View Full Version : Seicane Headunit - RSNAV Alternative???
circa_survival
12-02-2022, 07:11 AM
Wanted to create a thread for anyone interested in purchasing a new headunit for their A6. I debated purchasing an RSNAV for months and eventually bought the stand-alone interface because of the price compared to the full screen replacement. Then one day I saw an install video on YouTube from a very well trusted, semi famous, A6 owner talking about a Seicane (never heard of them before) headunit that is very similar to the RSNAV but almost HALF THE PRICE! Too good to be true??? I had to find out myself!
Well, fast forward a couple of weeks and my Seicane headunit arrived. I could not have been more excited. However, I soon realized my unit was a little different from what I saw on the installation video. My wiring harness was a little different and my screen was not directly mounted to the mounting bracket. No big deal, I just went along with it and hoped for the best! After having to figure out a few of the nuances with my install vs. the YouTube guide I got the unit installed and up and running. Although....it was mostly in Chinese.
After about a month of emails back and forth with Seicane troubleshooting all of the oddness with the software including but not limited to; my air conditioning displays randomly displaying on the unit (fixed), my unit getting stuck in the MMI screen and not being able to go back to the Android interface (fixed), having outdated software that caused my apps to be all Chinese apps and no Google Play Store (fixed, by someone other than Seicane helping me troubleshoot) I am pretty satisfied with my purchase!
If you are looking for an alternative to the RSNAV, I know...blasphemy, I would give Seicane a look. Just know that the customer service is going to be horrible, especially compared to the community RSNAV has built, and you might have some kinks to work out...I am willing to help if I can!
289556289557289558
Audibellybutton
12-02-2022, 08:35 AM
Yes it is a suitable alternative to the RSnav. In fact here are a lot of suitable and cheaper alternatives with the same or better specs on aliexpress. BUT NOOOO ITS CHINA, well yeah all of these are manufactured in China. From the chips inside of it to the bezel that mounts it. So your choice is buy one from China or buy one from a reseller that buys from china. With that being said, I have purchased android screens from aliexpress for pretty much every vehicle ive ever owned. Never had a bad experience
GermanAuto
12-09-2022, 10:59 AM
What he said^^^ I found the $800 12.3” RSNAV system with the snapdragon 665 processor for $480 shipped from AliExpress, got it in a week. RSNAV sells the same system for $800 and uses snail mail which takes a month and a half now his website says I believe to receive.
So cut out the middle man and save time and money
Audisthesia
12-10-2022, 04:26 AM
What he said^^^ I found the $800 12.3” RSNAV system with the snapdragon 665 processor for $480 shipped from AliExpress, got it in a week. RSNAV sells the same system for $800 and uses snail mail which takes a month and a half now his website says I believe to receive.
So cut out the middle man and save time and money
Got a link to share? I'm sure others would love a 12.3" RSNAV for 480.
Audibellybutton
12-10-2022, 05:09 PM
Got a link to share? I'm sure others would love a 12.3" RSNAV for 480.
https://www.aliexpress.us/item/3256802946864521.html?spm=a2g0o.productlist.0.0.14 47122dm2Q3Hz&algo_pvid=599db043-69ae-4d9b-a3a9-bb31222cda58&algo_exp_id=599db043-69ae-4d9b-a3a9-bb31222cda58-19&pdp_ext_f=%7B%22sku_id%22%3A%2212000028381157422%2 2%7D&pdp_npi=2%40dis%21USD%21840.0%21436.8%21%21%21%21% 21%40210318b816707209546952779ebb31%21120000283811 57422%21sea&curPageLogUid=hobVpOGoQ6Q7
this is just one seller but you can browse and maybe find a better deal for the specs you want
Patrick73RS
12-11-2022, 06:49 PM
Wish they made one that fit in the same location with the same retractable option just a very thin bezel. We loose a lot of screen area due to the bezel size
Akakios
12-11-2022, 06:55 PM
Just a friendly reminder, you're installing an unaudited minicomputer into your car that has plenty of abilities when linked with your phone to call home, etc.
I know some people may not care, but for those that work in extremely sensitive areas, it is something to consider.
That said, if it works and you do not care as you're not in that realm, more power to you. [up]
Audibellybutton
12-11-2022, 07:56 PM
Just a friendly reminder, you're installing an unaudited minicomputer into your car that has plenty of abilities when linked with your phone to call home, etc.
I know some people may not care, but for those that work in extremely sensitive areas, it is something to consider.
