Tech

OnePlus left a backdoor in Oxygen OS that hackers could exploit

OnePlus left a backdoor in Oxygen OS that hackers could exploit

Now, a developer has confirmed that it's possible to obtain root access on OnePlus phones without unlocking them.

On the one hand, it does mean that it will be dead simple to root those three OnePlus phones without even having to unlock the bootloader. The app, developed by Qualcomm, has been essentially designed for OEMs to test hardware components or diagnostic tests on device.

OnePlus users can find the app pre-installed by going into Settings Apps Menu Show System Apps and search for EngineerMode in the app list.

The most disturbing part is that @fs0c131y, the dev that discovered the backdoor, was capable of creating a simple root app for OnePlus devices that makes use of his findings and. even published it on the Google Play Store. "There's an activity - dubbed 'DiagEnabled" - associated with this app, which if launched with the correct password will give you the root access. The app has the ability to diagnose Global Positioning System, check root status and perform a series of tests. It is alarming how easily someone can get access to your smartphones in this day and age. "So it's not unsafe, it just means anybody with the password can plug your phone to a computer and take all your data". However, it can be exploited to enable backdoor rooting.

More news: Rs 1400 crore unearthed during raids on Sasikala clan, Jaya TV

Cyber security enthusiast and likely Mr Robot fan, Twitter user "Elliot Alderson" spotted the backdoor in OnePlus' Oxygen OS, which according to XDA Developers, is a diagnostic testing tool supplied by Qualcomm which OnePlus appears to have accidentally left in place on its OnePlus 5, OnePlus 3 and OnePlus 3T handsets. OnePlus co-founder Car Pei tweeted that the company will look into the claims made by the developer.

Thanks for the heads up, we're looking into it.

Not long ago, researchers found out OnePlus phones were collecting data without informing the users. Following the allegations, OnePlus took some steps, and added the new "opt-in" option for the user experience program.


  • Possible serial killer may have struck again, police say

    Possible serial killer may have struck again, police say

    Hegarty said that investigators are treating the death as related to the three recent unsolved murders in Seminole Heights. The area where Felton's body was found is close to where three other murders occurred in Seminole Heights last month.
    Trump lands in Philippines, final stop in Asia

    Trump lands in Philippines, final stop in Asia

    Mr Duterte, who once referred to Barack Obama as a "son of a b****" began the talks by telling Mr Trump: "We are your ally". Duterte has been embroiled in controversies ever since he took the Philippines' presidential seat in June a year ago .
    Honor 7X to be sold by Amazon in India; registrations open

    Honor 7X to be sold by Amazon in India; registrations open

    As a bumper prize, seven lucky registered Amazon .in users will also win holiday packages from Yatra worth Rs. 75,000. Those who pre-register the Honor 7X on Amazon India will be able to win power banks, earphones and the phone itself.
  • 'World's oldest wine' found in 8000-year-old jars in Georgia

    'World's oldest wine' found in 8000-year-old jars in Georgia

    These two sites, Shulaveris Gora and Gadachrili Gora, dated back from 6000 to 4500 BC, and hid some remains of several ceramic jars.

    Fury Road Bonus — For Mad Max

    The movie made $378.9 million worldwide, including $154 million domestic, immediately igniting talk of a sequel. It would be wise to stick with him.

    Tesco gets green light for £3.7bn Booker takeover

    The CMA was previously expected to recommend that disposals might be needed to alleviate competition concerns. It said they argued that Booker could raise prices to the shops it supplies.
  • Vikings QB Case Keenum throws TD pass, gets left out of celebration

    Vikings QB Case Keenum throws TD pass, gets left out of celebration

    Keenum felt pressure, drifted left and without setting his feet threw a helium-filled pass into triple coverage, where safety D.J. As the game ended, only the Philadelphia Eagles had more than the Vikings' seven victories.
    West Bengal Wins Rosogulla Fight Against Odisha

    West Bengal Wins Rosogulla Fight Against Odisha

    We are very happy and proud that #Bengal has been granted GI ( Geographical Indication) status for Rosogolla", she said. They had also indulged in the celebrations of Rosogolla Dibasa to link the origin of the this sweetmeat to Odisha.
    NASA postpones JPSS-1 weather satellite launch

    NASA postpones JPSS-1 weather satellite launch

    The data collected from the JPSS is fed into the numerical forecast models to help improve them. "JPSS will continue this trend". GOES-16 is a "geostationary" satellite, which means it's always facing the same region of the Earth from 22,400 miles up.
  • United Nations  calls on Saudi coalition to open Yemeni seaports

    United Nations calls on Saudi coalition to open Yemeni seaports

    Last week, the World Health Organization warned that more Yemeni civilians will die over the closure of the Yemeni ports. The U.S. -backed coalition has been at war with the Shiite rebels, known as Houthis, since March 2015.
    Ontario colleges, faculty clash ahead of contract vote

    Ontario colleges, faculty clash ahead of contract vote

    I have repeated many times to our senior administration "How do you want to be viewed as an employer". Meanwhile, Huckla pointed out that other workers have been impacted financially, too.
    Philippine protesters burn Swastika-shaped effigy of Donald Trump

    Philippine protesters burn Swastika-shaped effigy of Donald Trump

    More than 3,900 pushers and users have been killed in the war on drugs that Duterte declared when he took office past year . Activists later held their protests about a kilometre away from the venue and burned a 13-foot (4-metre) effigy of U.S.