OnePlus phones include an easily exploitable backdoor

15 November, 2017, 01:58 | Author: Juana Mckenzie
  • OnePlus Left Behind a Testing App on Its Devices With Backdoor to Root Access Report

According to mobile security researcher Robert Baptiste-otherwise known by the pseudonym Elliot Alderson, a reference to the main character in the television series "Mr. Robot"-smartphones from OnePlus have for years contained a hidden backdoor that would allow root access to the device".

Baptiste found that OnePlus was shipping devices with the Qualcomm EngineerMode app - which is used by device makers for testing and diagnostics - with its OxygenOS customised version of Google's Android operating system. If you have a OnePlus phone, you may be interested - and a little disturbed - to learn that the company is preinstalling an app that acts as a backdoor to root access.

Same-sex marriage laws slated for Thursday
If successful, the Prime Minister has said that parliament should resolve the issue before they break for Christmas. It's been a controversial process, with accusations of ballot-stuffing, homophobic slurs and violence against MPs.

The developer, with the help of few cybersecurity experts, was able to discover the password and was able to root a OnePlus device with few commands.

The Engineer Mode APK is capable of diagnosing Global Positioning System, run automated tests, check root status among other things.

New autonomous NASA space shuttle lands successful test flight
But past year , NASA awarded a second round of contracts , in order to cover cargo shipments to the ISS from 2019 through 2024. Sierra Nevada filed a protest, but the government's General Accounting Office upheld the decision.

OnePlus 5, OnePlus 3T, OnePlus 3 and even some OnePlus One units are vulnerable to root without the need to unlock the bootloader.

Entering the password into the EngineerMode app provides permanent root access to the Android Debug Bridge process. The developer claims that the company has left behind the software intentionally, and he will come out with the application for rooting OnePlus devices without unlocking. Check the name of native library used to check the code: door... The fact that it is preinstalled on handsets is something of a concern, and OnePlus is yet to respond to questions about the app and its potential for exploit.

Injustice 2 Fighter Pack 3 revealed - TMNT join the fight
Atom is set to launch this December 12, with the Enchantress set for release in January, and the Ninja crew in February.

OnePlus CEO, Carl Pel, said his company is "looking into" the backdoor report. Later, Pei confirmed in a blog post that OnePlus it will scale back on data collection on its devices. It is provided to OEMs by Qualcomm engineers to allow them to test their devices.

Recommended:

  • Behold the GOP's Horrific Spectrum of Excuses for Roy Moore

    Behold the GOP's Horrific Spectrum of Excuses for Roy Moore

    But while most Republicans stressed that the allegations needed to be proven before Moore should step down, Sen. Marion County GOP Chair David Hall also didn't seem to think the allegations against Moore were relevant.
    Canada's Trudeau says still more work to be done on TPP

    Canada's Trudeau says still more work to be done on TPP

    But this time, the Canadian prime minister had a somewhat atypical agenda for his face-to-face chat with the Mexican president. It was a stark change in tone from Thursday, when Trump was Xi's guest of honor during a state visit in Beijing.
    TripAdvisor adds new warning 'badges' to warn of sex assaults

    TripAdvisor adds new warning 'badges' to warn of sex assaults

    It will be based on news reports, and comments or reviews from the TripAdvisor community, the New York Times reports. The article indicated the woman's review was removed from the TripAdvisor website.
  • At Least 5 People Dead After Northern California Shooting

    Some 100 law enforcement officers responded to the shooting, and students at the school have been safely evacuated, he added. A man says his roommate is among the victims in Northern California and that his neighbor was the gunman.
    Eminem Links With Beyoncé On New

    Eminem Links With Beyoncé On New "Walk On Water" Single

    We hear his struggle as he shows us what it's like to have such high expectations for everything he does. The bars find Eminem poetically contemplating his own rap mortality.
    Mueller probes Flynn's role in alleged plan to deliver cleric to Turkey

    Mueller probes Flynn's role in alleged plan to deliver cleric to Turkey

    Rohrabacher (R-Costa Mesa) has long advocated for a friendlier relationship between the United States and Russian Federation . The congressman's staff did not immediately return a request for comment Friday, a federal holiday.
  • Parliament will have 2019 vote on final Brexit deal, Davis offers

    Parliament will have 2019 vote on final Brexit deal, Davis offers

    He said the bill must be amended "to provide for a proper, not a fake, meaningful vote before any exit day". But it triggered an immediate backlash from potential Tory rebels.
    Russia's Defence Ministry to investigate wrong photos used on Syria statement

    Russia's Defence Ministry to investigate wrong photos used on Syria statement

    In the meantime, the Russian Defense Ministry published new posts [1, 2] with different imagery and blamed the error on an employee .