That said, if it works and you do not care as you're not in that realm, more power to you. [up]
It might seem like some chinese voodoo magic if you dont understand what it is. But if you did you would not be as afraid. Again, its not for everybody, some people like the oem look. Some people like to update the "dated" parts of their car. I'm one of those guys hence I have facelift LED headlights on my C7 because the stock c7 lights were a little too potato for my taste. I feel the same about the MMI. I mean it was state of the art back in 2013 but its 2022 now,
The android screen basically like a tablet. It functions exactly how an android tablet would function except with much less internal storage. This is easily circumvented by adding a flash drive to the usb port for additional storage but you really wouldn't need that unless you wanted to install a large number of apps on the tablet and exceed the space. You can download any app such as netflix, waze, firefox etc from the play store just as you would on any android device. Android is open source so you're going to see lots of brands that use android operating systems. IOS is exclusive to apple devices so you will not see any other company creating tablets with IOS except for apple. Now with that being said, iphones are completely compatible with the android screen, you can use carplay as well.
Now as for the fear of malicious intent, well nobody can be sure that a chinese factory isnt trying to plant some secret surveillance chips into our electronic devices, i'm not knocking that idea at all, i mean with the state of the world, its not far out at all. But if that were so, all of the chips used in every mobile device and computers, even iphones are manufactured in china. So that fear should apply to pretty much any mobile device. But with these niche automotive android screens, there really isnt much juicy data flowing around so its not a very useful device to implant spyware in as opposed to a phone or a tablet that is for personal use. Most of the juicy data of ours that is compromised comes from our usage of social media and web browsing, our habits and personalities are constantly being tracked and assessed by algorithms and a personalized profile based on your activity is created for every person that uses internet. This data is both used for advertisement, and for malicous things when it gets into the wrong hands, and it is definitely in the wrong hands if you look at these tech companies but that is for the most part out of our control. I dont like google tracking me and trying to build a profile on me, but it is the reality of today. Unlike your typical mobile device you will not be storing sensitive documents or making payments online using your car's MMI so the threat there is significantly less than on other devices.
Now with that being said the difference between this android screen/tablet and other mobile devices is that it does not connect to internet unless you connect it. It does not require any of your personal information to function, unless you wanted to download apps from the playstore. Then google might want you to sign in. That is if you trust google. I mean they arent the most trustworthy people and they have literally all of our data as it is. But lets say you dont trust google and dont want to sign in, you can make a burner email and download apps or you can use the screen and its built in apps without ever even connecting to the internet. If you wanted to use bluetooth you can connect directly to your car as usual and it is the car you are connecting to so all functionalities remain. The screen does not talk to your car, it is the other way around. The Screen has the ability to project the output that the oem screen was receiving just as your oem screen would. But it also has an android operating system and a touch screen.
Again buying one from aliexpress is no different from buying from a company like RSnav, they are simply a reseller of chinese android screens. And the safety risk is less than that of any other mobile device as it does not triangulate your location with gps attenna or wifi scanning it has no connection to anything except your phone, if you link it. If you ever did suspect there was malware on your android screen some how, it can be purged and removed and updated to the most recent and most secure android version just as any other device could. And again, Android is the operating system, it is a trusted operating system that is open source so you will see it used a lot. But no operating system is immune from vulnerabilities. If you are downloading trusted apps from the playstore, even malware should not be a fear. If you start trying to download bootleg apps off of the internet, then you could get potentially get yourself a virus.
Audibellybutton
12-11-2022, 07:58 PM
Wish they made one that fit in the same location with the same retractable option just a very thin bezel. We loose a lot of screen area due to the bezel size
They do. I had one in my last car the A7. It was touch screen and fit in the oem position and retracted, the screen was a lil bigger because it filled out most of the face instead of having that big bezel. I got that one because at the time that was the only version besides the 10.25 inch one, which in my opinion does not look properly sized with the rest of the interior and didnt look right. I like the look of the 12.3 inch screen it fills out the dash much better than the 10.25' in my opinion
Akakios
12-13-2022, 10:28 AM
It might seem like some chinese voodoo magic if you dont understand what it is. But if you did you would not be as afraid. Again, its not for everybody, some people like the oem look. Some people like to update the "dated" parts of their car. I'm one of those guys hence I have facelift LED headlights on my C7 because the stock c7 lights were a little too potato for my taste. I feel the same about the MMI. I mean it was state of the art back in 2013 but its 2022 now,
The android screen basically like a tablet. It functions exactly how an android tablet would function except with much less internal storage. This is easily circumvented by adding a flash drive to the usb port for additional storage but you really wouldn't need that unless you wanted to install a large number of apps on the tablet and exceed the space. You can download any app such as netflix, waze, firefox etc from the play store just as you would on any android device. Android is open source so you're going to see lots of brands that use android operating systems. IOS is exclusive to apple devices so you will not see any other company creating tablets with IOS except for apple. Now with that being said, iphones are completely compatible with the android screen, you can use carplay as well.
