OnePlus Security Troubles Mount As Root Access Backdoor Discovered In Preinstalled App

OnePlus Security Troubles Mount As Root Access Backdoor Discovered In Preinstalled App

A potentially unsafe backdoor in multiple OnePlus devices has been just unearthed by a knowing developer, revealing a hidden app that can be potentially used to gain root access and take control over the device.

The most disturbing part is that @fs0c131y, the dev that discovered the backdoor, was capable of creating a simple root app for OnePlus devices that makes use of his findings and. even published it on the Google Play Store.

Basically, OnePlus devices contain an app called "EngineerMode, ' which is used for factory testing (to confirm whether or not the unit is working properly)".

Some digging into the deep system apps on OnePlus phones has resulted in the exposure of the vulnerability that OnePlus devices possess. The developer also stated that deploying the "DiagEnabled" activity found in the APK with a specific password, it is possible to root the device. The user can access manual tests like root status test, Global Positioning System test or the main activity by sending a command.

Getting root access to a smartphone allows a hacker to access "superuser" mode, making it extremely easy to inject malware with surveillance capabilities. OnePlus has been alerted to the exploit and CEO Carl Pei has confirmed that the company is looking into it.

The developer further claims that the Chinese company has intentionally left the backdoor in their devices.

Will it affect OnePlus 5T sales?

At the time, OnePlus stated that the whole objective of collecting data was to improve the service. The most recent issue concerned user privacy, as OnePlus has been found to collect too much data from its phones, the kind of user-identifiable information no smartphone maker should get. Following the allegations, OnePlus took some steps, and added the new "opt-in" option for the user experience program.

Related Articles

  • Amazon Music App now supports Chromecast

    Amazon Music App now supports Chromecast

    You can sign up to Amazon Music Unlimited here , and go whole-hog with a Prime membership here . The company is also bringing several curated photo themes.
    Serial killer fears reignited after body found in Seminole Heights

    Serial killer fears reignited after body found in Seminole Heights

    The man was shot just blocks from a memorial honoring the three victims killed in the Seminole Heights neighborhood. Police have released a video of a "person of interest" who was recorded running from the scene of the first murder.
    China has record number of supercomputers in TOP500

    China has record number of supercomputers in TOP500

    By this measure, Fujitsu's K Computer at the RIKEN Advanced Institute for Computational Science in Japan is the top performer. The list, produced twice a year, rates supercomputers based on speed in a benchmark test by experts from Germany and the US.
  • REAL MADRID - Ronaldo wants Blancos exit

    REAL MADRID - Ronaldo wants Blancos exit

    Following Los Blancos' 3-1 reverse against Tottenham in the Champions League, he revealed he was not looking to sign a new deal. Ronaldo only managed one goal in seven La Liga outings this season, which is enough to suggest he may be past his prime.

    Rite Aid Corporation (NYSE:RAD) Quarterly EPS Analysis

    Several analysts have released their opinion on Rite Aid Corporation (NYSE: RAD ), with 1 analysts believing it is a strong buy. It is negative, as 85 investors sold RAD shares while 96 reduced holdings. 50 funds opened positions while 91 raised stakes.
    The Trump-Xi Meeting in Beijing, Very Briefly

    The Trump-Xi Meeting in Beijing, Very Briefly

    Ball, Riley and Hill were taken to the police station in Hangzhou, where they were kept for a number of hours, according to ESPN. White House press secretary Sarah Huckabee Sanders confirmed in an email to the newspaper that Trump raised the issue with Xi.
  • Parents warned of 'worrying' security risks in Christmas 'smart' toys

    Parents warned of 'worrying' security risks in Christmas 'smart' toys

    The I-Que Intelligent Robot, has previously featured on Hamleys top toys Christmas list and is available from Argos and Hamleys. It was found that hackers could send their own voice messages to the toy, and receive the replies from the child.
    Android 8.1 Appears Set to Reduce Inactive App Size, Saving Device Storage

    Android 8.1 Appears Set to Reduce Inactive App Size, Saving Device Storage

    According to the code first spotted by XDA-Developers, Android 8.1 will make apps inactive that haven't been used in a while. This chart is an indication of what version of Android is running on how many devices in the market in terms of percentage.
    Jimmy Fallon pays tribute to mother Gloria during 'Tonight Show' return

    Jimmy Fallon pays tribute to mother Gloria during 'Tonight Show' return

    I think everyone in the audience started sobbing. "It was a lovely coincidence in a attractive performance", he wrote. It's pretty raw stuff, especially from a host who's often accused of being somewhat one-note and superficial.
  • US FDA approves first drug with digital ingestion tracking system

    US FDA approves first drug with digital ingestion tracking system

    Mitchell Mathis, director of the division of Psychiatry Products in the FDA's Center for Drug Evaluation and Research. The sensor in Abilify MyCite is ingestible and can also record when the patients had taken the pill.
    Earliest wine in world found in 8000-year-old jars in Georgia

    Earliest wine in world found in 8000-year-old jars in Georgia

    But this heady drop wasn't the wine we know and love today, and incorporated hawthorn fruit, rice, and honey mead, in addition to grapes.
    Chelsea legend Didier Drogba confirms retirement plans

    Chelsea legend Didier Drogba confirms retirement plans

    The 39-year-old powerhouse made over 380 appearances for Chelsea over two stints, scoring 157 goals. He added, " At some point you have to stop".