Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Backdoor with root access found from OnePlus phones

twitter.com

Post reply on HN
Print view View original

41–50 of 113 posts

Re: Backdoor with root access found from OnePlus phones

#41

Post by hanklazard »

logingone wrote: post #35
RpFLCL wrote: post #7

I just checked and found it on my OnePlus Two. To other OP owners: make sure you look under "all" apps, not just "downloaded". After this finding , the data collection incident a month ago, and their last 1Gb+ OTA update that bootlooped my phone, I think I'm done with OnePlus products. I enjoyed the hardware but I can't tolerate this much malice/incompetence in software in something as critical to my daily life. I'm…

I have an HTC bootlooped by an OTA, hence my now having a OnePlus3. Getting fed up with all this nonsense. Seems to me the android ecosystem is just too wild west, especially for such an important device, and may now have to head to apple. I see I also have this EngineerMode, data usage 1.4MB since Aug 7, modify system settings enabled. When I tweeted them about the recent data collection issue they replied with "it'…

I’ve made the same decision re: android and apple.

I really wish there was a decent Linux phone I could buy ... anyone know if there are any good contenders or future prospects?

Re: Backdoor with root access found from OnePlus phones

#42

Post by DarronWyke »

hs86 wrote: post #4
majewsky wrote: post #2

I just checked my OnePlus One and it doesn't have the "Engineering mode" app. Maybe because I'm on the original CyanogenOS; I didn't upgrade to Oxygen OS.

Do you consider switching over to the community based LineageOS? They will continue to provide security updates for your phone and afair currently you are stuck with Android 6. Additionally, the upcoming release will bring Android 8 to your device: https://review.lineageos.org/#/q/branch:lineage-15.0+bacon

What are some things to be aware of when switching? I'm a 3T owner and I'm done with the OS (still love the hardware). Hesitant to simply flash new firmware onto it without knowing what I'm getting into.

Re: Backdoor with root access found from OnePlus phones

#43

Post by mondoshawan »

atomicnumber1 wrote: post #9

I didn’t knew that engineer mode app could be used for such malice. I bet they didn’t either (btw I know that they should have been more vigilant about what goes into the consumer device). And this app is developed by Qualcomm. I just think that they forgot to remove from user builds (which btw is a bad sign).

After having worked in the bowels of Qualcomm's Android drops, I have to note that the amount of precompiled vendor binaries that get included was astounding. The worst part is that their tendrils hook in to major parts of the low level networking stacks in very bizarre ways. Removing them is often extremely difficult, and even simple things like removing APKs like this one often affect the stability of the system as a whole.

I can't really fault 1+ for this debacle -- but this is what happens when OEMs just go along with using these inscrutable blobs of crapware from their upstream vendors.

I only hope Librem can actually pull off their phone. Shipping something fully open in light of findings like this may help to turn the tide.

Re: Backdoor with root access found from OnePlus phones

#44

Post by stolho »

shpx wrote: post #40
therealmarv wrote: post #11

It's not the first time a big security/privacy leak was found on OnePlus' phones. Would stay far away from OnePlus phones.

I would stay away from proprietary software, especially if it was written in Russia or China. All of their tech companies owe their entire existence to their respective governments and it's not like the governments set up that environment for them for free.

Sure, and tech companies in USA are super trusted. And for sure no backdoors are found. Just one of the recent examples when author of Telegram was "contacted" by USA government during his visit to USA. If you really want to be honest - you should understand that every government is interesting in "access" to popular tech tools - laptops, phones, social networks, messengers and etc.

And it will be really good also to check facts and not yellow press like CNN, BBC and etc and just bullshit Russia.

Trust is a weakness... Never forget it :)

Re: Backdoor with root access found from OnePlus phones

#46

Post by jetpks »

laxentasken wrote: post #15

Found it on my Oneplus X. Maybe this is the time to try out Apple.

As a long time iPhone user that swings Android every few years to try the waters, I am consistently blown away at the level of garbage Android users are expected to deal with on a regular basis.

Want to know how many times my iPhones have boot looped in the last nine years? Not once ever. My last Android (Nexus 6p) managed to do it several times in the 3-ish months I daily-drove it.

Want to know how long you can expect to get iOS updates with a new hardware purchase? 5+ years. Compared with the very best case for Android: 2 maybe?

How many times with an iPhone have I been expected to install a custom OS to get around a user-hostile feature like I saw about fifty times in the 1 billion outdated androids thread? Zero times.

It’s unreal.

Re: Backdoor with root access found from OnePlus phones

#47

Post by fosco »

hanklazard wrote: post #41
logingone wrote: post #35

Earlier quoted context omitted.

I have an HTC bootlooped by an OTA, hence my now having a OnePlus3. Getting fed up with all this nonsense. Seems to me the android ecosystem is just too wild west, especially for such an important device, and may now have to head to apple. I see I also have this EngineerMode, data usage 1.4MB since Aug 7, modify system settings enabled. When I tweeted them about the recent data collection issue they replied with "it'…

I’ve made the same decision re: android and apple. I really wish there was a decent Linux phone I could buy ... anyone know if there are any good contenders or future prospects?

I am hoping postmarketOS will be a good alternative.

Still being developed and not ready for prime time yet.

Re: Backdoor with root access found from OnePlus phones

#49

Post by dopamean »

mino wrote: post #18
RpFLCL wrote: post #7

I just checked and found it on my OnePlus Two. To other OP owners: make sure you look under "all" apps, not just "downloaded". After this finding , the data collection incident a month ago, and their last 1Gb+ OTA update that bootlooped my phone, I think I'm done with OnePlus products. I enjoyed the hardware but I can't tolerate this much malice/incompetence in software in something as critical to my daily life. I'm…

> I enjoyed the hardware but Do like me, if you don't want to trash a OnePlus device: install LineageOS.

I am completely unfamiliar with Lineage. I literally just flashed PA on my 3t on Friday and have been having some minor issues with it (wifi connectivity and spotty cell coverage) that I didn't have before when the phone was stock. Could you give me a little info about your experience with Lineage and what you like/dislike about it?

I should add, I flashed PA because I bought a really expensive pair of bluetooth headphones (from Sony) that were having really bad connectivity issues that have been mostly resolved by changing roms.

Re: Backdoor with root access found from OnePlus phones

#50

Post by dopamean »

differentView wrote: post #13
raverbashing wrote: post #12

Earlier quoted context omitted.

Not to mention the "phone crashes when calling 911" bug

Wasn't that a bug with other phones as well?

Some version of this bug has cropped up on many phones on different carriers all around the world.
Post reply on HN