Now as for the fear of malicious intent, well nobody can be sure that a chinese factory isnt trying to plant some secret surveillance chips into our electronic devices, i'm not knocking that idea at all, i mean with the state of the world, its not far out at all. But if that were so, all of the chips used in every mobile device and computers, even iphones are manufactured in china. So that fear should apply to pretty much any mobile device. But with these niche automotive android screens, there really isnt much juicy data flowing around so its not a very useful device to implant spyware in as opposed to a phone or a tablet that is for personal use. Most of the juicy data of ours that is compromised comes from our usage of social media and web browsing, our habits and personalities are constantly being tracked and assessed by algorithms and a personalized profile based on your activity is created for every person that uses internet. This data is both used for advertisement, and for malicous things when it gets into the wrong hands, and it is definitely in the wrong hands if you look at these tech companies but that is for the most part out of our control. I dont like google tracking me and trying to build a profile on me, but it is the reality of today. Unlike your typical mobile device you will not be storing sensitive documents or making payments online using your car's MMI so the threat there is significantly less than on other devices.
Now with that being said the difference between this android screen/tablet and other mobile devices is that it does not connect to internet unless you connect it. It does not require any of your personal information to function, unless you wanted to download apps from the playstore. Then google might want you to sign in. That is if you trust google. I mean they arent the most trustworthy people and they have literally all of our data as it is. But lets say you dont trust google and dont want to sign in, you can make a burner email and download apps or you can use the screen and its built in apps without ever even connecting to the internet. If you wanted to use bluetooth you can connect directly to your car as usual and it is the car you are connecting to so all functionalities remain. The screen does not talk to your car, it is the other way around. The Screen has the ability to project the output that the oem screen was receiving just as your oem screen would. But it also has an android operating system and a touch screen.
Again buying one from aliexpress is no different from buying from a company like RSnav, they are simply a reseller of chinese android screens. And the safety risk is less than that of any other mobile device as it does not triangulate your location with gps attenna or wifi scanning it has no connection to anything except your phone, if you link it. If you ever did suspect there was malware on your android screen some how, it can be purged and removed and updated to the most recent and most secure android version just as any other device could. And again, Android is the operating system, it is a trusted operating system that is open source so you will see it used a lot. But no operating system is immune from vulnerabilities. If you are downloading trusted apps from the playstore, even malware should not be a fear. If you start trying to download bootleg apps off of the internet, then you could get potentially get yourself a virus.
I do not understand this voodoo? Well, that is a bit presumptuous of you. [>_<] I have pulled switches from multiple datacenters due to that voodoo. [wrench] [:D].
I understand exactly how this voodoo works due to my job, so let me explain it a bit further to you: when you enable wireless car play on your device, you are giving a clear path to the web via Direct Wi-Fi that CarPlay depends on. Android is not much different. This is a small customized compute unit that uses the Android Auto SDK/Apple CarPlay SDK the same way an OEM would, with the exception that they have "rooted" the SDK so they can deploy it on whatever device they want and not have to have Apple's permission. If you plug into your cable for CarPlay, the internet protocol can be shared there too (that's how internet sharing works via cable or Bluetooth in the PC/Mac world).
It was free advice for Audi enthusiasts from someone who gets paid to do security and architecture for a living - so your choice if you want to follow the free advice, I normally charge a gigantic hourly rate for. [facepalm]
Audibellybutton
12-13-2022, 10:55 AM
I do not understand this voodoo? Well, that is a bit presumptuous of you. [>_<] I have pulled switches from multiple datacenters due to that voodoo. [wrench] [:D].
I understand exactly how this voodoo works due to my job, so let me explain it a bit further to you: when you enable wireless car play on your device, you are giving a clear path to the web via Direct Wi-Fi that CarPlay depends on. Android is not much different. This is a small customized compute unit that uses the Android Auto SDK/Apple CarPlay SDK the same way an OEM would, with the exception that they have "rooted" the SDK so they can deploy it on whatever device they want and not have to have Apple's permission. If you plug into your cable for CarPlay, the internet protocol can be shared there too (that's how internet sharing works via cable or Bluetooth in the PC/Mac world).
It was free advice for Audi enthusiasts from someone who gets paid to do security and architecture for a living - so your choice if you want to follow the free advice, I normally charge a gigantic hourly rate for. [facepalm]
I work in IT too, cybersecurity has been my focal point for the past couple years though. My father is also the chief of cybersecurity for a city government. I can relate to you in that the more you learn about cyber security, the more paranoid you get, and rightfully so. But sometimes this paranoia takes over you. I watch YouTube videos without signing in, because I don’t like an algorithm trying to get to know me and assuming it knows what I like and trying to build an ad profile on me . I use a vpn on my mobile device 24/7. The average person would think yo that’s crazy but if they knew more they would do more.
