Thursday, 23 November, 2017

OnePlus accused of leaving a backdoor to give root access

OnePlus comes under scanner over the issue of users’ privacy OnePlus comes under scanner over the issue of users’ privacy
Stacy Diaz | 15 November, 2017, 00:24

OnePlus 5, OnePlus 3T, OnePlus 3 and even some OnePlus One units are vulnerable to root without the need to unlock the bootloader.

OnePlus has recently accused of collecting a vast amount of sensitive private data from users' smartphones in the past and now, the company has been blamed for leaving a backdoor on its devices that is capable of granting root access.

While the exposed diagnostics app itself is a security risk, the real danger is that another exploit or malicious app could be used in combination with the toolkit to both achieve root access and then install further malware on a targeted device. It's used to run system tests for things like GPS, vibration, screen brightness, and also root checking. However, Baptiste and researchers at security firm NowSecure were able to crack the password -which was "angela"-and gain access to the application".

More news: Netanyahu says to continue military operation in Syria
More news: 3 killed in shooting that ends at California elementary school, official says
More news: Sergio Aguero hospitalised following Argentina's 4-2 loss to Nigeria

For owners of OnePlus devices who are curious to learn if the Engineer Mode app is installed on their device, it is possible to find the app by going to Settings, opening the Apps menu, tapping Menu, and Show System apps. "So it's not unsafe, it just means anybody with the password can plug your phone to a computer and take all your data". However, it can be exploited to enable backdoor rooting.

"Thanks for the heads up, we're looking into it", Pei tweeted. Meanwhile, OnePlus co-founder Carl Pei has already announced that OnePlus is investigating the issue. OnePlus devices could be rooted on launching "DiagEnabled" activity in the APK with a specified password that was found by decompiling "libdoor.so" with the help of a few cyber-security experts. He discovered that his OnePlus 2 device was sending data to an HTTPS domain, which was transmitted to Amazon Web Services and belongs to OnePlus (open.oneplus.net domain).

Recommended

  • Almost  half of Americans have high blood pressure, new guidelines say

    Almost half of Americans have high blood pressure, new guidelines say

    Blood pressure of 120 over 80 is still considered normal, with any systolic pressure reading up to 129 considered "elevated". WECT's Ben Smart is interviewing two cardiologists today to understand what these new heart health guidelines mean for you.
    Ex-Celtic and Cork City player Liam Miller battling cancer

    Ex-Celtic and Cork City player Liam Miller battling cancer

    Jacob Burns, the former Leeds and Australia midfielder who is now head of football at Perth Glory, tweeted: "In shock!"
    KGI analyst expects three iPhones next year, two with OLED

    KGI analyst expects three iPhones next year, two with OLED

    While no one has an idea on how the iPhone X can go even bigger, a visualized render of the iPhone X Plus has surfaced recently. All of the aforementioned devices are not going to sport any bezels and will be taking design cues from the iPhone X .
  • U.S.  carbon resurgence fuels growing global demand

    U.S. carbon resurgence fuels growing global demand

    However, this is expected to cut only 2.5 million barrels per day, or about 2%, off global oil demand by that time. But the oil market isn't tightening as quickly as once anticipated, the IEA said in its monthly oil-market report.
    FFXV's Noctis to be playable in Tekken 7 in 2018

    FFXV's Noctis to be playable in Tekken 7 in 2018

    Final Fantasy XV protagonist Noctis Lucis Caelum will be joining the fighter as downloadable content in Spring 2018. Tekken 7 is available for PlayStation 4, Xbox One and PC.
    Singles' Day Breaks Records for Alibaba, JD.com

    Singles' Day Breaks Records for Alibaba, JD.com

    Investors closely watch the headline number, though some analysts say the way it is calculated is too opaque. The date of November 11 emerged as a counter-cultural antidote to the sentimentality of Valentine's Day.
  • Russian Federation  uses fake photos to accuse U.S.  of supporting ISIS

    Russian Federation uses fake photos to accuse U.S. of supporting ISIS

    Russia said the Americans actively interfered with Russian airstrikes, to provide cover for the Isis fighters. This isn't the first time the Russian government has been caught distributing fake or misattributed video.
    Arthur Blank releases statement on Roger Goodell extension talks

    Arthur Blank releases statement on Roger Goodell extension talks

    Another report emerged that Goodell was asking for $50 million a year, a private jet, and lifetime health insurance. The movement grew this year, particularly after President Trump said owners should fire anyone who takes a knee.
    North Korea Slams President Trump

    North Korea Slams President Trump

    This comes as Trump said on Thursday that he wants Russia's help in getting North Korea to give up its nuclear weapons. It has repeatedly threatened to launch ballistic missiles into the waters around the US territory of Guam.
  • Barbie honors Ibtihaj Muhammad with hijab-wearing doll

    Barbie honors Ibtihaj Muhammad with hijab-wearing doll

    Still, while there were a few critics, most commenters said they believed the doll represents a major step towards representation. After becoming the first US Olympian to compete in a hijab, Muhammad has now created a Barbie of herself with a hijab.
    Tanks seen heading for Zimbabwe capital, rumor of coup

    Tanks seen heading for Zimbabwe capital, rumor of coup

    Speculation has been rife in Harare that Mugabe could seek to remove Chiwenga, who is seen as an ally of ousted Mnangagwa. Despite the reports of the tanks, Zimbabwe's ruling party Zanu PF took to Twitter to deny rumours of a coup.
    Qualcomm draws up plans to rebuff Broadcom's $103 billion offer

    Qualcomm draws up plans to rebuff Broadcom's $103 billion offer

    The sources said Broadcom was preparing to submit a slate of directors by Qualcomm's December 8 nomination deadline. Qualcomm rejected Broadcom's $105 billion acquisition offer on Monday, but the battle has just begun.

Serena attends first public event since birth of daughter Serena attends first public event since birth of daughter Serena Williams presented her with the award on the night - admitting she would only ever leave her newborn for Gigi. On September 1, 2017, Serena Williams gave birth to a sweet baby girl, who they named Alexis Olympia Ohanian, Jr .

Fans, celebs gather in Philadelphia to support release of Meek Mill Fans, celebs gather in Philadelphia to support release of Meek Mill Last week, famed rapper, Meek Mill was sentenced to 2 to 4 years behind bars for repeatedly violating his parole, reports say. Brinkley to disqualify herself from further involvement his case and allow a new judge to reconsider Mill's prison sentence.

American Tower boosts India presence with $1.2B site deal American Tower boosts India presence with $1.2B site deal Under this merger , Vodafone India will get an implied enterprise value of Rs. 82,800 crores and Idea Rs. 72,200 crores. The standalone tower businesses of Vodafone and Idea comprise a combined portfolio of almost 20,000 towers.

Chevrolet Unveils 2019 Corvette ZR1 with LT5 Supercharged Engine Chevrolet Unveils 2019 Corvette ZR1 with LT5 Supercharged Engine Despite all the wishful thinking, the new LT5 doesn't come with a DOHC head like the Lotus-enhanced original did in the nineties. The nose of the ZR1, meanwhile, has been heavily redesigned to provide additional airflow for the engine and cooling systems.

Sweden stun Italy to book World Cup return Sweden stun Italy to book World Cup return The Juventus stopper, who is widely considered one of the best goalkeepers ever, has said he will retire from worldwide duty once the current campaign ends.