OnePlus left EngineerMode APK in end user OxygenOS builds, easily rootable

OnePlus left EngineerMode APK in end user OxygenOS builds, easily rootable

The app-called "EngineerMode"-is partially exposed to users through a secret "*#808#" dialer command, and you can also launch the full app through an Android activity launcher or the command line.

OnePlus has still to fully recover from the data collection allegations it faced last month, and now fresh allegations have surfaced over user privacy. If you have a OnePlus phone, you may be interested - and a little disturbed - to learn that the company is preinstalling an app that acts as a backdoor to root access.

The application is called "EngineerMode" and was developed by Qualcomm for factory testing. The developer discovered a password-protected backdoor within the app's code, which he was able to work around to gain root access - a big enough problem to begin with for OnePlus in terms of security.

Entering the password into the EngineerMode app provides permanent root access to the Android Debug Bridge process.

Russian Federation accuses U.S. coalition of hampering its anti-IS operation in Syria
At this time, TASS's original report with the claims against the USA is still posted, though the fake photos gave been taken down. In the corner of the image, however, a few letters of the developer's disclaimer can still be seen: "Development footage".

We've seen several statements by community developers that are anxious because this apk grants root privileges. The user can access manual tests like root status test, Global Positioning System test or the main activity by sending a command.

Getting root access to a smartphone allows a hacker to access "superuser" mode, making it extremely easy to inject malware with surveillance capabilities. Speaking to Hindustan Times, Alderson said, "This loophole is a backdoor". The application is present in all OnePlus devices including 3, 3T and 5. OnePlus co-founder Carl Pei tweeted that the company will study the claims made by the developer, according to The Mobile Indian.

Will it affect OnePlus 5T sales?

The app has been found in previous OnePlus phones with OxygenOS installed - those still on CyanogenOS with the OnePlus One apparently don't see it. At the time, OnePlus stated that the whole goal of collecting data was to improve the service.

Related Articles

  • IPhone X Face ID Tricked Into Unlocking With A Mask

    IPhone X Face ID Tricked Into Unlocking With A Mask

    Bkav wrote in its blog that the efforts involved to fool the Face ID would make it incredibly hard to compromise casual users. But the introduction of the brand new iPhone X , and it's facial recognition lock, has come with some controversy.

    Star Wars Battlefront II Hero Unlock Costs Slashed After Fan Outrage

    DICE also confirmed that they will be hosting a Reddit AMA on Wednesday to discuss key topics with players. Their rivalry continues as they grow, and we get to see their world change into the game's galaxy.
    Two stabbed after confronting alleged thief at Macy's in Mall of America

    Two stabbed after confronting alleged thief at Macy's in Mall of America

    The suspect, 20-year-old Mahad Abdiaziz Abdiraham, of Minneapolis , was attempting to rob one of the men, police said . The Mall of America has more than 520 stores and attractions that include an amusement park and an indoor zip line.
  • 4 killed, children wounded, suspect dead in Tehama County

    4 killed, children wounded, suspect dead in Tehama County

    Investigators recovered a semi-automatic rifle and two handguns, according to Johnston. Around 100 law enforcement personnel are now present at five crime scenes in the area.
    U.S.  beats Belarus to win first Fed Cup title since 2000

    U.S. beats Belarus to win first Fed Cup title since 2000

    Stephens served for the match against Sasnovich at 5-3 in the third set, but was unable to clinch the title for the United States. But Belarus, who have never won the showpiece women's team event, hit back in front of a partisan home crowd.
    TalkSPORT World Cup play-off coverage on November 12, 2017

    TalkSPORT World Cup play-off coverage on November 12, 2017

    Still, Switzerland dominated much of the first half and should have sealed its place at a fourth straight World Cup much earlier. But the longer the game went on at 0-0, the more empowered Northern Ireland were.
  • Mini-shuttle glides to safe landing in desert test flight

    Mini-shuttle glides to safe landing in desert test flight

    Dream Chaser, which looks like a smaller version of the Space Shuttle, would initially be launched on an Atlas V rocket. It's called a lifting body plane due to the lift being created by the body of the vehicle rather than the wings.
    Hate crimes up in California, and U.S. , for second consecutive year

    Hate crimes up in California, and U.S. , for second consecutive year

    And the number of anti-Muslim groups almost tripled, to 101 a year ago , from 34 in 2015 , the SPLC said . Six hate crimes were related to religion, while five were associated with sexual orientation.
    Qualcomm rejects Broadcom's initial $105 billion takeover offer

    Qualcomm rejects Broadcom's initial $105 billion takeover offer

    Broadcom doesnt care about the outcome of that deal – it has stated that it wants to acquire Qualcomm with or without NXP. It was also said the offer does not price in the "uncertainty associated with getting the deal approved by regulators".
  • Australian PM says government aims to legalise same-sex marriage by year-end

    Australian PM says government aims to legalise same-sex marriage by year-end

    The bill would also guarantee the right of parents to opt their children out of school classes that conflicted with their values. This gives the Smith bill an immediate advantage over its legislative rival, a bill penned by Liberal senator James Paterson.
    North Korea denounces Trump's Asia tour as a 'warmonger's visit'

    North Korea denounces Trump's Asia tour as a 'warmonger's visit'

    The strike force plans to conduct air defense drills, sea surveillance, defensive air combat training as well as other maneuvers. He added that Trump showed his " true nature as destroyer of the world peace and stability " on his " warmongering " visit.
    Taylor Swift Disses Kanye West And Jay Z In New Song

    Taylor Swift Disses Kanye West And Jay Z In New Song

    So it's pretty much safe to say that this might have been the peak "nice things" that she refers to in the song. For instance, Swift released her 1989 album on October 27, 2014, and the tour announcement came a week later.