He pulled the trim off one of the rear doors and hooked into the comfort bus with an Arudino and a CAN interface module ... He programmed the Arduino to listen for longer than normal button ...