OnePlus left EngineerMode APK in end user OxygenOS builds, easily rootable

OnePlus left EngineerMode APK in end user OxygenOS builds, easily rootable

The app-called "EngineerMode"-is partially exposed to users through a secret "*#808#" dialer command, and you can also launch the full app through an Android activity launcher or the command line.

OnePlus has still to fully recover from the data collection allegations it faced last month, and now fresh allegations have surfaced over user privacy. If you have a OnePlus phone, you may be interested - and a little disturbed - to learn that the company is preinstalling an app that acts as a backdoor to root access.

The application is called "EngineerMode" and was developed by Qualcomm for factory testing. The developer discovered a password-protected backdoor within the app's code, which he was able to work around to gain root access - a big enough problem to begin with for OnePlus in terms of security.

Entering the password into the EngineerMode app provides permanent root access to the Android Debug Bridge process.

Sweden shatter Italy's World Cup dream
He was injured in Italy's first game in 2010, then returned in 2014, but Italy failed to make it out of the group stage.

We've seen several statements by community developers that are anxious because this apk grants root privileges. The user can access manual tests like root status test, Global Positioning System test or the main activity by sending a command.

Getting root access to a smartphone allows a hacker to access "superuser" mode, making it extremely easy to inject malware with surveillance capabilities. Speaking to Hindustan Times, Alderson said, "This loophole is a backdoor". The application is present in all OnePlus devices including 3, 3T and 5. OnePlus co-founder Carl Pei tweeted that the company will study the claims made by the developer, according to The Mobile Indian.

Will it affect OnePlus 5T sales?

The app has been found in previous OnePlus phones with OxygenOS installed - those still on CyanogenOS with the OnePlus One apparently don't see it. At the time, OnePlus stated that the whole goal of collecting data was to improve the service.

Related Articles

  • Did Sessions break the law by denying knowledge of Russian Federation contacts?

    He said he mentioned in passing to Sessions that he was visiting Russian Federation and the then-senator had no reaction. Jeff Sessions's memory works in mysterious ways.

    Qualcomm rejects Broadcom's initial $105 billion takeover offer

    Broadcom doesnt care about the outcome of that deal – it has stated that it wants to acquire Qualcomm with or without NXP. It was also said the offer does not price in the "uncertainty associated with getting the deal approved by regulators".
    755PS/969Nm making 2019 Chevrolet Corvette ZR1 is here!

    755PS/969Nm making 2019 Chevrolet Corvette ZR1 is here!

    Along with aero bits, the ZTK Performance Pack brings Michelin Pilot Sport Cup 2 tyres, and a special chassis and suspension tune. The nose of the ZR1, meanwhile, has been heavily redesigned to provide additional airflow for the engine and cooling systems.
  • 49ers Player Scores Emotional Touchdown Hours After Losing Newborn Son

    49ers Player Scores Emotional Touchdown Hours After Losing Newborn Son

    Goodwin scored a touchdown for the 49rs just hours later, blowing a kiss to the sky before collapsing in the end zone . ESPN reported that Goodwin left the Niners' locker room as soon as the game ended Sunday to return to his family.
    Mini-shuttle glides to safe landing in desert test flight

    Mini-shuttle glides to safe landing in desert test flight

    Dream Chaser, which looks like a smaller version of the Space Shuttle, would initially be launched on an Atlas V rocket. It's called a lifting body plane due to the lift being created by the body of the vehicle rather than the wings.

    Will Duterte and Trump (and other leaders) do the fist pump?

    The protesters also denounced the Duterte administration for allocating P15.5 billion for the hosting of the summit. Duterte told reporters upon his arrival early Sunday morning: "Well, I shook his ( Trump ) hands".
  • Missouri starts investigating Google's business practices

    Hawley's office argues that federal regulators were wrong not to sue Google and that inaction left an opening for a potential state suit.
    North Korea denounces Trump's Asia tour as a 'warmonger's visit'

    North Korea denounces Trump's Asia tour as a 'warmonger's visit'

    The strike force plans to conduct air defense drills, sea surveillance, defensive air combat training as well as other maneuvers. He added that Trump showed his " true nature as destroyer of the world peace and stability " on his " warmongering " visit.
    Mason Rudolph, Oklahoma State Rally Past Iowa State in Wild 4th Quarter

    Mason Rudolph, Oklahoma State Rally Past Iowa State in Wild 4th Quarter

    With Iowa State driving for a potential game-tying score against Oklahoma State, we had us a near-simultaneous catch. But the end for the Cyclones - a 49-42 loss - was as devastating as it possibly could have been.
  • Taylor Swift to bring stadium tour to Nashville in August 2018

    Taylor Swift to bring stadium tour to Nashville in August 2018

    The stress of Monday morning was eased by the news that Taylor Swift will be coming to the Miami area on her Reputation tour. She joins her pal and former opening act Ed Sheeran on the Superdome's 2018 concert schedule.

    Trump turns to drug industry for his new health secretary

    President Donald Trump has nominated former pharma executive Alex Azar as secretary of Department of Health and Human Services. Early enrollment in Obamacare plans earlier this month was also up considerably compared to previous year .
    U.S.  beats Belarus to win first Fed Cup title since 2000

    U.S. beats Belarus to win first Fed Cup title since 2000

    Stephens served for the match against Sasnovich at 5-3 in the third set, but was unable to clinch the title for the United States. But Belarus, who have never won the showpiece women's team event, hit back in front of a partisan home crowd.