profishingrods.com
profishingrods.com November 22, 2017


App on several OnePlus devices grants backdoor root access

14 November 2017, 11:39 | Cameron Gross

OnePlus accused of leaving a backdoor to give root access

OnePlus left a backdoor in its devices capable of root access

But the team proved it can be done without a whole lot effort, which in turn leaves a lot of OnePlus devices vulnerable.

The app is called EngineerMode and it is preinstalled on the OnePlus 3, 3T and 5. NowSecure suggested deleting the app to remove the chances of it being misused.

If hackers wanted to get into your phone, they would need physical access to it, so if you have any OnePlus devices, just keep it away from any of your playful tech-savvy friends until the app is officially removed.

He was able to find a system app named EngineerMode that is actually a Qualcomm factory app with the ability to toggle components such as the charging chip, GPS, NFC and others - as this app shouldn't be included in consumer-side ROMs, it's a target app that malicious actors will want to crack into. Worse, the security software in the smartphone will fail to diagnose any such issue if the "superuser" has installed some high-tech malware in the system, notes First Post.

After tearing apart the phone's libdoor.so library, he managed to obtain root access though bypassing the escalate and isEscalated methods in the DiagEnabled activity. "So it's not unsafe, it just means anybody with the password can plug your phone to a computer and take all your data".




You can also check if this application is installed on your OnePlus device or not.

The app and the subsequent backdoor access was discovered by Twitter user Elliott Alderson (a reference to the Mr. Robot character), who then went into a lot of detail about how to gain root access to the device.

Will it affect OnePlus 5T sales?

OnePlus' co-founder clarified that the company was collecting data to "better understand general phone behavior and optimize OxygenOS for a better overall user experience".



Other News

Trending Now

Thieves tunnel 25 feet into bank near Mumbai
According to reports, the accused robbers, who are yet to be caught, had allegedly rented a shop next to the bank in May. The bank, incidentally, had not installed CCTV cameras in the locker room to protect the customer's privacy.

Nagarjuna's Annapurna Studios caught in a major fire incident, Manam sets destroyed
He mentioned that this particular set was treasured as one of the last memories of his father late Sri Akkineni Nageswara Rao. The attractive house set that was erected for Manam movie has been used for various other movies.

Nigeria vs Argentina: Super Eagles starting XI revealed
Etebo stated this in a short two minutes video on Super Eagles verified Twitter handle. Nigeria will face Argentina in an worldwide friendly match in Krasnodar on Tuesday.

Earliest Evidence Of Wine-Making Found In Ancient Relics From Georgia
Previously, the earliest evidence of wine-making was from pottery dating from about 7,000 years ago found in north-western Iran. Love wine? A team of researchers found out just about how old the practice of wine-making is.

Dallas prosecutor who accused Uber driver of kidnapping fired from her job
Warner had worked in the office for six years and was a prosecutor in the crimes against children unit, Dallas News reports. She also says, "I think this might be kidnapping right now actually..." " You're kidnapping me .

Militant, Army man killed in Kulgam gunfight
An official said that CASO was launched in Lam forests last night after "specific inputs" about the presence of militants. A gunfight has erupted between militants and forces in Lam area of Tral in southern part of Kashmir's Pulwama district.

Dawood Ibrahim's three properties sold to trust for Rs 11.5 crore
Ibrahim's close aide, Kaskar, after being released from jail was staying in this building and conducting operations of D Company. However, the property went in for re-auction, as Balakrishnan, could not cough up R4.28 crore he'd won the property for.

Syria issue to dominate meeting between Erdogan, Putin
The two leaders mainly focused on economic relations between Turkey and Russian Federation , underlining the success of normalization process.

EgyptAir in deal to buy 24 Bombardier C-Series planes
EgyptAir chairman and CEO Safwat Musallam said the planes will help the airline to modernize its fleet. Bombardier hasn't sealed a major purchase since Delta Air Lines ordered 75 aircraft in April 2016.

Oil steady near two-year highs, USA supply increase caps rise
Other regional concerns include the war in Yemen and growing tensions between Saudi Arabia and Iran is a concern to investors too. The American Petroleum Institute (API) reports weekly crude and refined product inventories later on Tuesday.