Tech

OnePlus left a backdoor in Oxygen OS that hackers could exploit

OnePlus left a backdoor in Oxygen OS that hackers could exploit

Now, a developer has confirmed that it's possible to obtain root access on OnePlus phones without unlocking them.

On the one hand, it does mean that it will be dead simple to root those three OnePlus phones without even having to unlock the bootloader. The app, developed by Qualcomm, has been essentially designed for OEMs to test hardware components or diagnostic tests on device.

OnePlus users can find the app pre-installed by going into Settings Apps Menu Show System Apps and search for EngineerMode in the app list.

The most disturbing part is that @fs0c131y, the dev that discovered the backdoor, was capable of creating a simple root app for OnePlus devices that makes use of his findings and. even published it on the Google Play Store. "There's an activity - dubbed 'DiagEnabled" - associated with this app, which if launched with the correct password will give you the root access. The app has the ability to diagnose Global Positioning System, check root status and perform a series of tests. It is alarming how easily someone can get access to your smartphones in this day and age. "So it's not unsafe, it just means anybody with the password can plug your phone to a computer and take all your data". However, it can be exploited to enable backdoor rooting.

More news: Possible serial killer may have struck again, police say

Cyber security enthusiast and likely Mr Robot fan, Twitter user "Elliot Alderson" spotted the backdoor in OnePlus' Oxygen OS, which according to XDA Developers, is a diagnostic testing tool supplied by Qualcomm which OnePlus appears to have accidentally left in place on its OnePlus 5, OnePlus 3 and OnePlus 3T handsets. OnePlus co-founder Car Pei tweeted that the company will look into the claims made by the developer.

Thanks for the heads up, we're looking into it.

Not long ago, researchers found out OnePlus phones were collecting data without informing the users. Following the allegations, OnePlus took some steps, and added the new "opt-in" option for the user experience program.


  • Word Diabetes Day: 2.1 Million women die of diabetes yearly

    Word Diabetes Day: 2.1 Million women die of diabetes yearly

    You have to do not forget to keep track and stay on top of a whole new routine and that can be overwhelming. With 72.9 million people now living with diabetes, India is known as the world capital for the disease.
    West Bengal Wins Rosogulla Fight Against Odisha

    West Bengal Wins Rosogulla Fight Against Odisha

    We are very happy and proud that #Bengal has been granted GI ( Geographical Indication) status for Rosogolla", she said. They had also indulged in the celebrations of Rosogolla Dibasa to link the origin of the this sweetmeat to Odisha.

    General Mills, Inc. (GIS) Position Lifted by BlueMountain Capital Management LLC

    Company's sales growth for the past five years is valued at -1.30%, leading it to the present-day share price of $53.28. The stock of Eldorado Gold Corp (USA) (NYSE:EGO) earned "Hold" rating by Canaccord Genuity on Friday, July 28.
  • Trump lands in Philippines, final stop in Asia

    Trump lands in Philippines, final stop in Asia

    Mr Duterte, who once referred to Barack Obama as a "son of a b****" began the talks by telling Mr Trump: "We are your ally". Duterte has been embroiled in controversies ever since he took the Philippines' presidential seat in June a year ago .
    Ontario colleges, faculty clash ahead of contract vote

    Ontario colleges, faculty clash ahead of contract vote

    I have repeated many times to our senior administration "How do you want to be viewed as an employer". Meanwhile, Huckla pointed out that other workers have been impacted financially, too.

    Fury Road Bonus — For Mad Max

    The movie made $378.9 million worldwide, including $154 million domestic, immediately igniting talk of a sequel. It would be wise to stick with him.
  • AWS sells China hardware to local cloud partner

    AWS sells China hardware to local cloud partner

    "Chinese law forbids non-Chinese companies from owning or operating certain technology for the provision of cloud services". The company signed a deal with Sinnet back in September 2016.
    IndiGo Aircraft Hits Wild Boar on Runway During Take-off, All Passengers Safe

    IndiGo Aircraft Hits Wild Boar on Runway During Take-off, All Passengers Safe

    The wild-boar which came on to the runway in the dark unknowingly made it's way to the rear wheel of the aircraft. It is to be seen what steps the airport authorities will take to prevent recurrence of the incident.
    Philippine protesters burn Swastika-shaped effigy of Donald Trump

    Philippine protesters burn Swastika-shaped effigy of Donald Trump

    More than 3,900 pushers and users have been killed in the war on drugs that Duterte declared when he took office past year . Activists later held their protests about a kilometre away from the venue and burned a 13-foot (4-metre) effigy of U.S.
  • Jimmy Fallon pays tribute to mother Gloria during 'Tonight Show' return

    Jimmy Fallon returned to The Tonight Show Starring Jimmy Fallon with a heavy heart after the loss of his mother, Gloria Fallon. In other news, Monday's episode of " Tonight Show " also featured guest appearances by Jeff Daniels and Mary J.
    Here's how long you have left to spend your old £10 notes

    Here's how long you have left to spend your old £10 notes

    The Bank introduced the paper £10 note featuring Charles Darwin in 2000, and it rolled out the new Jane Austen notes in September. They also have an inscription in raised dots that helps blind and partially-sighted users to identify them.
    Warriors All-Star out vs. Magic

    Warriors All-Star out vs. Magic

    Curry is now averaging 25.2 points, 6.7 assists and 4.7 rebounds per game this season. Kevin Durant sat out the Warriors' win against Minnesota last Wednesday.