Friday, 17 November, 2017

Act surprised: OnePlus phones have a hidden backdoor

OnePlus has left a huge backdoor exploit app in Oxygen OS OnePlus has left a huge backdoor exploit app in Oxygen OS
Melba Vasquez | 14 November, 2017, 17:46

Unlike the user data collection issue, this new PR headache might not be entirely OnePlus's fault. In a Twitter thread, the developer explained how he was able to gain root access and surprisingly, the app has been pre-installed on all current OnePlus phones, and on OxygenOS for OnePlus One. It was unveiled that the app potentially renders all OnePlus devices open to backdoor root access. The app in question is EngineerMode APK, and it has been developed by Qualcomm for the device manufacturers to test hardware components. The startup apparently left a diagnostic app preinstalled on its smartphones since the OnePlus 3 that, with just some simple nudging, can be used to gain root access to the device, with or without the user's knowledge.

The app's primary goal is to test the phones during manufacturing and make sure the device is working correctly, but the app isn't then wiped from the phone. "There's an activity - dubbed 'DiagEnabled" - associated with this app, which if launched with the correct password will give you the root access. The user can access manual tests like root status test, Global Positioning System test or the main activity by sending a command.

Getting root access to a smartphone allows a hacker to access "superuser" mode, making it extremely easy to inject malware with surveillance capabilities.

Root implies to the highest degree of access to an Android operating system that is usually deployed to safeguard the privacy of the user. However, it can be exploited to enable backdoor rooting. OnePlus co-founder Car Pei tweeted that the company will look into the claims made by the developer.

"Thanks for the heads up, we're looking into it", Pei tweeted.

Earlier, according to a post on Christopher Moore's blog, OnePlus is collecting sensitive private data like IMEI numbers, mobile network names and IMSI prefixes, MAC addresses, and more.

Recommended

  • Amazon Music now supports Chromecast on Android devices

    Amazon Music now supports Chromecast on Android devices

    It's also not of much interest to Amazon Prime members who already get Amazon Music Unlimited included in their package. People wanting to give Music Unlimited a go will also have to have an Amazon account as well.
    Special privileges to Dera chief Gurmeet Ram Rahim in Rohtak jail?

    Special privileges to Dera chief Gurmeet Ram Rahim in Rohtak jail?

    An inmate of the Rohtak jail who was recently released on bail, revealed the real story of what exactly happens inside the prison. Ram Rahim has been handed two sentences of ten years each for the two counts of rape, and is locked up in Haryana's Sunaria Jail.
    Strangers 'can use smart toys to message children'

    Strangers 'can use smart toys to message children'

    The brightly coloured talking robot uses Bluetooth to pair with a phone or tablet through an app, but the connection is unsecured. The I-Que Intelligent Robot, has previously featured on Hamleys top toys Christmas list and is available from Argos and Hamleys.
  • Cristiano Ronaldo wants Real Madrid exit?

    Cristiano Ronaldo wants Real Madrid exit?

    Ronaldo would like to leave on June 30 and has made his intentions clear to the Madrid hierarchy. Ronaldo has endured a hard start to the current campaign, with just one La Liga goal all season.
    Oreo reaches 0.3% of the Android market in latest distribution chart

    Oreo reaches 0.3% of the Android market in latest distribution chart

    Older Pixel and Nexus devices have been updated while other OEMs are in the very early stages of testing betas and previews. According to the latest data released by Google , the latest operating system has only reached 0.3 percent of the device.
    Vodafone service revenue falls, ARPU stands at Rs 146 for Q2FY18

    Vodafone service revenue falls, ARPU stands at Rs 146 for Q2FY18

    The company said it has garnered almost 20.7 crore subscribers at the end of September which it said was 3.3% increase YoY. Vodafone India on Tuesday announced its standalone revenue figures for the six monthly period ended September 30, in FY18.
  • Bagley already making history at Duke

    Bagley already making history at Duke

    But Duke (2-0) will have its hands full Tuesday against a team that returns the majority of its rotation players from last season. The Blue Devils got big contributions from its freshmen starters and Allen, who averaged 20 points through the first two games.
    Geely Acquires Flying Car Startup Terrafugia

    Geely Acquires Flying Car Startup Terrafugia

    The Chinese automaker has acquired a U.S. company trying to bring a flying vehicle to market in 2019. The company's first product will be the Transition , which is promised for a market launch in 2019.
    Here We Go: 'TRANSRACIAL' White Guy Says He's Filipino Now

    Here We Go: 'TRANSRACIAL' White Guy Says He's Filipino Now

    And while Dolezal received much criticism, Scheckner believes everyone should be more understanding. He also regards himself as transexual and is considering changing gender in future.
  • FDA approves pill with sensor to digitally track medication ingestion

    FDA approves pill with sensor to digitally track medication ingestion

    Prior to patient use, the FDA urges healthcare providers to ensure that the patient is able to use the system. Patients can also allow their physicians and caregivers access to their data through the internet.
    Bombardier in talks with EgyptAir for $1.1 bln CSeries deal

    Bombardier in talks with EgyptAir for $1.1 bln CSeries deal

    Earlier this month an unnamed European airline said it meant to buy at least 31 of the C-Series planes. Its presence is "adding confidence about the long-term success of the program", he said November 2.
    Earliest known evidence of winemaking found

    Earliest known evidence of winemaking found

    It's thought the prehistoric imbibers of Georgia may have stored their wine in large jars underground, leaving them to ferment. What's more, it was decorated with blobs that the researchers say could be meant to depict clusters of grapes.

