Sci-tech

OnePlus left a backdoor in its devices with root access

OnePlus left a backdoor in its devices with root access”

The dust has barely settled on OnePlus' private data collection issue, and already a new challenge has cropped up for the company.

A potentially unsafe backdoor in multiple OnePlus devices has been just unearthed by a knowing developer, revealing a hidden app that can be potentially used to gain root access and take control over the device.

People often tout OnePlus phones as an alternative to the Pixel line now that Google abandoned the Nexus concept of affordable, high-quality phones.

The application in question is called 'EngineerMode, ' which is meant to be used in factories to confirm that the device is working properly. The application is present in all OnePlus devices including 3, 3T and 5. It's even included on OxygenOS for the OnePlus One, but not the original CyanogenOS ROM. The app has the ability to diagnose Global Positioning System, check root status and perform a series of tests.

After tearing apart the phone's libdoor.so library, he managed to obtain root access though bypassing the escalate and isEscalated methods in the DiagEnabled activity.

And if you are thinking how did the developer get the password, it was with the help of some security experts. A malicious app or malware that is built around this loophole would potentially be able to target OnePlus devices and wreck havoc.

In a statement to Android Authority, OnePlus said "We securely transmit analytics in two different streams over HTTPS to an Amazon server". To check out if you have it, go to Settings Apps, and look for Show system apps in any of the menus; search for EngineerMode in the app list. The developer further added that he will publish an application for rooting OnePlus devices without unlocking.



Like this

loading...
loading...

Latest


14 November 2017
Fuming Cristiano Ronaldo shocks Real Madrid: SELL ME!
It seems that the player is not content with the recent offer to renew his contract, as he feels his importance is being devalued by the terms of it.

14 November 2017
Wales star Davies faces six months out with foot injury
Warren Gatland's side also meet world champions New Zealand on November 25 before hosting South Africa on December 2. Wales face Georgia on Saturday, before taking on New Zealand and South Africa over the following two weekends.

14 November 2017
Thermaltake's new product is a gaming chair that cools your butt
There is also a three-button controller that lets you adjust the speed of the fan to get your desired level of cooling. Featuring fans underneath the seat, Thermaltake claims that this is the world's first air-cooled gaming chair.

14 November 2017
Kuwaiti minister hails Erdogan's upcoming visit
Regional and global developments as well as bilateral relations between Turkey and the Gulf countries will be discussed in detail, the statement added.

14 November 2017
Vodafone pre-tax profit plunges over 39% to Rs
EBITDA margin shrunk to 21.4 percent from 29.6 percent, while service revenue dropped about 16 percent to 190.02 billion rupees. The company said it has garnered almost 20.7 crore subscribers at the end of September which it said was 3.3% increase YoY.

14 November 2017
Berry Plastics Group Inc (NYSE:BERY) Trading Up - Short Interest Up 11.88%
The Company operates through three segments: Health, Hygiene & Specialties, Consumer Packaging, and Engineered Materials. A ratio over one indicates an increase in share price over the period. 22 funds opened positions while 50 raised stakes.

14 November 2017
Buckeye Partners LP (BPL) Announces Earnings Results
The pipeline company reported $0.81 EPS for the quarter, missing the Thomson Reuters' consensus estimate of $0.86 by ($0.05). Four research analysts have rated the stock with a hold rating and seven have assigned a buy rating to the company's stock.

14 November 2017
'Free Balochistan Campaign' on London Buses Starts
In its latest campaign, the organisation put up " Free Balochistan " posters on over 100 London public transportation buses. Pakistan government complained about this to the United Kingdom envoy in Islamabad and we assumed that it will stop now.

14 November 2017
'I want to stay at Valencia'
The Belgian was then quizzed on the chance of an early return to parent club United, to which he replied: "No, no. He also added: "I know that I have this clause in the assignment contract and now I have to wait to see.

14 November 2017
1.35 is Apollo Global Management LLC's (NYSE:APO) Institutional Investor Sentiment
Mark Asset holds 0.07% or 11,841 shares in its portfolio. 258 were accumulated by Northwestern Mutual Wealth Management Company. The investment managers in our partner's database reported: 135.71 million shares, up from 123.20 million shares in 2017Q1.