OnePlus Phone Backdoor: Devices Shipped With Factory App That Can Root Devices

OnePlus 5 Security

But the team proved it can be done without a whole lot effort, which in turn leaves a lot of OnePlus devices vulnerable. This also means that it's possible for any Android app to achieve root using this method, which opens up OP devices to massive security issues.

OnePlus 5, OnePlus 3T, OnePlus 3 and even some OnePlus One units are vulnerable to root without the need to unlock the bootloader.

In this app, the developer has found activity known as "DiagEnabled", if enabled with a specific password, grants the root access.

If it's there, anyone with physical access to your device can exploit EngineerMode to gain root access on your smartphone.

OnePlus has recently accused of collecting a vast amount of sensitive private data from users' smartphones in the past and now, the company has been blamed for leaving a backdoor on its devices that is capable of granting root access.

While it appears OnePlus is responsible for leaving Engineer Mode on its devices, it is not directly responsible for the application itself or the backdoor it creates.

You can also check if this application is installed on your OnePlus device or not.

On devices with the application present, an attacker could use the easily crackable password to hijack the device and execute malicious code.

This app is a system app made by @Qualcomm and customised by @OnePlus.

This nonetheless raises questions over why is the device shipping with this app (presumably it has just been overlooked) and whether it's available on other Qualcomm devices.

OnePlus was in a bit of hot water earlier this month for collecting user data through OxygenOS and sending it back to the company, a practice it has since stopped.

In a statement to Android Authority, OnePlus said "We securely transmit analytics in two different streams over HTTPS to an Amazon server".

Related News:

  • Four People Killed in Northern California Shooting

    In addition to the four people killed in the shooting, several people were injured, including children. Three children and an adult are being treated at Enloe Medical Center in Chico, officials said .

    IPhone X has yet more problems

    Of course that leaves the standard 4.7-inch iPhone 8 behind and Apple's production line may also soon reflect that. As reported by MacRumors , some users are noticing the appearance of a mysterious green line on their screens.

    Noctis From Final Fantasy XV Is DLC For Tekken 7

    Noctis will be joining the likes of legendary fighters such as Yoshimitsu, Devin Jin, Jack 7 and other renowned Tekken warriors. The company will have surely heard the calls for more crossovers though, so fingers crossed it will deliver.
  • Oil Falls Sharply on Rising US Output, Global Demand Concern

    Oil Falls Sharply on Rising US Output, Global Demand Concern

    Indeed, the IEA also suggests that demand for oil will remain supported by lower prices, going forward. This latest move comes as investors expect figures to show United States oil production has risen.
    LeBron James, Cavs team ride NYC subway from practice

    LeBron James, Cavs team ride NYC subway from practice

    New York Knicks rookie point guard Frank Ntilikina caused a minor scuffle between the Knicks and Cleveland Cavaliers when he didn't take kindly to some physical play from LeBron James .
    President Trump Strikes Back at 'Short and Fat' Kim Jong Un

    President Trump Strikes Back at 'Short and Fat' Kim Jong Un

    In a stern speech delivered in South Korea's National Assembly on Tuesday, he said: "Do not underestimate us". The statement also referred to Trump as a "dotard", an insulting term for old people who are going senile.
  • CI Investments Inc. Acquires 24000 Shares of Brookfield Property Partners LP (BPY)

    CI Investments Inc. Acquires 24000 Shares of Brookfield Property Partners LP (BPY)

    Investors are a little more bearish on shares of Brookfield Property Partners L lately as shown by the uptick in short interest. The company sells its generation output primarily to public power authorities, load-serving utilities, and industrial users.

    Dana White gives huge update on Conor McGregor's return — UFC News

    The Fertittas turned their $2 million purchase of UFC into a $4.025 billion sale last July to the Hollywood agency WME-IMG. Despite his victory, however, St-Pierre's accomplishment didn't come without a bit of criticism.
    N Korea brands Trump 'warmonger' as his Asia tour moves to Hanoi

    N Korea brands Trump 'warmonger' as his Asia tour moves to Hanoi

    The exercises will also involve 11 US Aegis ships and seven South Korean naval vessels, including two Aegis ships. Trump has been working to rally global pressure against North Korea's nuclear weapons program on a trip to Asia.
  • Potential Fourth Victim of Tampa Serial Killer Found, Police Say

    Potential Fourth Victim of Tampa Serial Killer Found, Police Say

    On Oct. 19, 20-year-old Anthony Naiboa, who had autism, was shot and killed just 50 ft. away from where Mitchell had been slain. Officers say Mr Felton was crossing the street to meet someone when a gunman came up behind him and shot him .
    Vodafone sells mobile phone towers in India to American Tower

