OnePlus left a backdoor in its devices capable of root access

Share
OnePlus left a backdoor in its devices capable of root access

OnePlus has recently accused of collecting a vast amount of sensitive private data from users' smartphones in the past and now, the company has been blamed for leaving a backdoor on its devices that is capable of granting root access.

People often tout OnePlus phones as an alternative to the Pixel line now that Google abandoned the Nexus concept of affordable, high-quality phones.

Basically, OnePlus devices contain an app called "EngineerMode, ' which is used for factory testing (to confirm whether or not the unit is working properly)". The application is present in all OnePlus devices including 3, 3T and 5.

As a diagnostic app, EngineerMode has a few tricks to gain entry into parts of the file system and OS functionality unavailable to most apps. It's even included on OxygenOS for the OnePlus One, but not the original CyanogenOS ROM. It is possible to exploit the app to gain root access to a device - all it takes is a simple command and a password that can be determined fairly easily. With the help of a few cybersecurity experts, the required password was discovered, making rooting a OnePlus phone as easy as running a few commands. The developer further added that he will publish an application for rooting OnePlus devices without unlocking.

In a statement to Android Authority, OnePlus said "We securely transmit analytics in two different streams over HTTPS to an Amazon server". In the meantime, you should probably avoid installing any sketchy-looking apps. As one can imagine, it isn't meant for consumers' use and OnePlus' fault is that it didn't remove the app before it shipped the OnePlus phones.

Share

Advertisement

Related Posts

Keenum, Thielen, lead Vikings to fifth straight victory
The Minnesota Vikings picked up a key road win in Week 10 over the Washington Redskins by the score of 38 to 30. The Redskins were just 2-of-4 in the red zone and 5-of-14 on third down.

Narendra Modi visits IRRI, meets indian scientsts
He unveiled a plaque marking the inauguration of the Shri Narendra Modi Resilient Rice Field Laboratory. India's cabinet approved in July a proposal for IRRI to set up a research center in Varanasi, India.

Georgia dethrones Armenia and Iran as oldest-ever wine producer
This finding makes it the oldest know evidence of wine-making in the world, at 6000 BC in the Neolithic period. The domestication of the grape apparently led eventually led to the emergence of a wine culture in the region.

Another Body Found in Tampa Neighborhood Where 3 Were Killed
Currently, authorities are offering a $41,000 reward for anyone who has information leading to the arrest of a suspect. The most recent death is being treated as related to the other three murders, which remain unsolved, police said.

India all-set to test-fire BrahMos cruise missile from Sukhoi fighter jet
The forces so far have inducted only 290-km land and warship-based versions of BrahMos. Initial work has begun for a version of BrahMos that flies at a speed of Mach 5.

WhatsApp is making a new app for these users
Nevertheless, WhatsApp users managed to find a loophole that will allow them to delete messages that are already a few days old. WhatsApp, naturally, hasn't commented on the rumours and there's no word yet as to when the app likely will be released.

Davies ruled out of Six Nations
Wales centre Jonathan Davies has been ruled out for six months with a foot injury sustained in Saturday's defeat to Australia . Davies, who has 65 caps for Wales , will need surgery and will likely also be sidelined for next year's Six Nations tournament.

Credit Suisse Charged by New York State Department
Credit Suisse, like numerous other foreign banks, operates in the United States through foreign branches that are licensed and regulated by NY state.

More bidding on Buffalo Wild Wings?
Credit Agricole S A purchased a new stake in Buffalo Wild Wings during the 1st quarter valued at approximately $424,000. October 26 investment analysts at Wedbush held the company rating at "In-Line" with a current price target of $115.00.

Ace Attorney Switch Compilations Rumored For 2018 Release
We of course need to take all of this with a grain of salt seeing as they aren't official announcements, but it seems like there's a good chance of this all panning out.

© 2015 ExpressNewsline. All Rights reserved.