OnePlus left a backdoor in its devices capable of root access

OnePlus left a backdoor in its devices capable of root access

The app is called EngineerMode and it is preinstalled on the OnePlus 3, 3T and 5.

A potentially risky backdoor in multiple OnePlus devices has been just unearthed by a knowing developer, revealing a hidden app that can be potentially used to gain root access and take control over the device. Intended for internal use only by the company's engineering team to test if devices are working properly, the application has managed to remain on OnePlus devices that have been shipped to consumers-and may present a threat to their security. They found that the application - used for factory testing - could be easily used to gain root access to phones. The user can access manual tests like root status test, Global Positioning System test or the main activity by sending a command. The developer also stated that deploying the "DiagEnabled" activity found in the APK with a specific password, it is possible to root the device. Worse, the security software in the smartphone will fail to diagnose any such issue if the "superuser" has installed some high-tech malware in the system, notes First Post. Speaking to Hindustan Times, Alderson said, "This loophole is a backdoor".

Serena attends first public event since birth of daughter
Showing she's the ideal little sis, Bella was more than happy to hold Gigi's hand as they headed to the venue. And I want you to imagine the affect you have on the world", E! online quoted Serena, as saying.

OnePlus, an electronics manufacturer based in China, has reportedly been shipping its line of popular smartphones with a hidden backdoor that could allow a hacker to hijack the device relatively effortlessly.

Just a month ago, OnePlus was caught collecting personally identifiable data from phone owners through incredibly detailed analytics. OnePlus co-founder Carl Pei tweeted that the company will study the claims made by the developer, according to The Mobile Indian. He discovered that his OnePlus 2 device was sending data to an HTTPS domain, which was transmitted to Amazon Web Services and belongs to OnePlus (open.oneplus.net domain).

Related Articles

  • Pakistan Spinner Saeed Ajmal Announces Retirement

    Pakistan Spinner Saeed Ajmal Announces Retirement

    "I am quitting all forms of cricket after the current National Twenty20 tournament", Ajmal told AFP from Rawalpindi on the phone. It was only recently announced that Ajmal would feature in the Islamabad United camp playing the role of spin bowling coach.
    Hariri indicates possibility of revoking his resignation

    Hariri indicates possibility of revoking his resignation

    A much-awaited live interview was done with Hariri on Sunday night by Future TV, a channel associated with his political party. Hariri's office said he met several diplomats in Riyadh on Monday including the British and German ambassadors.
    North Korean shot at while defecting to South

    North Korean shot at while defecting to South

    President Donald Trump who has vowed to stop it from being able to hit the mainland United States with a nuclear weapon. South Korean officials have yet to identify where the soldier came from or what his intentions were.
  • Peace Deal: Uber Board Paves the Way for Softbank Investment

    Peace Deal: Uber Board Paves the Way for Softbank Investment

    SoftBank is to buy the existing Uber shares in a process called a tender offer, which takes at least a month to complete. Benchmark, an early Uber investor that has a seat on the board, could not be reached for comment.
    HTC Announces Vive Wave Open Mobile VR Platform, Vive Focus HMD

    HTC Announces Vive Wave Open Mobile VR Platform, Vive Focus HMD

    Beyond the Vive headset, Google had announced that they were also working with Lenovo on a wireless Daydream headset. HTC is also accepting applications for Vive Wave developer kits through the Chinese Vive developer hub .
    Family confirm death of young Irish woman in France

    Family confirm death of young Irish woman in France

    Her family and friends had mounted a search for her via social media since she went missing while jogging last Wednesday. Ms Noonan's brother Cathal confirmed her death in a Facebook post on Sunday night.
  • At Least Five Killed In Mass Shooting At A California Primary School

    At Least Five Killed In Mass Shooting At A California Primary School

    Johnston said the child has been transported to the hospital, along with another child who was shot while riding in a truck. Law enforcement officers killed the shooter after responding to a domestic violence incident involving the shooter .
    'Oil era is far from over,' says IEA's annual report

    'Oil era is far from over,' says IEA's annual report

    The largest contribution to demand growth - nearly 30 per cent -would come from India, whose share of global energy would rise to 11 per cent by 2040, it says.
    Gareth Southgate says England could face penalty shootout BEFORE next summer

    Gareth Southgate says England could face penalty shootout BEFORE next summer

    Southgate has raised the prospect of putting England's players through a mock shootout at one of the team's friendlies ahead of next year's tournament in Russian Federation .
  • Russian Federation  uses fake photos to accuse U.S.  of supporting ISIS

    Russian Federation uses fake photos to accuse U.S. of supporting ISIS

    The ministry is investigating its civil employee who attached a wrong photo to illustrate the ministry's statement on Abu Kamal. To make things worse for Russia's Ministry of Defense, they didn't completely crop out the "development footage" disclaimer.

    IShares S&P Mid-Cap 400 Value (IJJ) Declines 0.02% for Nov 12

    When applying indicators for technical analysis, traders and investors might want to look at the ATR or Average True Range. A reading under 20 would indicate no trend, and a reading from 20-25 would suggest that there is no clear trend signal.
    Motorola Moto X4 Launched For Rs 19999

    Motorola Moto X4 Launched For Rs 19999

    The major highlight of the device is its cameras , IP68 certification and the ability to connect up to four devices via Bluetooth. In addition to the LED Flash, the front camera helps you to beautify pictures and be able to work with filters, pro mode.