My point is not and was never to try to convince you to buy one of these. Consider it a virtual way of reaching my hand out and touching your shoulder and saying “it’s okay brother don’t be afraid”
Now for the android screens, none of these come rooted. Yes you can root them if you do desire and have more control over the device if you choose to. Also none of them have built in wireless CarPlay. You could buy a dongle and set it up if you want. And it does not require root access of any sort. It is able to function off of a 3rd party app in the play store that allows the app itself to display CarPlay functions. It is not built in the screen, and it will not work unless you buy the proper dongle and download the associated app which of course, if this rubs you the wrong way, you do not need to add. I have to put emphasis on the “screen” part because that’s what it is. It’s an output device.
I respect your opinion but it is unfounded in this case and there’s no need to put paranoia into people about these android screens when they are safe. If you have a smart tv at home you should be more worried about that. Or if you have an Amazon Alexa or anything of the sort. The NSA has already admitted that they use those devices for mass surveillance.
Is the Chinese Audi c7 android screen a tool for mass surveillance of the people? Not it is not, it is a very niche item that does not have built in data or any connectivity other than the ability to connect to Wifi if you do choose. If you cared enough to do a proper risk assessment you would have the same findings.
Anyways I’m not here to offend, I leave this info up for people to read and come to their own conclusion, I understand the skepticality, I’m the same way, but this is completely safe. You could run the thing without ever connecting to the internet at all if you wanted to, no chance for compromise there. Can’t say that about a phone…
Akakios
12-13-2022, 11:09 AM
no need to put paranoia into people about these android screens when they are safe.
It is NOT safe because you say so, that's not how cybersecurity works at all. It is a computer running unaudited code: you have zero access to the root code. You are giving it a indirect path to the internet TCP/IP protocol via Android Auto or CarPlay communication protocol (the developer documents in both Android and iOS state this).
I understand you do not have CarPlay with Android, which is why I mentioned Android Auto.
In the end, if people want to still stick these in their car, that is fine - I'm merely saying, you have no idea what it's doing and you do not (and no one can say otherwise until they have raw code). You offered one viewpoint of your experience, and I offered a counter viewpoint of warning which is deeply embedded in best security practices set up in the early nineties.
I'm not defending RSNAV and saying they are doing any better.
I want CarPlay too but I'm not about to stick a random computer/tablet into my car with custom code on it that I have no ability to audit. Google and Apple can be tried in court if they mislead customers, RSNAV can disappear just the same way as Seicane could if something was found (as well as any other seller on Ali).
I'm going to bow out now as I have ESXi clusters to dispatch upgrades on, and I've said my concerns and they are somehow translating into DO NOT BUY THIS when that's not what I'm saying. I am saying you need to understand the ramifications of putting in an unaudited device and for those of us with security clearances that cannot be disclosed (due to, you guessed it, security), this is a huge thing we need to watch out for. It is not just data center switches that people have found calling home without permission internationally of which you have zero recourse anymore...
TLDR; we will agree to disagree, which happens. [up]
Audibellybutton
12-13-2022, 11:41 AM
It is NOT safe because you say so, that's not how cybersecurity works at all. It is a computer running unaudited code: you have zero access to the root code. You are giving it a indirect path to the internet TCP/IP protocol via Android Auto or CarPlay communication protocol (the developer documents in both Android and iOS state this).
I understand you do not have CarPlay with Android, which is why I mentioned Android Auto.
In the end, if people want to still stick these in their car, that is fine - I'm merely saying, you have no idea what it's doing and you do not (and no one can say otherwise until they have raw code). You offered one viewpoint of your experience, and I offered a counter viewpoint of warning which is deeply embedded in best security practices set up in the early nineties.
I'm not defending RSNAV and saying they are doing any better.
I want CarPlay too but I'm not about to stick a random computer/tablet into my car with custom code on it that I have no ability to audit. Google and Apple can be tried in court if they mislead customers, RSNAV can disappear just the same way as Seicane could if something was found (as well as any other seller on Ali).
I'm going to bow out now as I have ESXi clusters to dispatch upgrades on, and I've said my concerns and they are somehow translating into DO NOT BUY THIS when that's not what I'm saying. I am saying you need to understand the ramifications of putting in an unaudited device and for those of us with security clearances that cannot be disclosed (due to, you guessed it, security), this is a huge thing we need to watch out for. It is not just data center switches that people have found calling home without permission internationally of which you have zero recourse anymore...
