It's possible to obtain root access on OnePlus phones without unlocking

OnePlus 3T

On the one hand, it does mean that it will be dead simple to root those three OnePlus phones without even having to unlock the bootloader. This app is used by OnePlus to ensure that a device is working properly before it leaves the factory.

"If you have an OnePlus device, I'm pretty sure you have this app pre-installed".

OnePlus' co-founder clarified that the company was collecting data to "better understand general phone behavior and optimize OxygenOS for a better overall user experience". "There's an activity - dubbed 'DiagEnabled" - associated with this app, which if launched with the correct password will give you the root access.

The Engineer Mode APK is capable of diagnosing Global Positioning System, run automated tests, check root status among other things. Speaking to Hindustan Times, Alderson said, "This loophole is a backdoor". After bringing it to attention, security outfit NowSecure reverse engineered it and found that it could easily be exploited with a simple ADB command to enable a backdoor into devices that have the application installed.

The Trump-Xi Meeting in Beijing, Very Briefly
The source told ESPN there is surveillance footage of the players shoplifting from three stores inside a high-end retail center. This source also noted that the charges against the players have been reduced and their case is proceeding toward a resolution.

New discovery shows our prehistoric ancestors were making wine 8000 years ago
The jars were most likely for storing wine in these areas as they depicted images of grape clusters and a man dancing. This finding makes it the oldest know evidence of wine-making in the world, at 6000 BC in the Neolithic period.

Capcom Reportedly Developing New Ace Attorney For The Nintendo Switch
The Ace Attorney series is quite unlike anything else out there, so it's exciting that Capcom has future games in mind. It's to be taken with a grain of salt, as the publisher has yet to say anything on these projects.

Alderson, with the help of cybersecurity experts, was able to root a OnePlus device with a few commands.

Cyber security enthusiast and likely Mr Robot fan, Twitter user "Elliot Alderson" spotted the backdoor in OnePlus' Oxygen OS, which according to XDA Developers, is a diagnostic testing tool supplied by Qualcomm which OnePlus appears to have accidentally left in place on its OnePlus 5, OnePlus 3 and OnePlus 3T handsets. OnePlus has been alerted to the exploit and CEO Carl Pei has confirmed that the company is looking into it.

Earlier, according to a post on Christopher Moore's blog, OnePlus is collecting sensitive private data like IMEI numbers, mobile network names and IMSI prefixes, MAC addresses, and more. At the time, OnePlus stated that the whole objective of collecting data was to improve the service.

Related:

Comments

Latest news

Sainsbury's share price: Group becomes fastest-growing 'Big Four' supermarket
Morrison Supermarkets PLC's (MRW.LN) market share fell to 10.4%, from 10.5%, with sales increasing by 2.1% to GBP2.71 billion. Sainsbury's is the fastest growing of the "big 4" supermarkets.

Connected toys have 'worrying' security issues
Which? found that there was no authentication required between the toys and the devices they could link with via Bluetooth. Which? found someone could hack the toy via its unsecured Bluetooth connection and make it play their own voice messages.

Real Madrid lower asking price for Manchester United target Gareth Bale
Okay, he's picked up a lot of injuries but generally the Premier League is much tougher than La Liga in terms of the physicality. He bucked the trend of boring English footballers who don't fancy life outside the M25 and chose to play overseas .

Justice League's 'sexy' Amazon costumes create uproar
The most important thing is that Wonder Woman's character remains as strong and kick-ass as she was in her standalone film. Wonder Woman's costumes were designed by Lindy Hemming , while Michael Wilkinson worked on Justice League .

Fuming Cristiano Ronaldo shocks Real Madrid: SELL ME!
Reports also suggest that Real Madrid president Florentino Perez is not willing to let go Ronaldo. Ronaldo would like to leave on June 30 and has made his intentions clear to the Madrid hierarchy.

New Super Smash Bros Trademark Might Be Hinting At New SSB Game?
However, with Nintendo taking a lot of time in announcing Super Smash Bros . for the Nintendo Switch, it could mean two things. The rumors about Super Smash Bros . for Switch emerged from January 2016, when the console still had the Nintendo NX codename.

Telangana ASI suspended over getting massage done by woman home guard
The suspension orders were issued after an inquiry conducted by the district Superintendent of Police SM Vijaya Kumar. Earlier, on November 4, a video clip of a police inspector receiving a massage from a male home guard went viral.

Euro zone growth, eclipsing U.S. economy, set to be best in decade
At 4.30 am ET, the Office for National Statistics is slated to issue United Kingdom consumer and producer prices for October. The locomotive of the euro-zone released the data earlier and it came out at 0.8%, well above expectations.

EgyptAir signs deal with bombardier to buy 24 CSeries aircraft
Bombardier has faced a series of problems over the plane, most recently a trade dispute in the United States that imposed a 300% import tariff.

Women, revamp your diet today. You're more prone to diabetes
Now the charity is urging for increased provision of psychological support for people living with diabetes across Scotland. She has recently revealed that she has to inject herself with insulin up to five times a day to manage her condition.

One-off McLaren 720S revealed at Dubai motor show
Carbonfibre dominates the driving environment, adorning the centre console, the steering wheel and folding display behind it. This means power of 710bhp from McLaren's turbocharged 4.0-litre V8, a top speed of 212mph and a 0-62mph time of 2.8sec.

Wales centre Jonathan Davies out for six months with ankle injury
However, both Williams and Roberts are now in the camp as a result of injuries, with the Harlequins centre being called up on Monday to replace Davies.

Google's new policy to widen control on 'extremist' videos on YouTube
His radical message was reportedly influential in attacks on the Boston Marathon , in Fort Hood , San Bernardino , and Orlando .

Amazon surrenders cheapest bit of Chinese cloud
Amazon was a late entrant to the Chinese cloud market which is dominated by local players like AliCloud and China Telecom. Microsoft operates its Azure cloud services unit in partnership with China-based 21Vianet Group.

The President Of The Philippines Sang A Love Song For Donald Trump
His government says the police act in self defence but critics say executions are taking place with no accountability. ASEAN groups Brunei, Cambodia, Indonesia, Laos, Malaysia, Myanmar, the Philippines, Singapore, Thailand and Việt Nam.

Other news