Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Backdoor with root access found from OnePlus phones

twitter.com

Post reply on HN
Print view View original

31–40 of 113 posts

Re: Backdoor with root access found from OnePlus phones

#31

Post by hs86 »

nocoder wrote: post #10
darklajid wrote: post #5

Earlier quoted context omitted.

lineageos is awesome. Unfortunately the camera app is quite a bit worse in my opinion (used it on the OnePlus One, 3T and haven't tested it with my 5). Guess some things are more important at this point..

I would like to use lineage OS but if I root my phone my work email will stop working. It is configured via Boxer app, is there a work around?

To gain root access you have to flash an optional zip file [0] after flashing LineageOS itself and the also optional OpenGapps [1]. If you don't do that, your Boxer app should pass these SafetyNet checks [2].

If you want both root and still full access to these SafetyNet-"protected" apps, you can try the alternative rooting solution Magisk [3] which specializes on bypassing these (imho arbitrary) restrictions.

[0] https://download.lineageos.org/extras

[1] http://opengapps.org/

[2] https://www.lineageos.org/Safetynet/

[3] https://forum.xda-developers.com/apps/magisk/official-magisk...

Re: Backdoor with root access found from OnePlus phones

#33

Post by staz »

jokoon wrote: post #22

I got a very cheap huawei Y300 which stopped working recently. I think I remember having this app, along with many other weird ones preinstalled. Also, does anybody knows why some android phones have some "debug mode" when I plug them via USB? I mean if you think about it, that also sounds like a backdoor.

USB debug mode is a standard feature of Android that is disabled by default, but it's possible to enable it manually. If you see it without having enabled it, it is indeed strange

https://www.kingoapp.com/root-tutorials/how-to-enable-usb-de...

Re: Backdoor with root access found from OnePlus phones

#35

Post by logingone »

RpFLCL wrote: post #7

I just checked and found it on my OnePlus Two. To other OP owners: make sure you look under "all" apps, not just "downloaded". After this finding , the data collection incident a month ago, and their last 1Gb+ OTA update that bootlooped my phone, I think I'm done with OnePlus products. I enjoyed the hardware but I can't tolerate this much malice/incompetence in software in something as critical to my daily life. I'm…

I have an HTC bootlooped by an OTA, hence my now having a OnePlus3. Getting fed up with all this nonsense. Seems to me the android ecosystem is just too wild west, especially for such an important device, and may now have to head to apple. I see I also have this EngineerMode, data usage 1.4MB since Aug 7, modify system settings enabled. When I tweeted them about the recent data collection issue they replied with "it's standard industry practice".

Re: Backdoor with root access found from OnePlus phones

#37

Post by Giroflex »

hs86 wrote: post #4
majewsky wrote: post #2

I just checked my OnePlus One and it doesn't have the "Engineering mode" app. Maybe because I'm on the original CyanogenOS; I didn't upgrade to Oxygen OS.

Do you consider switching over to the community based LineageOS? They will continue to provide security updates for your phone and afair currently you are stuck with Android 6. Additionally, the upcoming release will bring Android 8 to your device: https://review.lineageos.org/#/q/branch:lineage-15.0+bacon

Are there any serious known issues on LineageOS for the OP3, other than the camera being weaker?

Re: Backdoor with root access found from OnePlus phones

#38

Post by mino »

asfdsfggtfd wrote: post #28
mino wrote: post #18

Earlier quoted context omitted.

> I enjoyed the hardware but Do like me, if you don't want to trash a OnePlus device: install LineageOS.

Do you trust there not to be lower level issues?

Well... at least, this specific one isn't.

Re: Backdoor with root access found from OnePlus phones

#40

Post by shpx »

therealmarv wrote: post #11

It's not the first time a big security/privacy leak was found on OnePlus' phones. Would stay far away from OnePlus phones.

I would stay away from proprietary software, especially if it was written in Russia or China.

All of their tech companies owe their entire existence to their respective governments and it's not like the governments set up that environment for them for free.

Post reply on HN