It Is not safe because "I said it is" I have deemed it safe because of the reasons that I explained. I broke It down for you so you could come to the same conclusion. Each vulnerability you keep referring to, android auto and apple CarPlay are not native to the device. None of those are built in. It is at your discretion to add that feature and that 3rd party app if you choose to. But like I said the screen can be ran 100% without ever connecting to any form of internet or connection at all. It is an output device just like the screen that comes in the car and it can function exactly the same way with some additional features. As with most devices its only as safe as your usage of it.
Im not sure where you are getting this "unaudited code" stuff, the device runs on an android operating system, all of the code in its entirety is open source, you can audit it and see exactly how it functions if you wanted to. Android source code has been audited many times over and continues to be updated with security patches just like any other operating system, but there will always be vulnerabilities where internet connectivity is involved. The only "unaudited code" you may introduce to your device is from downloading an unaudited app from the Play Store. Or you could just... not do that.
This is not some alien Chinese technology, it is a regular android device that is manufactured In the same place as all the rest of them.
Your cautiousness is justified, but your statements are presumptuous if you have not owned one or are not familiar with the operation of android devices. I have been using these for years and have put one in almost every car ive had. I am very familiar with it and how it works, the vulnerabilities you pointed out (CarPlay/android auto) are not native to the device and are not necessary for the function of the device at all.
So with that being said, even someone like you could safely enjoy this device without an internet connection just as you would with your oem MMI. Then there are NO vulnerabilities therefore the device is completely safe from unwanted connectivity.
If you do choose to use internet and download apps on your device does this make it "unsafe"? No, but it means you have added more potential vulnerabilities.
If you cannot point out an actual exploit or vulnerability thats built in to the device, then you have to admit (even mentally) that you have no grounds to deem these android screens as "unsafe" and being Chinese is not a solid reason. All of our mobile devices are Chinese.
I must add that I can tell you are well versed in network functionality and network security. A great area of expertise for sure and im sure that you can at least agree that without any network connectivity there is no vulnerability unless someone directly inserted a malicious device into your android screen.
im happy to agree to disagree, thats fair. I just wanted to explain the device more for people who may be interested just as you wanted to explain the reasons why you aren't I think both of our explanations together will provide a good amount of info for anyone looking to come to a conclusion about getting one. Whatever that conclusion may be.
Akakios
12-13-2022, 01:51 PM
It Is not safe because "I said it is" I have deemed it safe because of the reasons that I explained. I broke It down for you so you could come to the same conclusion. Each vulnerability you keep referring to, android auto and apple CarPlay are not native to the device. None of those are built in. It is at your discretion to add that feature and that 3rd party app if you choose to. But like I said the screen can be ran 100% without ever connecting to any form of internet or connection at all. It is an output device just like the screen that comes in the car and it can function exactly the same way with some additional features. As with most devices its only as safe as your usage of it.
Im not sure where you are getting this "unaudited code" stuff, the device runs on an android operating system, all of the code in its entirety is open source, you can audit it and see exactly how it functions if you wanted to. Android source code has been audited many times over and continues to be updated with security patches just like any other operating system, but there will always be vulnerabilities where internet connectivity is involved. The only "unaudited code" you may introduce to your device is from downloading an unaudited app from the Play Store. Or you could just... not do that.
This is not some alien Chinese technology, it is a regular android device that is manufactured In the same place as all the rest of them.
Your cautiousness is justified, but your statements are presumptuous if you have not owned one or are not familiar with the operation of android devices. I have been using these for years and have put one in almost every car ive had. I am very familiar with it and how it works, the vulnerabilities you pointed out (CarPlay/android auto) are not native to the device and are not necessary for the function of the device at all.
So with that being said, even someone like you could safely enjoy this device without an internet connection just as you would with your oem MMI. Then there are NO vulnerabilities therefore the device is completely safe from unwanted connectivity.
If you do choose to use internet and download apps on your device does this make it "unsafe"? No, but it means you have added more potential vulnerabilities.
If you cannot point out an actual exploit or vulnerability thats built in to the device, then you have to admit (even mentally) that you have no grounds to deem these android screens as "unsafe" and being Chinese is not a solid reason. All of our mobile devices are Chinese.
I must add that I can tell you are well versed in network functionality and network security. A great area of expertise for sure and im sure that you can at least agree that without any network connectivity there is no vulnerability unless someone directly inserted a malicious device into your android screen.
im happy to agree to disagree, thats fair. I just wanted to explain the device more for people who may be interested just as you wanted to explain the reasons why you aren't I think both of our explanations together will provide a good amount of info for anyone looking to come to a conclusion about getting one. Whatever that conclusion may be.
