OnePlus accused of leaving a backdoor to give root access

15 November, 2017, 01:55 | Author: Darren Santiago
  • OnePlus accused of leaving a backdoor to give root access

According to one developer named as Elliot Alderson, OnePlus has an application called as "EngineerMode", which is basically used to check whether the unit is working properly or not in the factory. But Elliot Alderson found that the tool could be exploited by hackers to gain root access to a device, essentially gaining backdoor access into it where they could then take over the phone. If it was overlooked, it is likely the upcoming 5T would have it also, which would necessitate removing the app before the device ships on November 16. They are able to gain root if they have a password to bypass privilege escalation checks.

A staff member from the OnePlus team explained in a forum post that EngineerMode is a diagnostic tool used for factory production line functionality testing and also for IT support as OnePlus customers call in for help.

We've seen several statements by community developers that are anxious because this apk grants root privileges.

Root implies to the highest degree of access to an Android operating system that is usually deployed to safeguard the privacy of the user. "So it's not unsafe, it just means anybody with the password can plug your phone to a computer and take all your data".

While it appears OnePlus is responsible for leaving Engineer Mode on its devices, it is not directly responsible for the application itself or the backdoor it creates. The application was present on several models of OnePlus devices including OnePlus 3, OnePlus 3T and OnePlus 5.

Thanks for the heads up, we're looking into it.

OnePlus' co-founder clarified that the company was collecting data to "better understand general phone behavior and optimize OxygenOS for a better overall user experience". At the time, OnePlus stated that the whole objective of collecting data was to improve the service.

Recommended:

  • Attorney General Jeff Sessions Testifies Before House Lawmakers

    Attorney General Jeff Sessions Testifies Before House Lawmakers

    Attorney General Jeff Sessions told lawmakers that the Department of Justice is investigating 27 leaks of classified information. Conyers began by projecting three tweets Trump posted in recent months calling on the DOJ to investigate Hillary Clinton .
    Mo. AG Investigating Google's Competition, Privacy Practices

    Mo. AG Investigating Google's Competition, Privacy Practices

    Hawley's probe intends to look at how Google collects information, and how and what they share about somebody's online activities. Google didn't immediately respond to a request for comment.
    AT&T ready to fight USA  on Time Warner deal: CEO

    AT&T ready to fight USA on Time Warner deal: CEO

    AT&T has argued against selling off either company's assets, as it believes this would undercut the rationale for the tie-up. The deal's holdup has raised suspicions of political retaliation - even from people who oppose the deal entirely.
  • How to fool Face ID on the iPhone X

    How to fool Face ID on the iPhone X

    A Vietnamese firm claims to have created a mask which can beat Apple's face ID system into unlocking the iPhone X. The company behind the video, Bkav have revealed more details about how they tricked Apple's Face ID with a mask.
    NASCAR at Phoenix: Matt Kenseth wins, but Brad Keselowski advances to championship

    NASCAR at Phoenix: Matt Kenseth wins, but Brad Keselowski advances to championship

    Stage 3: Elliott had the lead with about 10 laps to go, but Kenseth passed him and was able to hold off the youngster for the win. After Lap 235 of 312: A caution from Trevor Bayne's Ford slamming the wall led to Denny Hamlin's first real problem Sunday.
    TripAdvisor's New Warning Label Fails To Offer Clear Safety Message For Travelers

    TripAdvisor's New Warning Label Fails To Offer Clear Safety Message For Travelers

    They have also used it to mark hotels which are suspected of posting fake reviews and to mark when major news events do not reflect the hotel in question.
  • Barbie releases its first-ever Hijabi doll!

    Barbie releases its first-ever Hijabi doll!

    A doll that looks like Ebtehaj issued in the series " shero " (Barbie Shero), which breaks the standard pattern of beauty Barbie. This series of dolls pushing for the recognition of women who violate the boundaries and inspiring the next generation of girls.
    Trump chooses drug executive as health secretary

    Trump chooses drug executive as health secretary

    Azar worked at the pharmaceutical company Eli Lilly for ten years until leaving this past January. Admirers say Azar's drug industry experience should be considered an asset, not a liability.
    Taylor Swift's new album literally crashed iTunes

    Taylor Swift's new album literally crashed iTunes

    For Swifties who have been in it for the long haul, it's a reassuring reminders that old Taylor isn't gone just yet. It begins on " End Game ", with Taylor proclaiming, " And I bury hatchets, but I keep maps of where I put 'em ".
  • GameStop shelves plan for unlimited game rental subscription service

    GameStop shelves plan for unlimited game rental subscription service

    GameStop also asked staff to discard the store's Holiday Guide and replace this week's "weekly ad", according to a source. Customers who already bought the subscription will need to return their game and their pass to get a full refund.
    Philippine President Duterte admits stabbing person to death when he was 16

    Philippine President Duterte admits stabbing person to death when he was 16

    Duterte said in an interview with Esquire that he had stabbed someone to death when he was 17 years old. He even quipped, "I tell the two (Duterte and Trump) to shake hands". " Lay off .
    Week 11's best top-10 showdown?

    Week 11's best top-10 showdown?

    Miami (9-0): The Hurricanes are one of just four Power 5 unbeatens remaining, and probably need to win out to reach the playoff. Alabama could probably lose to Mississippi State and still make the playoff if it won the rest of its games.


Popular

Russian Federation says USA providing cover for Islamic State in Syria
The ministry is investigating its civil employee who attached a wrong photo to illustrate the ministry's statement on Abu Kamal. Hours later, the ministry published an updated statement with a different set of images, which it also said proved their claims.

Australia votes in favour of legalising gay marriage
But it was not made clear what law would be changed and no one knew what legislation they were casting their opinions on. It's been a controversial process, with accusations of ballot-stuffing, homophobic slurs and violence against MPs.

Mini-shuttle glides to safe landing in desert test flight
The company said several hours after the test that the glide flight was a success, and would release more details November 13. The company is also developing a version of its shuttle that could carry as many as seven passengers to low Earth orbit.

George Takei says alleged groping of former model 'simply did not occur'
I said, 'I need to sit down, ' and he said, 'Sit over here, ' and he had the giant yellow beanbag chair. Brunton said he later called Takei at his hotel and asked if he remembered him.

Qualcomm spurns Broadcom's $103 billion takeover proposal
It was also said the offer does not price in the "uncertainty associated with getting the deal approved by regulators". A combination with Broadcom would not have propelled it past industry leaders Intel and Samsung.

Italy Misses World Cup as Sweden Wins Playoff
Sweden did not shine at all in the first leg but did manage to get the favorable 1-0 win with a goal by Jakob Johansson off the bench.

Israel has denied the statement about the downed Russian drone
The reason is obvious, and it's that the Syrian regime no longer has military capabilities due to its defeats. That is why the new Israeli threats are against Hezbollah in both Lebanon and Syria.

Former Michigan man Brady Hoke is a head coach again
Hoke has a 78-70 combined record as a head coach, and he went 11-2 and reached the Sugar Bowl in his first year at MI . According to ESPN, defensive line coach Brady Hoke will take over as interim coach for the remainder of the season.

Portia de Rossi accuses Steven Seagal of sexual harassment
Last week, Julianna Margulies said she was intimidated by Steven Seagal , who showed her a gun in a hotel room. When she arrived Seagal answered the door in wearing only a silk kimono which made her very uncomfortable.

Star Wars' Millennium Falcon parked near golf course in England
The Falcon is hidden from ground-level spies by multicolored shipping containers, but its distinctive shape is evident from above. Parts of "Star Wars Episode VIII: The Last Jedi" were filmed at Longcross Studios , according to the London Evening Standard.