OnePlus Phone Backdoor: Devices Shipped With Factory App That Can Root Devices

OnePlus comes under scanner over the issue of users’ privacy

But the team proved it can be done without a whole lot effort, which in turn leaves a lot of OnePlus devices vulnerable. This also means that it's possible for any Android app to achieve root using this method, which opens up OP devices to massive security issues.

OnePlus 5, OnePlus 3T, OnePlus 3 and even some OnePlus One units are vulnerable to root without the need to unlock the bootloader.

In this app, the developer has found activity known as "DiagEnabled", if enabled with a specific password, grants the root access.

If it's there, anyone with physical access to your device can exploit EngineerMode to gain root access on your smartphone.

OnePlus has recently accused of collecting a vast amount of sensitive private data from users' smartphones in the past and now, the company has been blamed for leaving a backdoor on its devices that is capable of granting root access.

While it appears OnePlus is responsible for leaving Engineer Mode on its devices, it is not directly responsible for the application itself or the backdoor it creates.

You can also check if this application is installed on your OnePlus device or not.

On devices with the application present, an attacker could use the easily crackable password to hijack the device and execute malicious code.

This app is a system app made by @Qualcomm and customised by @OnePlus.

This nonetheless raises questions over why is the device shipping with this app (presumably it has just been overlooked) and whether it's available on other Qualcomm devices.

OnePlus was in a bit of hot water earlier this month for collecting user data through OxygenOS and sending it back to the company, a practice it has since stopped.

In a statement to Android Authority, OnePlus said "We securely transmit analytics in two different streams over HTTPS to an Amazon server".

Related News:

  • Firefox Quantum with faster browser engine is now available to everyone

    Firefox Quantum with faster browser engine is now available to everyone

    In other words, it's a major platform that web developers target - even in a world increasingly dominated by mobile apps. Those who already use Firefox should receive an automatic upgrade to Quantum after restarting their browser.
    Contracted Soviet-derived spaceplane Dream Chaser makes successful glide test

    Contracted Soviet-derived spaceplane Dream Chaser makes successful glide test

    Sierra Nevada's six-mission contract calls for Dream Chaser to start delivering cargo to the space station in 2019. This successful test, though, should keep Dream Chaser on track for a debut spaceflight within the next two years.
    Noctis From Final Fantasy XV Is DLC For Tekken 7

    Noctis From Final Fantasy XV Is DLC For Tekken 7

    Noctis will be joining the likes of legendary fighters such as Yoshimitsu, Devin Jin, Jack 7 and other renowned Tekken warriors. The company will have surely heard the calls for more crossovers though, so fingers crossed it will deliver.
  • College Football Player Expelled After Punching Coach In Head

    College Football Player Expelled After Punching Coach In Head

    The TSU offense was on the field when Lee, who did not play in Saturday's game, attacked Greenstone. Lee is a senior who majoring in criminal justice , and had started two games this year.
    Former Black Cat in cancer fight

    Former Black Cat in cancer fight

    Fellow former United player Danny Higginbotham said: "If true very sad news about one of my former teammates Liam Miller ". He also has 21 senior global caps, and one goal, for the Republic of Ireland . "That's from the whole team and everyone".
    N Korea brands Trump 'warmonger' as his Asia tour moves to Hanoi

    N Korea brands Trump 'warmonger' as his Asia tour moves to Hanoi

    The exercises will also involve 11 US Aegis ships and seven South Korean naval vessels, including two Aegis ships. Trump has been working to rally global pressure against North Korea's nuclear weapons program on a trip to Asia.
  • Xiaomi Redmi Note 4 India Price Cut

    Xiaomi Redmi Note 4 India Price Cut

    Xiaomi is set to launch new devices in the market soon and might have reduced the prices in view of the same. Xiaomi's "best selling" smartphone in India, the Redmi Note 4 is now available at a discounted price.

    The "Most Downvoted Comment on Reddit" Award Goes to… EA

    Other heroes like Emperor Palpatine, Chewbacca and Leia Organa will unlock at 10,000 credits while Iden will unlock at 5,000. It now sits at negative 392,000 points, making it the most downvoted comment in Reddit history .
    Forecast: Chilly Week Ahead With Some Rain

    Forecast: Chilly Week Ahead With Some Rain

    With the cloud cover and the precipitation, it will be raw and quite chilly, with highs struggling to get to the lower 40s. We will have afternoon highs in the upper 70s prior to the front arriving, then will cool down to the mid 50s overnight.
  • Global carbon emissions to rise again in 2017