I'll bite on the last quote in the spirit of information, so let me break it down why I will not run one yet:
You can see here that all it requires is a simple entitlements XML file which is how most applications request permissions into things behind the scenes. Zero-day attacks on iOS specifically have used these calls successfully in the past. Apple had to lock them down but even then, that requires them to vet the walled garden. When you introduce the SDK that they are running from Android, it's running *SOMETHING* (whether that be XCode or an emulator for the SDK) essentially in the background or some variation in order to display the CarPlay elements.
Specifically, com.apple.developer.carplay-communication
https://developer.apple.com/documentation/carplay/requesting_carplay_entitlements
This is not deep diving on the fact that once you are entitled to communication, you have TCP/IP capabilities; this is how your phone communicates to the unit, does not matter if you are wired or wireless, that capability is how information flows back and forth both to the OS and Apps that you run on the OS. This is called adhoc internet and it's why CarPlay can even work wireless in the first place.
Every OEM that implements CarPlay in the past used a similar approach (the so called second screen in CarPlay world), which is why my 2017 BMW X5 that has CarPlay operates the *EXACT* way aftermarket units do (e.g. you can flip between "OEM/Vanilla" and "CarPlay" because BMW implements the same approach. The difference? BMW is highly audited in the code side of things and Apple will not allow them to sell a vehicle with a buggy system or something that may have security implications.
Anyone having access to the root of CarPlay OR Android Auto could very easily manipulate code and then re-lock people out from reinspecting with encryption. Could RSNAV or Seicane supply root code for us to audit? Doubtful because as you said, they are reselling and from what I can tell modifying things to make them stable or feature enhance. They may have a LOT of hours coding fixes into the OS to make certain elements work and would not want to show those to competitors for obvious reasons.
I am not accusing any current company/vendor of doing these practices, but my job is to literally tell people what they do not understand or how to beat something before they've even thought of it and thus the reason why I said, hello everyone, just a side note here on these little cheap gadgets: cool, but be careful as no one has vetted these and I stand by that because no one has done a packet trace on these at the network level yet (and it's entirely possible to do so on Android, iOS with XCode). I have not bought one to roll the dice and test it myself as I have higher priority items on the list, but rest assured one day I will and then we will see.
To be clear, I'm not anti-Chinese or anti-Chinese products so please do not take it that way, 90% of what we run on daily is made in China and I have no issue with that or my friends and coworkers who are Chinese. I do think this is 2022 and open source should be the standard these days with breach after breach of security and data, especially with something that has direct access to the backbone of my iPhone and microphone.
Elements of my job involve classified material, and I figure with the amount these cars cost, I'm not the only one in these forums that discusses such things that require my equipment to be clean. Better safe than sorry.
Who knows, perhaps one day, if things ever stop being chaotic, I will just design my own with a vanilla Android Auto image and open source it so people can see it from start to finish and build it themselves if they want with a RPi.
Patrick73RS
12-13-2022, 04:18 PM
Is that unit still for sale? I don’t want a fixed unit in my car
Audisthesia
12-13-2022, 06:07 PM
It is NOT safe because you say so, that's not how cybersecurity works at all. It is a computer running unaudited code: you have zero access to the root code. You are giving it a indirect path to the internet TCP/IP protocol via Android Auto or CarPlay communication protocol (the developer documents in both Android and iOS state this).
I understand you do not have CarPlay with Android, which is why I mentioned Android Auto.
In the end, if people want to still stick these in their car, that is fine - I'm merely saying, you have no idea what it's doing and you do not (and no one can say otherwise until they have raw code). You offered one viewpoint of your experience, and I offered a counter viewpoint of warning which is deeply embedded in best security practices set up in the early nineties.
I'm not defending RSNAV and saying they are doing any better.
I want CarPlay too but I'm not about to stick a random computer/tablet into my car with custom code on it that I have no ability to audit. Google and Apple can be tried in court if they mislead customers, RSNAV can disappear just the same way as Seicane could if something was found (as well as any other seller on Ali).
I'm going to bow out now as I have ESXi clusters to dispatch upgrades on, and I've said my concerns and they are somehow translating into DO NOT BUY THIS when that's not what I'm saying. I am saying you need to understand the ramifications of putting in an unaudited device and for those of us with security clearances that cannot be disclosed (due to, you guessed it, security), this is a huge thing we need to watch out for. It is not just data center switches that people have found calling home without permission internationally of which you have zero recourse anymore...
TLDR; we will agree to disagree, which happens. [up]
Many of your claims as to why this Chinese made product should not be put in the car have the very same issues you've pointed out in common your cell phone and the OEM MMI. That phone in your pocket? Yeah, made in China, you don't have access to the root code on it either. Oh, and it definitely can connect via TCP/IP. Something else I figured I'd mention since we're gonng get all security conscious in this thread.. That OEM Audi MMI, yep, you don't have access to its root code either... And for C7.5 it can connect via TCP/IP to the internet too!
