OnePlus left a backdoor in its devices with root access

OnePlus OxygenOS Root Access Backdoor

OnePlus OxygenOS Root Access Backdoor

The dust has barely settled on OnePlus' private data collection issue, and already a new challenge has cropped up for the company.

A potentially risky backdoor in multiple OnePlus devices has been just unearthed by a knowing developer, revealing a hidden app that can be potentially used to gain root access and take control over the device. They found that the application - used for factory testing - could be easily used to gain root access to phones.

Dubbed "EngineedMode", the app has been created by Qualcomm to most certainly test out hardware, but OnePlus has taken it to itself to tamper with the app, customize it, and preload it on a plethora of devices, including but not limited to the OnePlus 5, OnePlus 3, and OnePlus 3T.

You can also check if this application is installed on your OnePlus device or not. The app has the ability to diagnose Global Positioning System, check root status and perform a series of tests.

On the one hand, it does mean that it will be dead simple to root those three OnePlus phones without even having to unlock the bootloader. With the help of a few cybersecurity experts, the required password was discovered, making rooting a OnePlus phone as easy as running a few commands.

After tearing apart the phone's libdoor.so library, he managed to obtain root access though bypassing the escalate and isEscalated methods in the DiagEnabled activity. A malicious app or malware that is built around this loophole would potentially be able to target OnePlus devices and wreck havoc.

In a statement to Android Authority, OnePlus said "We securely transmit analytics in two different streams over HTTPS to an Amazon server". As one can imagine, it isn't meant for consumers' use and OnePlus' fault is that it didn't remove the app before it shipped the OnePlus phones.

Notícias recomendadas

  • Illegal puppy trade fuelled by Christmas

    Illegal puppy trade fuelled by Christmas

    They should ask to see the mother and pup together, and visit the new pup a few times and get paperwork before taking it home. Buyers should report suspicious sellers and take new puppies to their own vet for a health check as soon as possible.
    The Voice : Énorme changement à venir pour la saison 7

    The Voice : Énorme changement à venir pour la saison 7

    Les tournages commencent aujourd'hui mais comme tous les ans la diffusion démarrera au cours du premier trimestre 2018. Plusieursmédiasfrançais nous apprennent ce matin que The Voice France va changer.

    Ace Attorney series will come to Nintendo Switch

    Speaking to two independent sources, Kotaku UK has learned that Capcom now has plans for three Ace Attorney games for Switch. The game is reportedly in development for both Switch and smartphones, and it's targeting a worldwide release in late 2018.
  • Cristiano Ronaldo reportedly plans to leave Real Madrid

    Cristiano Ronaldo reportedly plans to leave Real Madrid

    Ronaldo would like to leave on June 30 and has made his intentions clear to the Madrid hierarchy. The president of Real Madrid is unwilling to let his leading player go until the summer of 2018.
    Modi visits Jaipur Foot centre in Philippines

    Modi visits Jaipur Foot centre in Philippines

    Modi visited the Mahavir Philippines Foundation in Makati City, an organization that helps give the Jaipur Foot to amputees. The Jaipur Foot is a rubber-based prosthetic leg designed and developed by Indian sculptor Ram Chander Sharma.
    Coupure géante d'électricité en Corse, plus de la moitié de l'île touchée

    Coupure géante d'électricité en Corse, plus de la moitié de l'île touchée

    Une gigantesque panne d'électricité frappe la Corse depuis ce mardi 14 au matin rapporte Corse-Matin . Plus de la moitié des clients EDF de Corse ont été privés d'électricité ce mardi.
  • Trump lands in Philippines, final stop in Asia

    Trump lands in Philippines, final stop in Asia

    Press Secretary Sarah Huckabee Sanders didn't say if Trump had been critical of Duterte's violent war on the illegal drug trade. Prime Minister Jacinda Ardern will tell the Philippine president there have been too many killings in his war against drugs.

    Le trafic est très perturbé mardi en raison d'une panne électrique

    Cette panne provoque également une forte perturbation sur le RER B au moins jusqu'à 11h, indique la RATP. Le RER B est lui aussi fortement perturbé sur toute la ligne.
    The Gaslamp Killer Files Defamation Suit Against Rape Accusers

    The Gaslamp Killer Files Defamation Suit Against Rape Accusers

    He says that he has a witness who saw him purchase drinks for the ladies, who will affirm that he didn't mess with them. He also claims that it was the women who initially propositioned him, rather than the other way around.
  • " "Emmanuel Macron était son ami, aujourd'hui elle " le déteste " — Geneviève de Fontenay

    Alors qu'est ce qu'il reste comme opposition maintenant? Et de fait, elle lance: " C'était mon ami, maintenant je le déteste! ". Alors je lui ai dit que cela aurait été bien qu'il ait mis "les Patriotes démocrates" pour récupérer des socialistes".
    Aldi, Lidl Continue to Take Market Share From Local Grocery Chains -Kantar

    Aldi, Lidl Continue to Take Market Share From Local Grocery Chains -Kantar

    Sales at Iceland increased by 1.1 per cent, with share falling slightly to 2.0 per cent - down from 2.1 per cent a year ago . Kantar said overall United Kingdom grocery sales increased in value by 3.2% year on year in the 12-week period.
    Jordan launches solar project in camp for Syrian refugees

    Jordan launches solar project in camp for Syrian refugees

    The 15 million euro ($17.50 million) project, funded by the German government, will provide electricity in Zaatari camp for up to 14 hours a day, the agency said.

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.