OnePlus accused of leaving a backdoor to give root access

OnePlus accused of leaving a backdoor to give root access

Baptiste found that OnePlus was shipping devices with the Qualcomm EngineerMode app - which is used by device makers for testing and diagnostics - with its OxygenOS customised version of Google's Android operating system.

OnePlus smartphones including OnePlus 3, 3T and 5 can be rooted without unlocking the bootloader via EngineerMode APK app. The app has the ability to diagnose Global Positioning System, check root status and perform a series of tests.

While the vulnerability allows attackers to use the EngineerMode app to fully compromise devices, a mitigating factor is that local access to devices is needed - no remote exploit is available. Now, another potential threat has arisen on OnePlus devices as an app on several of the company's phones has been revealed to carry root access.

First Digital Pill Approved by FDA Includes Medication Sensor
USA regulators have approved the first pill with a sensor, which can track whether or not patients have taken their medicine. A web-based portal is also available to give physicians and caregivers access to the data, as allowed by a patient.

After tearing apart the phone's libdoor.so library, he managed to obtain root access though bypassing the escalate and isEscalated methods in the DiagEnabled activity.

As the impending launch of the OnePlus 5T nears, the company has once again found itself the subject of controversy. The company already drew criticism earlier this year over its onerous data collection practices, in which the company sucked up sensitive data from user devices and transmitted that information with each device's serial number attached. According to Alderson, the app is installed on some of the OnePlus devices. After bringing it to attention, security outfit NowSecure reverse engineered it and found that it could easily be exploited with a simple ADB command to enable a backdoor into devices that have the application installed. But it also serves as a warning to OnePlus to be particularly careful with the software it leaves on its future phones after they roll off the production line.

Related Articles

  • Federal Bureau of Investigation  report reveals an approximate 5% increase in hate crimes in 2016

    Federal Bureau of Investigation report reveals an approximate 5% increase in hate crimes in 2016

    Minnesota reported 119 hate crimes a year ago , up from 109 in 2015. "Hate crimes demand priority due to their special impact". There were 131 incidents of bias against transgender or gender non-conforming people, making up 1.7 percent of all incidents.
    Tyson Foods, Inc. (TSN) Shares Sold by First Midwest Bank Trust Division

    Tyson Foods, Inc. (TSN) Shares Sold by First Midwest Bank Trust Division

    Finally, Advisors Capital Management LLC increased its position in shares of Tyson Foods by 5.8% in the second quarter. The company had revenue of $10.15 billion for the quarter, compared to the consensus estimate of $9.93 billion.
    Improved Wireless Charging Coming With iOS 11.2

    Improved Wireless Charging Coming With iOS 11.2

    That requires a compatible smartphone, of course, and not all charging pads are compliant with that maximum rate. However, while convenient, it did have some drawbacks compared to plugging in an old-fashioned Lighting cable.
  • Robbers dig 50-feet tunnel to rob bank

    Robbers dig 50-feet tunnel to rob bank

    The bank, incidentally, had not installed CCTV cameras in the locker room to protect the customer's privacy. The police officer said there are 225 lockers are there in the bank, out of which 30 were found empty.
    US Consumers Prefer Stores to Online Shopping for the Holidays

    US Consumers Prefer Stores to Online Shopping for the Holidays

    Have you ever stood in line without your store rewards card? Store policy can change for Black Friday deals. If you have a particular retailer that you like, watch for the release date of their Black Friday ad .
    Ronaldo reveals departure date from Real Madrid

    Ronaldo reveals departure date from Real Madrid

    The Real Madrid forward has had a hard start to the season, managing just one La Liga goal all season. They also claim that Madrid's all time top-scorer can not stand to remain at the club anymore.
  • Photo of cashier helping nervous man count change goes viral

    Photo of cashier helping nervous man count change goes viral

    He then whispered "I'm so sorry" to the other customers waiting in line as he recounted the mound of coins. As the apologizing continued, a Walmart cashier soothed the man's nerves by counting the change together.
    Iran quake toll reaches 422, thousands spend night in open

    Iran quake toll reaches 422, thousands spend night in open

    Meantime, five groups of injured people were transferred to the Iranian capital, Tehran, on Monday to receive further treatments. Iran has declared Tuesday a national day of mourning.
    Hizb terrorist killed in encounter in Kashmir's Kulgam; soldier martyred

    Hizb terrorist killed in encounter in Kashmir's Kulgam; soldier martyred

    An official said that CASO was launched in Lam forests last night after "specific inputs" about the presence of militants. Two encounters are underway in Kulgam and Pulwama areas of Jammu and Kashmir , say media reports.
  • Demand for oil to drop

    Demand for oil to drop

    The IEA also predicts that wind power will become the leading source of electricity generation in the European Union shortly after 2030.
    Saif Ali Khan gifts Taimur a swanky Jeep worth Rs 1.30 crore

    Saif Ali Khan gifts Taimur a swanky Jeep worth Rs 1.30 crore

    Though the price of the auto is pegged at a whopping Rs. 1.07 cr, reportedly Saif shelled out a Rs. 1.3 cr for the ride. Taimur, along with baby Misha and AbRam, are among the most sought after Bollywood star kids by the paparazzi.

    Stock that can flourish your investment - Marathon Oil Corporation (MRO)

    Finally, Mercer Capital Advisers Inc. increased its stake in shares of Marathon Petroleum Corp.by 433.5% in the second quarter. Of the analysts who provided ratings, 14 rated the company a Hold, 2 rated it a Strong Sell, and 7 rated it a Strong Buy.