OnePlus engineering APK exposes backdoor to root access ars_ab.settitle(1204221)

OnePlus 5 Security

OnePlus likely kept Engineer Mode installed on the devices because it assumed it was secure and would remain unnoticed, given that the app is hidden behind a password.

This is not the first time that OnePlus has been accused of compromising privacy of its users.

Phone maker OnePlus is shipping devices with a diagnostics app that allows root superuser access to the smartphone, potentially exposing sensitive user data. The developer further added that he will publish an application for rooting OnePlus devices without unlocking.

Mugabe's house sealed off by army
Political analysts however say the military stayed quiet then because the beneficiary of Mujuru's downfall was the 75-year-old Mnangagwa, a war veteran.

Unfortunately, it seems someone at OnePlus forgot to remove or disable the package before kicking the handsets out to the general public, and as a result multiple users now have access to what is effectively a back door in their Android phones.

Still, the presence of the app brings into question OnePlus' security protocols. The developer also stated that deploying the "DiagEnabled" activity found in the APK with a specific password, it is possible to root the device. It is alarming how easily someone can get access to your smartphones in this day and age. It's used to run system tests for things like GPS, vibration, screen brightness, and also root checking. It's not something that could be achieved remotely, however, you would need the physical OnePlus device connected to a computer running the Android Debug Bridge (ADB) to exploit the vulnerability. But on the other hand, we do hope that OnePlus patches this as well, because it is provides a legitimate backdoor to OnePlus 3, 3T, and OnePlus 5 devices.

Thanks for the heads up, we're looking into it. OnePlus co-founder Carl Pei tweeted that the company will study the claims made by the developer, according to The Mobile Indian. And it looks to be an issue on the OnePlus 5T as well. He discovered that his OnePlus 2 device was sending data to an HTTPS domain, which was transmitted to Amazon Web Services and belongs to OnePlus (open.oneplus.net domain).

Related News:

  • General Electric plans to slice quarterly dividend in half

    General Electric plans to slice quarterly dividend in half

    The stock has a market capitalization of $177,777.73, a price-to-earnings ratio of 16.53, a PEG ratio of 2.15 and a beta of 1.11. Deutsche Bank believes credit analysts will downgrade General Electric's debt after the investor day's developments.
    Thousands protest in Yemen against Saudi-led blockade

    Thousands protest in Yemen against Saudi-led blockade

    According to the UN's aid coordinator in Yemen, Jamie McGoldrick, there was no time to wait for a new inspection system to be set up.
    Softbank set to buy $10 billion stake of Uber

    Softbank set to buy $10 billion stake of Uber

    Crucially, Softbank expects to buy up others' Uber shares at a lower price than it will pay for its direct investment. Uber said Sunday that it agreed to move forward on a proposed investment from SoftBank Group .
  • FDA approves first 'trackable' pill Abilify

    FDA approves first 'trackable' pill Abilify

    Should prescribes take to Abilify MyCite, the new formulation could help Abilify's maker Otsuka Pharmaceutical Co. The technology in the sensors and the patch were developed by Proteus Digital Health .
    Stalker sets Chennai woman, mother & sister on fire; woman dies

    Stalker sets Chennai woman, mother & sister on fire; woman dies

    The woman, identified as Sindhuja, succumbed to the burns at the Kilpauk Medical College (KMC) Hospital (KMC) on Tuesday morning. Doctors at the KMC Hospital said Renuka and Nivedha suffered 49% and 23% burns repectively, mostly on their faces and hands.
    Bill Gates Donates $50 Million To Alzheimer's Research

    Bill Gates Donates $50 Million To Alzheimer's Research

    He said, "It'll take probably 10 years before new theories are tried enough times to give them a high chance of success". Microsoft co-founder Bill Gates , speaks at the Bloomberg Global Business Forum in New York City, U.S., September 20.
  • Nintendo Close To A Deal On Super Mario Bros Movie

    As Kotaku points out, the Wall Street Journal's reports on Nintendo's media haven't always been accurate. That means it will be several years before the movie is ready for release in theaters.
    North Korean defector was shot six times by border troops: UNC

    North Korean defector was shot six times by border troops: UNC

    If North Korea is proven to have fired shots through the area, this would constitute a breach of the armistice agreement. The most famous incident was in 1976, when two American army officers were killed by ax-wielding North Korean soldiers.