    Vodafone sells mobile phone towers in India to American Tower

    The deal, which now awaits various regulatory approvals, is expected to be completed next year around March. The standalone tower businesses of Vodafone and Idea comprise a combined portfolio of almost 20,000 towers.
    Delhi government seeks exemptions for odd-even this year

    Delhi government seeks exemptions for odd-even this year

    It is empowering to a woman, and neither the NGT nor the Delhi government has any business taking it away from us. As the NGT is to take up the hearing today, there is no show of the lawyer from the Delhi government's side.


Most liked

Russian Federation posts video game screenshot as 'proof' of USA helping IS
The ministry is investigating its civil employee who attached a wrong photo to illustrate the ministry's statement on Abu Kamal. To make things worse for Russia's Ministry of Defense, they didn't completely crop out the "development footage" disclaimer.

Firefox Quantum with faster browser engine is now available to everyone
In other words, it's a major platform that web developers target - even in a world increasingly dominated by mobile apps. Those who already use Firefox should receive an automatic upgrade to Quantum after restarting their browser.

Steelers QB Ben Roethlisberger slams Thursday NFL games
Then he goes on to describe what Thursday is like when a team has just played a game on Sunday and they're scheduled on TNF . You'd never hear this kind of rant, on day one of preparation no less, from Tom Brady about having to play on Thursday.

Serena Williams Stuns In First Post-Baby Appearance
Looking incredible, model Gigi wore a stunning gold dress, featuring kimono sleeves and a high neckline. Want all the latest pregnancy and birth announcements, plus celebrity mom blogs? .

Global carbon emissions to rise again in 2017
Atmospheric CO2 concentration reached 403 parts per million in 2016, and is expected to increase by 2.5 ppm in 2017. From 2014 to 2016 global Carbon dioxide emissions from fossil fuels and industry grew hardly at all.

'The Elder Scrolls V: Skyrim VR,' upcoming games
Well Skyrim VR Bundle will provide you a list of 13 PSVR titles to choose your next game from. We simply can't wait for PS4 gamers to experience it like never before.

Former Black Cat in cancer fight
Fellow former United player Danny Higginbotham said: "If true very sad news about one of my former teammates Liam Miller ". He also has 21 senior global caps, and one goal, for the Republic of Ireland . "That's from the whole team and everyone".

Things You Need To Know About The 2019 Corvette ZR1
There's also a premium grade Bose audio package for savoring the moments when you're just cruising down the highway. Unlike many cars, however, the ZR1 has two optional packs that help improve the aerodynamics of the auto .

Patriots TE Martellus Bennett supposedly told teams not to claim him
Bennett said he still doesn't know what he's going to do, but he thinks he should still get the surgery. Former Packer Tom Crabtree has not shied away from calling Bennett a "liar" and a "fraud" on Twitter.

Morocco Has the Best Defense in the World
The Atlas Lions just needed to avoid defeat in order to book their place in Russian Federation , but took all three points. The match witnessed several incidents involving Zaha, Doumbia, Serge Aurier against their opponents as tension heightened.

Worldwide enrollment in United States colleges is on the decline
Sankul Rawat, a University of IL at Chicago graduate student, said many of his peers in India are choosing Canada over the U.S. No one factor led to the decline in new students, Goodman said during a phone conference with reporters last week.

The "Most Downvoted Comment on Reddit" Award Goes to… EA
Other heroes like Emperor Palpatine, Chewbacca and Leia Organa will unlock at 10,000 credits while Iden will unlock at 5,000. It now sits at negative 392,000 points, making it the most downvoted comment in Reddit history .

Italy fail to reach World Cup after play-off defeat by Sweden
That is the only regret I have and certainly not that I am finishing my career, because time passes and it's only right. Prior to that, they had only missed the first edition of the event in 1930 in Uruguay, which they did not enter.

Contracted Soviet-derived spaceplane Dream Chaser makes successful glide test
Sierra Nevada's six-mission contract calls for Dream Chaser to start delivering cargo to the space station in 2019. This successful test, though, should keep Dream Chaser on track for a debut spaceflight within the next two years.

Forecast: Chilly Week Ahead With Some Rain
With the cloud cover and the precipitation, it will be raw and quite chilly, with highs struggling to get to the lower 40s. We will have afternoon highs in the upper 70s prior to the front arriving, then will cool down to the mid 50s overnight.