Science

OnePlus admits to collecting private data without user permission

OnePlus admits to collecting private data without user permission”

Unfortunately the same can not be said for OnePlus, where in a report by software engineer Christopher Moore (via Android Police), he has found that OnePlus has been collecting identifiable analytics data from its users, such as IMEI numbers, MAC addresses, mobile network names, IMSI prefixes, and serial numbers, just to name a few.

Another workaround, which is bit tedious, requires users enable USB debugging via device's Settings (under Developer options), connecting the device to PC via USB and install the Android Bridge software, reports a forum on Hacker News.

In an article published on his blog, Moore demonstrated how personal information coming from his phone was being transferred to OnePlus, without him having given his consent. He noticed an unfamiliar domain while completing the SANS Holiday Hack Challenge and chose to further examine it.

Device information like Phone's IMEI, serial number, cellular number, MAC address, mobile network name, IMSI prefix, and wireless network EESID and BSSID to user data like the reboot, charging, screen timestamps, as well as application timestamps, were being harvested and accessed by OnePlus.

Moore revealed that the data collection is tied to the OnePlus Device Manager and OnePlus Device Manager Provider. Using the the on-device key, Moore was able to see all of the data being sent back to OnePlus' AWS servers.

@chrisdcmoore I've read your article about OnePlus Analytics. It turns out that the Chinese company has been collecting massive amounts of user data without telling anyone about it.

In a statement provided to Android Police, OnePlus said, "We securely transmit analytics in two different streams over HTTPS to an Amazon server". Its failure to provide adequate device support has brought down the brand with heavy criticism from its users in the past year or two. "We do not share any analytics data with outside parties", the company said in a statement. At any rate, the irony here is that OnePlus is breaching its users' privacy to provide better after-sales support.

OnePlus says users can block transmission of usage activity disabling the option in Settings Advanced Join user experience program. While providing justification for the unauthorized data collection as a means of fine-tuning its software and gathering after-sales information, the company confirmed that this part of the phone can't be completely disabled.

"Collecting basic telemetry data is quite a standard-fare but the problem arises when the data is precise enough to identify a user based on the information collected".



Like this

Latest


13 October 2017
+DI Over -DI on Shares of Old Dominion Freig (ODFL)
Shine Investment Advisory Svcs Inc holds 0.03% or 594 shares in its portfolio. (NASDAQ:HBCP) to report earnings on October, 24. It increased, as 34 investors sold ODFL shares while 93 reduced holdings. 39 funds opened positions while 97 raised stakes.

13 October 2017
Earnings Approximations to Watch: Discovery Communications, Inc. (DISCA), Twenty-First Century Fox, Inc
COPYRIGHT VIOLATION WARNING: This report was originally published by TrueBlueTribune and is the property of of TrueBlueTribune. The company reported $0.68 earnings per share (EPS) for the quarter, missing the consensus estimate of $0.72 by ($0.04).

13 October 2017
What Are Analysts Suggestions On Sally Beauty Holdings Inc. (SBH)
The Average Earnings Estimate for the Current Fiscal quarter is $0.48 per share, according to consensus of 13 analysts. The firm had revenue of $998.04 million during the quarter, compared to analysts' expectations of $1 billion.

13 October 2017
Porsche launches subscription program for sports cars and SUVs
The cheapest of two membership plans, called Launch, comes for a not inconsiderable monthly subscription fee of $2,000 (£1,500). Clutch's technology platform will manage customer interaction as well as the end-to-end service delivery for Porsche Passport.

13 October 2017
Fentanyl mostly responsible for new height in BC illicit drug deaths
Ninety per cent of deaths occurred indoors and there were no deaths at supervised consumption or drug-overdose prevention sites. The report found that more than 80 per cent of those who died had fentanyl in their system, up from 67 per cent past year .

13 October 2017
IndusInd Bank net jumps 25% on robust CV loan demand
The company plans to maintain this NIM and use excess margin from retail loans to subsidise good quality corporate book. The capital adequacy ratio (CRAR) for the quarter was 15.63 per cent against 16.18 per cent in the previous quarter.

13 October 2017
Prisoners hurl pool balls at staff during riot
Home Affairs Correspondent Danny Shaw said he understood "tornado teams" of riot officers had been sent to the prison. Long Lartin is a Category A prison, meaning it houses criminals who are seen as highly unsafe to the public.

13 October 2017
GM announces production reduction at Detroit-Hamtramck Assembly plant
GM and its peers have been cutting production at auto plants as consumers have rapidly shifted to buying sport utility vehicles. Impala sales are off 32 percent through September, while Volt sales are down 6 percent and LaCrosse sales are off 21.

13 October 2017
Rep. Collins being reviewed by House Committee on Ethics
The report was published Thursday by the House Ethics Committee pursuant to House rules requiring its public release. The Office of Congressional Ethics recommended on Thursday that one of Trump's biggest supporters in Congress, Rep.

12 October 2017
Raptors no longer staying at Trump-owned NY hotel
If that sounds like a lot, it's worth remembering that Milwaukee Bucks forward Steve Novak was charged $20 for a café latte at Trump SoHo previous year .



Recommended