OnePlus has left an app on its devices that could compromise security

OnePlus has left an app on its devices that could compromise security

According to mobile security researcher Robert Baptiste-otherwise known by the pseudonym Elliot Alderson, a reference to the main character in the television series "Mr. Robot"-smartphones from OnePlus have for years contained a hidden backdoor that would allow root access to the device".

With the password cracked, it's now possible for an app to enable root access on any device with the APK preinstalled.

He further claims that the company has intentionally left the backdoor on their devices.

If hackers wanted to get into your phone, they would need physical access to it, so if you have any OnePlus devices, just keep it away from any of your playful tech-savvy friends until the app is officially removed.

A developer managed to use this very app to root the device by figuring out the password used to gain root access.

Iraq Launches Offensive to Recapture Last Town under ISIS Control
Al-Baghdadi's whereabouts and the question of whether he is dead or alive have been a continuing source of mystery and confusion. Syria's army declared victory over the militants on Thursday, after seizing the last substantial town on the border with Iraq.

Unfortunately, it seems someone at OnePlus forgot to remove or disable the package before kicking the handsets out to the general public, and as a result multiple users now have access to what is effectively a back door in their Android phones. The developer further added that he will publish an application for rooting OnePlus devices without unlocking. It is actually a modified version of a testing application created by Qualcomm.

Enlarge / The "Engineering Mode" app from a OnePlus 3T. Check the name of native library used to check the code: door...

"If you have an OnePlus device, I'm pretty sure you have this app pre-installed".

He was able to find a system app named EngineerMode that is actually a Qualcomm factory app with the ability to toggle components such as the charging chip, GPS, NFC and others - as this app shouldn't be included in consumer-side ROMs, it's a target app that malicious actors will want to crack into.

The discoverer of the app had a problem.

Related Articles

  • Watch the First Three Missions of the Battlefront 2 Campaign

    We have recently posted the first 30 minutes of the Star Wars Battlefront II campaign on our YouTube channel for you to check out. The six heroes won't be unlocked immediately, despite the fact five them were playable in the first game.
    Heartbreak as Northern Ireland pay price for a cruel penalty against Swiss

    Heartbreak as Northern Ireland pay price for a cruel penalty against Swiss

    The Nottingham Forest forward produced a typically dogged performance as he played for 74 minutes in a spirited team performance. They only needed to nick one to take the game to extra time.
    Eminem Drops Surprise Single Featuring Beyoncé

    Eminem Drops Surprise Single Featuring Beyoncé

    It's been four long years since Eminem last released an album so everyone hip hop fans attention is laser focused on him. Having teased its imminent arrival, Eminem has now officially released the first single from his upcoming album .
  • Cowboys laugh off rumored Jerry Jones ousting attempt

    The NFL expects that a contract extension for Commissioner Roger Goodell will be "done shortly", a league source says. Then, his star RB Ezekiel Elliott was suspended once again, missing Sunday's game that resulted in a loss.

    Qualcomm will reportedly reject Broadcom's offer

    Those concerns all came together to make Qualcomm's answer to Broadcom a big fat no, so now the ball is back in Broadcom's court. Qualcomm delivers chips to carrier networks to provide broadband and mobile data.
    SEC Network analysts project updated College Football Playoff rankings

    SEC Network analysts project updated College Football Playoff rankings

    The extra year hasn't hurt McGlinchey's draft stock - he is considered a first-round pick by just about every mock draft online. Georgia hasn't won the SEC championship in 12 years, and you have to go back to 1980 to find the Bulldogs' last national title.
  • Trump on North Korea crisis: I'd never call Kim 'short and fat'

    Trump on North Korea crisis: I'd never call Kim 'short and fat'

    However, the insults also fit into a long tradition of insulting American leaders. Trump, however, is a famously impulsive tweeter. Aegis ships and seven South Korean warships.

    Missouri launches investigation into Google's handling of consumer data

    The company operates "in a highly competitive and dynamic environment", Patrick Lenihan said in an emailed statement. We've reached out to Google with a request for comment and will update when we hear back.

    Progressive solons protest arrival of President Trump

    President Donald Trump and Philippines President Rodrigo Duterte during a rally near the U.S. But Trump and Duterte have expressed mutual admiration for other.
  • Russian Federation  accuses United States  of not attacking Daesh in Syria town

    Russian Federation accuses United States of not attacking Daesh in Syria town

    Footage used by the Russian government to prove US forces were working alongside the Islamic State was actually taken in 2016 from an entirely different engagement.

    Javier Mascherano hopes Argentina are 'never' without Lionel Messi again

    Argentina's victor came with just four minutes to play and the victory marks another important milestone for Jorge Sampaoli. He singled out Aguero for creating scoring opportunities despite a lack of space offered by Russia's defensive setup.
    Injustice 2 Fighter Pack 3 revealed - TMNT join the fight

    Injustice 2 Fighter Pack 3 revealed - TMNT join the fight

    Given how the guest characters have always been last to come for each pack, it's safe to say that's what'll happen here as well. You read that right! It's not quite clear how the gameplay for the Ninja Turtles will work for the fighting game.