    Trump Picks Alex Azar for HHS Secretary

    His earlier stint was general counsel and deputy secretary at the department in the George W Bush administration. He said Azar, whose own Twitter feed is private, would be "a star for better healthcare and lower drug prices".
  • FBI data shows 18 hate crimes logged in South Dakota in 2016

    FBI data shows 18 hate crimes logged in South Dakota in 2016

    In a statement addressing the report Monday, the Anti-Defamation League focused on the overall increase in reported hate crimes. Federal Bureau of Investigation data show hate crimes increased across the country from 5,850 in 2015 to 6,121 crimes in 2016.
    IHeartMedia presents The IHeartRadio Reputation Album Release Party with Taylor Swift

    IHeartMedia presents The IHeartRadio Reputation Album Release Party with Taylor Swift

    The brief explanation is this: Kanye stormed the stage when Taylor won "Best Female Video " over Beyoncé. It's no secret that Taylor has long feuded with Kim and Kanye.
    USA  actor Steven Seagal accused of sexual harassment

    USA actor Steven Seagal accused of sexual harassment

    Via Facebook, Ellen DeGeneres's wife shared a unusual and disturbing encounter she had with the martial artist. The then ran from the office and called her agent, who apparently seemed aware of what might happen.


Popular

Apple iPhone X FaceID crack attempts; do they work?
The mask was made from a combination of 2D, images, 3D printing and some makeup and it apparently cost around $150 to make. Bkav wrote in its blog post that the Face ID is "not an effective security measure" because it can be " fooled by mask".

Mall of America says stabbing incident 'isolated'
While the Macy's store closed early, the Mall of America stayed open and was not placed on lockdown. The reports said two people have been taken to Hennepin County Medical Center in Minneapolis .

Missouri AG Launches Antitrust And Privacy Probe Of Google
He says most people don't realize that Google builds individual user profiles of those who use the company's services. His office is investigating to determine if Google has violated the state's main consumer protection law.

Corvette ZR1 Will Be Fastest and Most Powerful of Its Kind
Both of the rear wings are attached to the car's chassis - something Chevrolet claims will increase strength and stability. Powered by an LT5 supercharged V8, the ZR1 will produce a staggering 755 horsepower and 715 lb. -ft. of torque.

Italy Misses World Cup as Sweden Wins Playoff
Gian Piero Ventura will surely need to make some modifications to his lineup after such a poor performance in Stockholm. Neither team was particularly impressive in the first leg of this matchup but Italy had a very disappointing display.

Kenseth passes Elliott late for Phoenix win, Keselowski advances to title race
Not long after winning the opening stage, Larson wound up in the garage, retired from the race because of an engine issue. This is the fourth straight race he did not complete, two due to engine failure and two to wrecks, dating back to Kansas.

Our Defence Affairs Are Not Negotiable: Iran FM to Macron
Eight reports by the International Atomic Energy Agency (IAEA) have confirmed Iran's full compliance with the agreement. Qassemi. "There are extremely strong concerns about Iran ".

Week 10 Ups and Downs: Minnesota Vikings at Washington Redskins
Just as it did in Week 8, the Vikings hold the Redskins to under 10 points. Players not from Minnesota after the game called it "Duck, Duck, Goose".

Israel has denied the statement about the downed Russian drone
Like the rest of the region, Israel underestimated in the beginning the Iranian infiltration in Syria. That is why the new Israeli threats are against Hezbollah in both Lebanon and Syria.

Air Traffic Controller Charged With Possessing A Weapon Of Mass Destruction
The FAA confirmed to NBC Charlotte that Dandan's access to the airport was terminated following his arrest Friday afternoon. Officers with the CMPD's bomb squad later confirmed that the explosive device in question was a homemade pipe bomb.