Sci-tech

OnePlus left a backdoor in its devices with root access

OnePlus left a backdoor in its devices with root access”

The dust has barely settled on OnePlus' private data collection issue, and already a new challenge has cropped up for the company.

A potentially unsafe backdoor in multiple OnePlus devices has been just unearthed by a knowing developer, revealing a hidden app that can be potentially used to gain root access and take control over the device.

People often tout OnePlus phones as an alternative to the Pixel line now that Google abandoned the Nexus concept of affordable, high-quality phones.

The application in question is called 'EngineerMode, ' which is meant to be used in factories to confirm that the device is working properly. The application is present in all OnePlus devices including 3, 3T and 5. It's even included on OxygenOS for the OnePlus One, but not the original CyanogenOS ROM. The app has the ability to diagnose Global Positioning System, check root status and perform a series of tests.

After tearing apart the phone's libdoor.so library, he managed to obtain root access though bypassing the escalate and isEscalated methods in the DiagEnabled activity.

And if you are thinking how did the developer get the password, it was with the help of some security experts. A malicious app or malware that is built around this loophole would potentially be able to target OnePlus devices and wreck havoc.

In a statement to Android Authority, OnePlus said "We securely transmit analytics in two different streams over HTTPS to an Amazon server". To check out if you have it, go to Settings Apps, and look for Show system apps in any of the menus; search for EngineerMode in the app list. The developer further added that he will publish an application for rooting OnePlus devices without unlocking.



Like this

Latest


14 November 2017
Teravainen's hat trick pushes Canes past Stars with 5-1 victory
His first of the night came on the power play 2:39 into the period, when Jordan Staal found him all alone near the blueline. In third, Teravainen let a shot fly from the left wing as Elias Lindholm screened Bishop on the power play.

14 November 2017
Wales star Davies faces six months out with foot injury
Warren Gatland's side also meet world champions New Zealand on November 25 before hosting South Africa on December 2. Wales face Georgia on Saturday, before taking on New Zealand and South Africa over the following two weekends.

14 November 2017
Case Keenum throws four touchdown passes in win over Redskins
Diggs said he wanted to pay homage to service members, but the Vikings were penalized 15 yards for unsportsmanlike conduct. While it wasn't enough to help the Redskins get a victory over the Vikings, Swearinger has been named Kia MVP of the Game.

14 November 2017
Kuwaiti minister hails Erdogan's upcoming visit
Regional and global developments as well as bilateral relations between Turkey and the Gulf countries will be discussed in detail, the statement added.

14 November 2017
The Gaslamp Killer Suing Sexual Assault Accusers
Contrary to what Chelsea wrote, Bensussen says the women were the ones who propositioned him into having a consensual threesome. He claims the bf's been spreading Chelsea's allegation online.so he's included him in the lawsuit for unspecified damages.

14 November 2017
Buckeye Partners LP (BPL) Announces Earnings Results
The pipeline company reported $0.81 EPS for the quarter, missing the Thomson Reuters' consensus estimate of $0.86 by ($0.05). Four research analysts have rated the stock with a hold rating and seven have assigned a buy rating to the company's stock.

14 November 2017
Who owns Rosogolla? West Bengal wins the misthi battle against Odisha
This matter came to the headlines when the Odisha government talked of getting Geographical Identity (GI) tag for Rasgulla. Mamata Banerjee took to her Twitter account to share the new saying, "Sweet news for us all".

14 November 2017
Walt Disney Company (The) (DIS) Shares Bought by DekaBank Deutsche Girozentrale
Spinnaker invested 0.1% of its portfolio in Walt Disney Co (NYSE:DIS). 115,539 were accumulated by Ashfield Capital Ptnrs Llc. The stock is now moving above its 20-Day Simple Moving Average of 5.83% with a 50-Day Simple Moving Average of 5.76 percent.

14 November 2017
Andre Agassi: 'Roger Federer can't be considered the GOAT'
Boasting a record number of grand slam wins, Roger Federer is considered by many to be the greatest tennis player of all-time. He plays tennis so differently from others", the American said, praising Federer.

14 November 2017
Antares Pharma (ATRS) Earning Somewhat Favorable Press Coverage, Analysis Shows
Short traders are feeling a little more bearish on shares of the company lately if you consider the change in short interest. Piper Jaffray Companies reaffirmed a buy rating on shares of Antares Pharma in a research note on Friday, September 8th.



Recommended