybersecurity.

Overview Another day, another teardown - and the first blog post of 2026!

For the past 2-or-so years, I’ve been hacking on my car’s infotainment unit - the BMW NBT EVO HU.

Overview Today’s teardown is of the BMW NBT EVO HU, an infotainment unit built by Harman Automotive - sound familiar?

When poking at binaries on a QNX-based system, you may run into an interesting ELF header: The so-called QNX_info section!

Overview Today’s teardown is of the BMW NBT HU infotainment unit, built by Harman Automotive.

I posted about this on Twitter and BlueSky a few months ago, but realized I never documented it here.

There isn’t a lot of content online discussing how to dump a QNX IFS partition, so I thought I’d write up a few paragraphs here to spread the tips and tricks that I’ve learned.

SSH EXFIL Recently, I’ve been obsessed with hacking on embedded QNX systems - inspired by my own car’s head unit!

If you’ve ever used Ghidra to analyze ELFs taken off of embedded devices (routers, automotive modules, etc.) you’re probably highly familiar with this classic message: 0 external symbols resolved, 267 remain unresolved.

Have you heard of ‘border binaries’ before?

In the beginning of December, I published a new tool I wrote for analyzing ELF files!

Here’s your five second tip of the day: Need to install CaringCaribou on a system you don’t have root on?

This is a test post regarding Embedded Systems.

This is a test post that has to do with Firmware Reverse Engineering.

This is a test blog post that has to do with car hacking.

This is my first post on my blog, and I’m using it to check that all of the website’s formatting works correctly on both desktop and mobile.