It's possible to obtain root access on OnePlus phones without unlocking

OnePlus comes under scanner over the issue of users’ privacy

On the one hand, it does mean that it will be dead simple to root those three OnePlus phones without even having to unlock the bootloader. This app is used by OnePlus to ensure that a device is working properly before it leaves the factory.

"If you have an OnePlus device, I'm pretty sure you have this app pre-installed".

OnePlus' co-founder clarified that the company was collecting data to "better understand general phone behavior and optimize OxygenOS for a better overall user experience". "There's an activity - dubbed 'DiagEnabled" - associated with this app, which if launched with the correct password will give you the root access.

The Engineer Mode APK is capable of diagnosing Global Positioning System, run automated tests, check root status among other things. Speaking to Hindustan Times, Alderson said, "This loophole is a backdoor". After bringing it to attention, security outfit NowSecure reverse engineered it and found that it could easily be exploited with a simple ADB command to enable a backdoor into devices that have the application installed.

New Super Smash Bros Trademark Might Be Hinting At New SSB Game?
However, with Nintendo taking a lot of time in announcing Super Smash Bros . for the Nintendo Switch, it could mean two things. The rumors about Super Smash Bros . for Switch emerged from January 2016, when the console still had the Nintendo NX codename.

The Trump-Xi Meeting in Beijing, Very Briefly
The source told ESPN there is surveillance footage of the players shoplifting from three stores inside a high-end retail center. This source also noted that the charges against the players have been reduced and their case is proceeding toward a resolution.

Buffalo Wild Wings Gets $2.3 Billion-Plus Buyout Bid From Roark Capital
The business had revenue of $496.70 million during the quarter, compared to the consensus estimate of $500.97 million. On October 26, 2017 BMO Capital Markets updated coverage of BWLD with a rating of "Hold" and price target of $120.00.

Alderson, with the help of cybersecurity experts, was able to root a OnePlus device with a few commands.

Cyber security enthusiast and likely Mr Robot fan, Twitter user "Elliot Alderson" spotted the backdoor in OnePlus' Oxygen OS, which according to XDA Developers, is a diagnostic testing tool supplied by Qualcomm which OnePlus appears to have accidentally left in place on its OnePlus 5, OnePlus 3 and OnePlus 3T handsets. OnePlus has been alerted to the exploit and CEO Carl Pei has confirmed that the company is looking into it.

Earlier, according to a post on Christopher Moore's blog, OnePlus is collecting sensitive private data like IMEI numbers, mobile network names and IMSI prefixes, MAC addresses, and more. At the time, OnePlus stated that the whole objective of collecting data was to improve the service.

Related:

Comments

Latest news

Our smartwatch could detect hypertension and sleep apnea, a new study reveals
Researchers have found the Apple watch can be successfully used for precise detection of hypertension and sleep apnea. Sleep apnea can prove to be deadly when a person may stop breathing while sleeping leading to death.

Sainsbury's share price: Group becomes fastest-growing 'Big Four' supermarket
Morrison Supermarkets PLC's (MRW.LN) market share fell to 10.4%, from 10.5%, with sales increasing by 2.1% to GBP2.71 billion. Sainsbury's is the fastest growing of the "big 4" supermarkets.

Connected toys have 'worrying' security issues
Which? found that there was no authentication required between the toys and the devices they could link with via Bluetooth. Which? found someone could hack the toy via its unsecured Bluetooth connection and make it play their own voice messages.

Geely finalises purchase of flying vehicle maker Terrafugia
However, the company did not disclose any financial details concerning the deal, The China Daily newspaper reported today. A new research institute has already been set up, and the US-based engineering team's numbers have tripled.

Euro zone growth, eclipsing U.S. economy, set to be best in decade
At 4.30 am ET, the Office for National Statistics is slated to issue United Kingdom consumer and producer prices for October. The locomotive of the euro-zone released the data earlier and it came out at 0.8%, well above expectations.

Land Encroachment Case: Kerala HC rejects Thomas Chandy's plea
Chandy had also allegedly encroached on the backwaters to construct a parking space for the resort, according to the collector's report.

EgyptAir signs deal with bombardier to buy 24 CSeries aircraft
Bombardier has faced a series of problems over the plane, most recently a trade dispute in the United States that imposed a 300% import tariff.

Going vegetarian slashes the risk of heart failure by 42%, study reveals
The research was presented at the American Heart Association's Scientific Sessions 2017, in California. A new research adds to the multiple benefits of coffee consumption, making all coffee lovers happy.

New discovery shows our prehistoric ancestors were making wine 8000 years ago
The jars were most likely for storing wine in these areas as they depicted images of grape clusters and a man dancing. This finding makes it the oldest know evidence of wine-making in the world, at 6000 BC in the Neolithic period.

Women, revamp your diet today. You're more prone to diabetes
Now the charity is urging for increased provision of psychological support for people living with diabetes across Scotland. She has recently revealed that she has to inject herself with insulin up to five times a day to manage her condition.

One-off McLaren 720S revealed at Dubai motor show
Carbonfibre dominates the driving environment, adorning the centre console, the steering wheel and folding display behind it. This means power of 710bhp from McLaren's turbocharged 4.0-litre V8, a top speed of 212mph and a 0-62mph time of 2.8sec.

Google's new policy to widen control on 'extremist' videos on YouTube
His radical message was reportedly influential in attacks on the Boston Marathon , in Fort Hood , San Bernardino , and Orlando .

The Gaslamp Killer I Never Drugged and Raped You!!! Sues His Accusers
GLK, whose real name is William Bensussen , just filed suit against Chelsea Tadros , RaeAn Medina and one of their boyfriends. He likewise guarantees that it was the ladies who at first propositioned him, as opposed to the a different way.

Amazon surrenders cheapest bit of Chinese cloud
Amazon was a late entrant to the Chinese cloud market which is dominated by local players like AliCloud and China Telecom. Microsoft operates its Azure cloud services unit in partnership with China-based 21Vianet Group.

The President Of The Philippines Sang A Love Song For Donald Trump
His government says the police act in self defence but critics say executions are taking place with no accountability. ASEAN groups Brunei, Cambodia, Indonesia, Laos, Malaysia, Myanmar, the Philippines, Singapore, Thailand and Việt Nam.

Other news