OnePlus engineering APK exposes backdoor to root access ars_ab.settitle(1204221)

OnePlus Left Behind a Testing App on Its Devices With Backdoor to Root Access Report

OnePlus likely kept Engineer Mode installed on the devices because it assumed it was secure and would remain unnoticed, given that the app is hidden behind a password.

This is not the first time that OnePlus has been accused of compromising privacy of its users.

Phone maker OnePlus is shipping devices with a diagnostics app that allows root superuser access to the smartphone, potentially exposing sensitive user data. The developer further added that he will publish an application for rooting OnePlus devices without unlocking.

Rasgulla belongs to West Bengal, not Odisha
The GI tag was primarily developed with the goal of recognising the unique identity connecting different products and places. The Geographical Identification authorities ruled out today that it is Bengal where the popular rosogolla originated.

Unfortunately, it seems someone at OnePlus forgot to remove or disable the package before kicking the handsets out to the general public, and as a result multiple users now have access to what is effectively a back door in their Android phones.

Still, the presence of the app brings into question OnePlus' security protocols. The developer also stated that deploying the "DiagEnabled" activity found in the APK with a specific password, it is possible to root the device. It is alarming how easily someone can get access to your smartphones in this day and age. It's used to run system tests for things like GPS, vibration, screen brightness, and also root checking. It's not something that could be achieved remotely, however, you would need the physical OnePlus device connected to a computer running the Android Debug Bridge (ADB) to exploit the vulnerability. But on the other hand, we do hope that OnePlus patches this as well, because it is provides a legitimate backdoor to OnePlus 3, 3T, and OnePlus 5 devices.

Thanks for the heads up, we're looking into it. OnePlus co-founder Carl Pei tweeted that the company will study the claims made by the developer, according to The Mobile Indian. And it looks to be an issue on the OnePlus 5T as well. He discovered that his OnePlus 2 device was sending data to an HTTPS domain, which was transmitted to Amazon Web Services and belongs to OnePlus (open.oneplus.net domain).

Related News:



Most liked

FDA approves first 'trackable' pill Abilify
Should prescribes take to Abilify MyCite, the new formulation could help Abilify's maker Otsuka Pharmaceutical Co. The technology in the sensors and the patch were developed by Proteus Digital Health .

Gamestop Temporarily Halts Used Game Rental Program Roll-out
Along similar lines, Nintendo is set to launch a Netflix-like service for classic retro games on its Switch platform in 2018. According to GameStop's spokesperson, the company ran into several issues with the program in testing it for launch.

IEA: Global Crude Demand to Endure Wave of Electric Cars
But analysts expect the price to not rise much further in coming months as the USA ramps up production. After an upbeat performance last week, oil prices edged lower for a second day Tuesday.

Hijab-wearing Barbie modelled on US Olympian Ibtihaj Muhammad
The doll will come with a full fencing uniforms, including a sabre and a mask. Ibtihaj Muhammad just announced that Barbie is making a doll in her likeness.

General Electric plans to slice quarterly dividend in half
The stock has a market capitalization of $177,777.73, a price-to-earnings ratio of 16.53, a PEG ratio of 2.15 and a beta of 1.11. Deutsche Bank believes credit analysts will downgrade General Electric's debt after the investor day's developments.

Pregnant women in urban areas at risk of getting gestational diabetes
We want to see a system where specialist support - from people who understand diabetes - is made available to those who need it. Sudarshan Ballal, chairman, Manipal Hospitals, and Dr Karthik Prabhakar, Consultant and HoD Diabetes and Endocrinology.

Taylor Swift Plays 'New Year's Day' in Surprise Performance
Gloria Fallon died "peacefully" on 4 November in hospital in NY . ". and I would squeeze I love you too", he adds. Jimmy Fallon paid tribute to his mom on Monday's show and there couldn't have been a dry eye in the studio.

Allen County Public Health supports antibiotic awareness
Taking antibiotics when they are not needed or worse, taking the wrong antibiotic reduces their effectiveness. Councillor Sweet added: "In addition, people take antibiotics for mild infections when they don't need to".

IPhone X iOS 11.1.1 gets jailbroken
MacRumors originally reported the news after a tip from accessory maker RAVpower . The Qi standard, now at v1.2, actually supports up to 15W being delivered.

New Guidelines Mean Millions More Americans Need to Lower Blood Pressure
Doctor Andrew Calvin of Mayo Clinic Health System says the new guidelines come with the commonality of high blood pressure today. The new standard means that almost half (46 percent) of the US population will be defined as having high blood pressure .

HTC launches Vive Focus for China, drops plans for Daydream headset
As previously announced , the Vive Focus runs on a Qualcomm Snapdragon 835 chip and uses inside-out positional tracking. HTC has not given any pricing or release dates for the Focus but did say it would initially be available in only China.

EgyptAir signs letter of intent for up to 24 Bombardier CS300s
Bombardier says that based on the list price of the CS300, a firm order for 12 aircraft would be valued at about $1.4 billion. Cromer said both sales had already being under negotiation and were not the result of the Airbus venture.

Congressman Cohen Derails Sessions Russia Hearing To Ask About Weed
Attorney General Jeff Sessions told lawmakers that the Department of Justice is investigating 27 leaks of classified information. Trump has repeatedly criticized his Justice Department for not aggressively probing a variety of conservative concerns.

Security forces kill 81 terrorists in Somalia
Special Forces attacked the Al-Shabaab camp in Jilib district on Saturday, based in the Middle Jubba region in southern Somalia. Unmanned drones were used to carry out the attacks in coordination with Somalia's government.

Tiffany Haddish addresses Hollywood sexual misconduct allegations in SNL opening monologue
The first black female stand-up comedian to host Saturday Night Live , Tiffany Haddish , also talked about Hollywood's sexual assault allegations.