In the end, you've managed to derail a thread with your cybersecurity expertise. Good Job!
Akakios
12-13-2022, 06:10 PM
Many of your claims as to why this Chinese made product should not be put in the car have the very same issues you've pointed out in common your cell phone and the OEM MMI. That phone in your pocket? Yeah, made in China. And you don't have access to the root code on it either. Oh, and it definitely can connect via TCP/IP also. Oh, something else funny I figured I'd mention since we're gonna get all security conscious in this thread.. That OEM Audi MMI, yep, you don't have access to its root code either... And for C7.5 it can connect via TCP/IP to the internet too!
In the end, you've managed to derail a thread with your cybersecurity expertise. Good Job!
Deleted. Not worth my effort. I get paid to do this for a living so I’m done and out.
Audisthesia
12-13-2022, 06:18 PM
All companies that are held liable in court if something goes wrong...those sellers from Ali, yes good luck with.
My OEM MMI can not connect to the internet, it's a 2G modem and those do not connect anymore.
I mean if you want to keep spouting off smart ass comments and facts, at least be correct. I posted relevant information to these units at hand. I don't really care if you like my input or not.
No need to get rude. I never said YOUR MMI. Details matter, you should read more carefully before going off. My post clearly states "the OEM MMI" and is further clarified specifically to C7.5. You have a C7, not C7.5
I do appreciate how you acknowledged the fact that I spouted off facts. You posted your opinion & theories on these units at hand; yet provided zero proof they are doing anything unwanted.
Next time you deem something unsafe, provide people with evidence, not opinions & theories.
sepheroth86
12-13-2022, 06:25 PM
I would think that anyone with security clearance would have both a government supplied secure device AND a personal device. But what do I know?
Audisthesia
12-13-2022, 06:36 PM
I would think that anyone with security clearance would have both a government supplied secure device AND a personal device. But what do I know?
I bet you know Android is open source, and therefore one could examine that "root code" he speaks of.
AudiC7Owners
12-13-2022, 06:38 PM
Wanted to create a thread for anyone interested in purchasing a new headunit for their A6. I debated purchasing an RSNAV for months and eventually bought the stand-alone interface because of the price compared to the full screen replacement. Then one day I saw an install video on YouTube from a very well trusted, semi famous, A6 owner talking about a Seicane (never heard of them before) headunit that is very similar to the RSNAV but almost HALF THE PRICE! Too good to be true??? I had to find out myself!
Well, fast forward a couple of weeks and my Seicane headunit arrived. I could not have been more excited. However, I soon realized my unit was a little different from what I saw on the installation video. My wiring harness was a little different and my screen was not directly mounted to the mounting bracket. No big deal, I just went along with it and hoped for the best! After having to figure out a few of the nuances with my install vs. the YouTube guide I got the unit installed and up and running. Although....it was mostly in Chinese.
After about a month of emails back and forth with Seicane troubleshooting all of the oddness with the software including but not limited to; my air conditioning displays randomly displaying on the unit (fixed), my unit getting stuck in the MMI screen and not being able to go back to the Android interface (fixed), having outdated software that caused my apps to be all Chinese apps and no Google Play Store (fixed, by someone other than Seicane helping me troubleshoot) I am pretty satisfied with my purchase!
If you are looking for an alternative to the RSNAV, I know...blasphemy, I would give Seicane a look. Just know that the customer service is going to be horrible, especially compared to the community RSNAV has built, and you might have some kinks to work out...I am willing to help if I can!
289556289557289558
I'm glad the video was helpful to you, but I will say that I took down all my links to the Seicane Product after receiving about 5 messages from people that they were sent units that were completely different from the one that was sent to me for my video. I gave Seicane a solid chance to make it right with these people & they never did. Mine works flawlessly & I'm really happy with it, but that wasn't the case with everyone so I took down the links to it.
Just beware for anyone giving them a shot... you could get lucky and have everything work perfectly, or you could get something completely different. Always a roll of the dice with Chinese aftermarket stuff.
Audibellybutton
12-13-2022, 06:42 PM
Is that unit still for sale? I don’t want a fixed unit in my car
yeah they do heres one, theres more. They are actually less than half the cost of what i paid for mine back when I had my A7 so thats a plus
https://www.aliexpress.us/item/3256804437999127.html?spm=a2g0o.productlist.0.0.7d d8131dKauHQQ&algo_pvid=c2a6227a-4a31-4ea3-b2e1-a275e1e79023&algo_exp_id=c2a6227a-4a31-4ea3-b2e1-a275e1e79023-29&pdp_ext_f=%7B%22sku_id%22%3A%2212000029877616189%2 2%7D&pdp_npi=2%40dis%21USD%21472.0%21302.08%21%21%21%21 %21%402101e9ce16709813651721324e930b%2112000029877 616189%21sea&curPageLogUid=cHfKayFr8cBP
ericw.