Oscar De La Hoya Challenges Conor McGregor To A Fight Oscar De La Hoya Challenges Conor McGregor To A Fight However, he seems to have changed his tune and is keen to face McGregor himself in a fantasy fight that could generate millions. McGregor - who remains under contract to UFC - is yet to respond to De La Hoya's comments.

Over 15000 scientists issue warning to humanity Over 15000 scientists issue warning to humanity For the other factors that went into the warning, the quarter-century since has not been as productive - not by a long-shot. Humanity is now being given a second notice, as illustrated by these alarming trends.

Justice League Is Already Under Fire For an Extremely Disappointing Reason Justice League Is Already Under Fire For an Extremely Disappointing Reason But before we get to see another Gal-power movie (lol), she'll be gracing the silver screen as Diana Prince in Justice League . She was also joined at the event by her Wonder Woman co-star Connie Nielsen .

Legends Raise Over $70k For Hero Cyclist Fired After Flipping Off Trump Legends Raise Over $70k For Hero Cyclist Fired After Flipping Off Trump When asked by the Washington Post whether she regrets her actions, she replied like the American hero she is: "I'd do it again". Virginia is an employment-at-will state, meaning employers can fire people anytime and for any reason. "I am appalled.

Euro zone growth, eclipsing USA economy, set to be best in decade Euro zone growth, eclipsing USA  economy, set to be best in decade The euro zone economy grew as expected in the last quarter, according to official data released on Wednesday. It nevertheless promised years of stimulus and left the door open to backtracking.

Telangana ASI Takes Massage From Woman Home Guard, Video Goes Viral Telangana ASI Takes Massage From Woman Home Guard, Video Goes Viral A policeman in Telangana was caught on camera taking a massage from a woman home guard inside the police station. This is the second such incident reported from the state this month, according to the Hindustan Times .

New MSO McLaren 720S unveiled ahead of Dubai motor show debut New MSO McLaren 720S unveiled ahead of Dubai motor show debut The gearshift paddles and steering wheel gain a gold-coloured satin finish that's repeated on the inside of each door. The phrase reads: "Life is measured in achievement, not in years alone", a quote by McLaren's founder, Bruce McLaren.

Greens won't back trade agreement Greens won't back trade agreement It would go beyond traditional deals by including issues like intellectual property, state-owned enterprises and labour rights. And despite Trump's withdrawal from TPP, China won't necessarily find it easy to draw countries fully into its orbit.

Possible serial killer may have struck again, police say Possible serial killer may have struck again, police say Currently, authorities are offering a $41,000 reward for anyone who has information leading to the arrest of a suspect. Police say that they are treating Tuesday's suspicious death as a related case until they know differently.

Coffee Consumption Lowers Both the Risk of Stroke and Heart Failure Coffee Consumption Lowers Both the Risk of Stroke and Heart Failure The study also did not determine whether there is a limit to the amount of coffee consumed that's linked with a beneficial effect. Heart failure is a potentially fatal condition that occurs when the heart is too week to pump blood efficiently around the body.

Fallon's emotional return to 'The Tonight Show' after his Mom's death Fallon's emotional return to 'The Tonight Show' after his Mom's death The presenter said everyone at the show would "continue to work really hard to bring some light and some laughter into the world". Jimmy subsequently thanked his fans for the support they've shown him since the passing of his mother.

This is how long you have to spend your old £10 note This is how long you have to spend your old £10 note Now, the Bank of England has confirmed that from March 1 2018, the old note will no longer be accepted as payment. The Jane Austen notes have a number of features built in that make them particularly hard to forge.

Yemenis protest Saudi-led blockade Yemenis protest Saudi-led blockade Saudi Arabia has accused arch-foe Iran of supplying the ballistic missile which was shot down near Riyadh airport without causing any casualties.

Women, revamp your diet today. You're more prone to diabetes Women, revamp your diet today. You're more prone to diabetes In spite of the fact that so many US citizens have type 2 diabetes, there are still alarming misconceptions about the condition. May has been a vocal supporter of World Diabetes Day tweeting: "When I was diagnosed with Type 1 Diabetes, it came as a shock".

YouTube has removed thousands of videos from extremist cleric Anwar al-Awlaki YouTube has removed thousands of videos from extremist cleric Anwar al-Awlaki Despite his death in a U.S. drone strike in 2011, Awlaki's legacy lived on with more than 70,00o videos accessible on YouTube . A search on Monday morning for the extremist cleric's name now shows 18,300 results, down from a reported 70,000 past year .