    Global carbon emissions to rise again in 2017

    Atmospheric CO2 concentration reached 403 parts per million in 2016, and is expected to increase by 2.5 ppm in 2017. From 2014 to 2016 global Carbon dioxide emissions from fossil fuels and industry grew hardly at all.
    'The Elder Scrolls V: Skyrim VR,' upcoming games

    'The Elder Scrolls V: Skyrim VR,' upcoming games

    Well Skyrim VR Bundle will provide you a list of 13 PSVR titles to choose your next game from. We simply can't wait for PS4 gamers to experience it like never before.
    Worldwide  enrollment in United States  colleges is on the decline

    Worldwide enrollment in United States colleges is on the decline

    Sankul Rawat, a University of IL at Chicago graduate student, said many of his peers in India are choosing Canada over the U.S. No one factor led to the decline in new students, Goodman said during a phone conference with reporters last week.


Most liked

Sergio Aguero hospitalised following Argentina's 4-2 loss to Nigeria
Nigeria's Brown Ideye (L) celebrates after scoring the team's third goal during an worldwide friendly football match between Argentina and Nigeria in Krasnodar on November 14, 2017.

Russian Federation posts video game screenshot as 'proof' of USA helping IS
The ministry is investigating its civil employee who attached a wrong photo to illustrate the ministry's statement on Abu Kamal. To make things worse for Russia's Ministry of Defense, they didn't completely crop out the "development footage" disclaimer.

Steelers QB Ben Roethlisberger slams Thursday NFL games
Then he goes on to describe what Thursday is like when a team has just played a game on Sunday and they're scheduled on TNF . You'd never hear this kind of rant, on day one of preparation no less, from Tom Brady about having to play on Thursday.

Potential Fourth Victim of Tampa Serial Killer Found, Police Say
On Oct. 19, 20-year-old Anthony Naiboa, who had autism, was shot and killed just 50 ft. away from where Mitchell had been slain. Officers say Mr Felton was crossing the street to meet someone when a gunman came up behind him and shot him .

FBI Reportedly Launches Probe Into Judge Who Sentenced Meek Mill To Jail
Mack was among about 50 persons to offer support to Mill during an August 18, 2014, probation violation hearing before Brinkley. According to Page Six , the judge who sent Meek to jail is now being investigated by the Federal Bureau of Investigation .

Four People Killed in Northern California Shooting
In addition to the four people killed in the shooting, several people were injured, including children. Three children and an adult are being treated at Enloe Medical Center in Chico, officials said .

Trump asked Xi to resolve Ball arrest
Arriving the day after the players were arrested , Trump reportedly raised the players' predicament during his visit to Beijing. Ball, the second son of outspoken and high-profile sports dad, LaVar Ball , is set to begin his freshman season at UCLA.

President Trump Strikes Back at 'Short and Fat' Kim Jong Un
In a stern speech delivered in South Korea's National Assembly on Tuesday, he said: "Do not underestimate us". The statement also referred to Trump as a "dotard", an insulting term for old people who are going senile.

Competition coming for Uber as Lyft expands to Toronto
In addition to Lyft, another ride-hailing service called Facedrive launched last week in Toronto. Indeed, there have been reports since the start of the year that such plans were imminent.

IPhone X has yet more problems
Of course that leaves the standard 4.7-inch iPhone 8 behind and Apple's production line may also soon reflect that. As reported by MacRumors , some users are noticing the appearance of a mysterious green line on their screens.

Salman unveils his 'Race 3' look
While Salman will be seen making his enemies bite the dust in his own swag, Katrina too will exhibit some high-flying stunts. He has dropped his rugged look and a heavy stubble for the role of Tiger and has upped his style quotient for his Race 3 .

CI Investments Inc. Acquires 24000 Shares of Brookfield Property Partners LP (BPY)
Investors are a little more bearish on shares of Brookfield Property Partners L lately as shown by the uptick in short interest. The company sells its generation output primarily to public power authorities, load-serving utilities, and industrial users.

Morocco Has the Best Defense in the World
The Atlas Lions just needed to avoid defeat in order to book their place in Russian Federation , but took all three points. The match witnessed several incidents involving Zaha, Doumbia, Serge Aurier against their opponents as tension heightened.

Dana White gives huge update on Conor McGregor's return — UFC News
The Fertittas turned their $2 million purchase of UFC into a $4.025 billion sale last July to the Hollywood agency WME-IMG. Despite his victory, however, St-Pierre's accomplishment didn't come without a bit of criticism.

Italy fail to reach World Cup after play-off defeat by Sweden
That is the only regret I have and certainly not that I am finishing my career, because time passes and it's only right. Prior to that, they had only missed the first edition of the event in 1930 in Uruguay, which they did not enter.