    Congressman Cohen Derails Sessions Russia Hearing To Ask About Weed

    Attorney General Jeff Sessions told lawmakers that the Department of Justice is investigating 27 leaks of classified information. Trump has repeatedly criticized his Justice Department for not aggressively probing a variety of conservative concerns.
  • Commission Head Claims Conor McGregor Has Been Pulled From UFC 219

    Commission Head Claims Conor McGregor Has Been Pulled From UFC 219

    In the monied and highly unequal world of the UFC, Dana White's word can not be taken as a byword for consistency. The 29-year-old is due to fight interim champion, Tony Ferguson, on his return to the octagon.
    Donald Trump Jr exchanged messages with Wikileaks during election campaign

    Donald Trump Jr exchanged messages with Wikileaks during election campaign

    They even encouraged the President-elect to ask Australia to make WikiLeaks' founder, Julian Assange, ambassador to the US. Donald Trump's son has released private Twitter messages he exchanged with WikiLeaks in the run-up to the U.S. election.
    Security forces kill 81 terrorists in Somalia

    Security forces kill 81 terrorists in Somalia

    Special Forces attacked the Al-Shabaab camp in Jilib district on Saturday, based in the Middle Jubba region in southern Somalia. Unmanned drones were used to carry out the attacks in coordination with Somalia's government.


Most liked

US House to Adopt Mandatory Sexual Harassment Training for Members, Staffs
Congressional leaders said they are ready to order mandatory sexual harassment prevention training for all offices of the U.S. "They want the system fixed and the perpetrators held accountable", she said.

Emirates Partners With Mercedes-Benz & Jeremy Clarkson For New First Class Suites
It operates services from Dubai to more than 140 cities on board its Boeing 777 planes across six continents. Long-haul carrier Emirates says it will buy 40 Boeing 787-10 Dreamliners in a deal worth some $15.1 billion.

The Talk Finally Replaces Aisha Tyler's Vacant Chair With… Eve!
As for Eve's predecessor, Tyler is expected to return to The Talk from time to time as a guest host when her schedule permits. Eve rounds out the panel that includes show creator Sara Gilbert , Julie Chen , Sharon Osbourne , and Sheryl Underwood .

Florida police suspect same killer in 4 slayings
A body has been found in a Florida neighborhood where three other people have died in apparently random shootings. On Oct. 13, victim Monica Hoffa, 32, was found in a vacant lot in the 1000 block of New Orleans Avenue.

Gamestop Temporarily Halts Used Game Rental Program Roll-out
Along similar lines, Nintendo is set to launch a Netflix-like service for classic retro games on its Switch platform in 2018. According to GameStop's spokesperson, the company ran into several issues with the program in testing it for launch.

IEA: Global Crude Demand to Endure Wave of Electric Cars
But analysts expect the price to not rise much further in coming months as the USA ramps up production. After an upbeat performance last week, oil prices edged lower for a second day Tuesday.

Sergio Aguero 'faints at half-time', taken to hospital during Argentina v Nigeria
Did extra work trying to curtain the Albiceleste forward line after the initial blitz that left them panicking. What time does the Argentina v Nigeria match start?

Russian Federation posts videogame image as 'irrefutable proof' U.S. helps IS
A US Department of Defense spokesman said this incident was just the latest "episode" by the Russians. The images are consistent with a mix of screengrabs from a number of clearly identifiable videos .

Amazon Sells Cloud Assets in China Due to New Rules
Amazon said that it will sell few physical assets only and own the intellectual property of Amazon Web services (AWS) worldwide. Last year Amazon signed a deal with Sinnet so it could operate its services in China, most notably Amazon Web Services.

Pregnant women in urban areas at risk of getting gestational diabetes
We want to see a system where specialist support - from people who understand diabetes - is made available to those who need it. Sudarshan Ballal, chairman, Manipal Hospitals, and Dr Karthik Prabhakar, Consultant and HoD Diabetes and Endocrinology.

Rescue efforts end after deadly Iran quake
Rouhani landed by helicopter in the city of Kermanshah and promised the government would move swiftly to help those left homeless. Hospitals in nearby provinces took in numerous injured, state television said, airing footage of survivors waiting to be treated.

Allen County Public Health supports antibiotic awareness
Taking antibiotics when they are not needed or worse, taking the wrong antibiotic reduces their effectiveness. Councillor Sweet added: "In addition, people take antibiotics for mild infections when they don't need to".

At Least Three Dead, Students Wounded After Shooting At California School
Police fatally shot the attacker after reports of at least seven shooting scenes, including an elementary school, Johnston said. "Multiple students" have been airlifted from the scene according to Assistant Sheriff Phil Johnston, including a 6-year-old.

Militant, Soldier Killed In South Kashmir Encounter
The gunfights erupted in Kulgam and Pulwama districts, south of Srinagar city, the summer capital of Indian-controlled Kashmir. An official said that CASO was launched in Lam forests last night after "specific inputs" about the presence of militants.

Rasgulla belongs to West Bengal, not Odisha
The GI tag was primarily developed with the goal of recognising the unique identity connecting different products and places. The Geographical Identification authorities ruled out today that it is Bengal where the popular rosogolla originated.