OnePlus left a backdoor in its devices with root access

OnePlus left a backdoor in its devices with root access

OnePlus left a backdoor in its devices with root access

The dust has barely settled on OnePlus' private data collection issue, and already a new challenge has cropped up for the company.

A potentially risky backdoor in multiple OnePlus devices has been just unearthed by a knowing developer, revealing a hidden app that can be potentially used to gain root access and take control over the device. They found that the application - used for factory testing - could be easily used to gain root access to phones.

Dubbed "EngineedMode", the app has been created by Qualcomm to most certainly test out hardware, but OnePlus has taken it to itself to tamper with the app, customize it, and preload it on a plethora of devices, including but not limited to the OnePlus 5, OnePlus 3, and OnePlus 3T.

You can also check if this application is installed on your OnePlus device or not. The app has the ability to diagnose Global Positioning System, check root status and perform a series of tests.

On the one hand, it does mean that it will be dead simple to root those three OnePlus phones without even having to unlock the bootloader. With the help of a few cybersecurity experts, the required password was discovered, making rooting a OnePlus phone as easy as running a few commands.

After tearing apart the phone's libdoor.so library, he managed to obtain root access though bypassing the escalate and isEscalated methods in the DiagEnabled activity. A malicious app or malware that is built around this loophole would potentially be able to target OnePlus devices and wreck havoc.

In a statement to Android Authority, OnePlus said "We securely transmit analytics in two different streams over HTTPS to an Amazon server". As one can imagine, it isn't meant for consumers' use and OnePlus' fault is that it didn't remove the app before it shipped the OnePlus phones.

Notícias recomendadas

  • Vikings QB Case Keenum throws TD pass, gets left out of celebration

    Vikings QB Case Keenum throws TD pass, gets left out of celebration

    Redskins: Visit the New Orleans Saints on Sunday in a game they now badly need to win given their upcoming schedule. Washington quarterback Kirk Cousins completed 26 of 45 passes for one touchdown but did throw an interception.

    Study shows regular wearables can detect sleep apnea and hypertension

    The discovery potentially opens up the ability for the device to be used as a long-term research tool for these conditions. The last time Cardiogram used DeepHeart on an Apple Watch was to spot irregularities in heart rate rhythms.
    Coupure géante d'électricité en Corse, plus de la moitié de l'île touchée

    Coupure géante d'électricité en Corse, plus de la moitié de l'île touchée

    Une gigantesque panne d'électricité frappe la Corse depuis ce mardi 14 au matin rapporte Corse-Matin . Plus de la moitié des clients EDF de Corse ont été privés d'électricité ce mardi.
  • Fourth Shooting in Tampa Neighborhood Being Terrorized by Possible Serial Killer

    Fourth Shooting in Tampa Neighborhood Being Terrorized by Possible Serial Killer

    Although he is not thought to be a suspect, officials believe the person of interest might have been within range of the murder. Three people were fatally shot in the neighborhood during a 10-day span last month, leading to increased police patrols.
    Syrie : 53 morts dans des frappes aériennes sur un marché

    Syrie : 53 morts dans des frappes aériennes sur un marché

    Cet organisme non gouvernemental avait publié un premier bilan faisant état de 29 morts civils, dont cinq enfants. Ils sont d'ailleurs les parrains, avec l'Iran, du processus de paix signé à Astana, au Kazakhstan.
    The Gaslamp Killer Files Defamation Suit Against Rape Accusers

    The Gaslamp Killer Files Defamation Suit Against Rape Accusers

    He says that he has a witness who saw him purchase drinks for the ladies, who will affirm that he didn't mess with them. He also claims that it was the women who initially propositioned him, rather than the other way around.
  • Bombardier sells 12 planes to EgyptAir

    Bombardier said, earlier this month, that it received a letter of intent from an unnamed European customer for 31 firm C Series orders.
    Andersson ne veut pas entendre parler de Zlatan — Suède

    Andersson ne veut pas entendre parler de Zlatan — Suède

    Et il n'a fallu attendre que quelques minutes pour que son retour en vue de la Coupe du monde soit murmuré. Zlatan en a disputé deux, en 2002 et 2006, sans jamais faire trembler les filets adverses.
    The Voice : Énorme changement à venir pour la saison 7

    The Voice : Énorme changement à venir pour la saison 7

    Les tournages commencent aujourd'hui mais comme tous les ans la diffusion démarrera au cours du premier trimestre 2018. Plusieursmédiasfrançais nous apprennent ce matin que The Voice France va changer.
  • One Tree Hill creator accused of sexual harassment by cast and crew

    One Tree Hill creator accused of sexual harassment by cast and crew

    One of the CW's most successful showrunners has been called out by the cast and writers of one of his biggest hits on November 11. I'm furious and sad and everything else for the women who have sat on that couch next to that man.
    The Home Depot, Inc. (HD): What's the Story?

    The Home Depot, Inc. (HD): What's the Story?

    Analysts on average had expected earnings of $1.82 per share and revenue of $24.55 billion, according to Thomson Reuters I/B/E/S. Home Depot Inc (NYSE:HD) has risen 18.65% since November 13, 2016 and is uptrending. (The) by 1.3% during the second quarter.
    Des élus communistes et Insoumis vont rencontrer Marwan Barghouti

    Des élus communistes et Insoumis vont rencontrer Marwan Barghouti

    Le gouvernement leur reproche également de vouloir rencontrer le dirigeant palestinien emprisonné Marwan Barghouthi. Les autorités israéliennes recommandent donc par avance aux élus français " de ne pas prendre l'avion du tout ".

We are pleased to provide this opportunity to share information, experiences and observations about what's in the news.
Some of the comments may be reprinted elsewhere in the site or in the newspaper.
Thank you for taking the time to offer your thoughts.