12-13-2022, 07:27 PM
If Hillary can get away with a private email server in her home and Swalwell can bang Chinese spies without repercussion, none of us should be concerned with peasant level problems like data security.
Audibellybutton
12-14-2022, 10:01 AM
just a useful tip that goes along with this:
Buying from aliexpress would be the better option because it is a marketplace just like amazon. There are many different sellers and if you have any technical issues or those dudes send you the wrong unit or some weird ishhh like that then you can dispute and get a full refund. Each seller also has ratings and can be removed from the platform for foul play.
Joerodirguez
12-14-2022, 07:23 PM
just a heads up on this thread....go back to that same Youtube video and you will see that the creator of the video discontinued his recommendation for the unit and advises not to purchase it. I went through similar process and it was nothing but a pair and switch tactic by these aliexpress / seine like companies. They send a defective unit, give you a run around, you ask for a refund and they say "jeep it we will only charge you half and then you can sell it on your own".....I highly advise to not by junk from seicane or aliexpress.
Audibellybutton
12-14-2022, 10:59 PM
just a heads up on this thread....go back to that same Youtube video and you will see that the creator of the video discontinued his recommendation for the unit and advises not to purchase it. I went through similar process and it was nothing but a pair and switch tactic by these aliexpress / seine like companies. They send a defective unit, give you a run around, you ask for a refund and they say "jeep it we will only charge you half and then you can sell it on your own".....I highly advise to not by junk from seicane or aliexpress.
Not sure where you got yours, but the ones ive bought of aliexpress over the years have never had any issue. Again i would only buy from aliexpress because they give a full refund for a defective unit and penalize the seller. So at least theres some accountability. You don't get that if you buy from a reseller on their website like Seicane. Sorry to hear you had that experience. Ive never had seicane or rsnav so i cannot speak on those, but the ones I've bought from aliexpress for 4 different cars I've owned were solid. I also have many friends that run the aliexpress ones such as my friend with a lexus IS350 and a friend with an STI. This is a common mod for many platforms.
Trouttdawg
12-18-2022, 05:30 AM
Annnnnnnnnnnnnnnnnnnd, back on topic... @AudiC7Owners. The vids were definitely appreciated (well, all your vids are a HUGE resource to the community, so a HUGE thanks for what you do!). Siecane was touting the one I bought as a 12.3" unit, but it's not. It's 10.25". For me, the software I received was close to yours, but maybe a bit more updated. My unit is running flawlessly the only issue I had was quality control on the wiring harness for the USBs/Sim. There was 1 wire that broke by the connector. I ran mine into the glove box, and while it's still going to be a huge pain in the ass to take the vent and screen out again, I should be able to fish the new lines through, once they respond and send a new one out to me. Other than that. I like the interface and mine is working great. I had an Android Auto/Carplay box that I initially installed and it was a POS. MMI was jittery, cameras shook so bad that they were unusable. This unit is lightyears ahead of that.
AudiC7Owners
12-18-2022, 04:43 PM
Annnnnnnnnnnnnnnnnnnd, back on topic... @AudiC7Owners. The vids were definitely appreciated (well, all your vids are a HUGE resource to the community, so a HUGE thanks for what you do!). Siecane was touting the one I bought as a 12.3" unit, but it's not. It's 10.25". For me, the software I received was close to yours, but maybe a bit more updated. My unit is running flawlessly the only issue I had was quality control on the wiring harness for the USBs/Sim. There was 1 wire that broke by the connector. I ran mine into the glove box, and while it's still going to be a huge pain in the ass to take the vent and screen out again, I should be able to fish the new lines through, once they respond and send a new one out to me. Other than that. I like the interface and mine is working great. I had an Android Auto/Carplay box that I initially installed and it was a POS. MMI was jittery, cameras shook so bad that they were unusable. This unit is lightyears ahead of that.
Awesome to hear man. Glad it's working great for you.
Botbasher
12-19-2022, 12:05 PM
The Seicane is not the only option, nor is it the cheapest...
Unless you are looking for a screen replacement (I was not), here is another option that just updates the electronics. Worked great in my B8.5 and my C7.
$190 shipped with discounts and coupons!
Cheers!
KS
https://www.aliexpress.us/item/3256803721633118.html?spm=a2g0o.cart.0.0.5fe838dax UHClb&mp=1&gatewayAdapt=glo2usa&_randl_shipto=US
msandhu413
12-22-2022, 10:41 AM
Always had bad experience with Seicane units with no support. I would stay away.