Live data from Hacker News

Backdoor with root access found from OnePlus phones

twitter.com

81–90 of 113 posts

Re: Backdoor with root access found from OnePlus phones

#81
post #74
post #54

Earlier quoted context omitted.

Reference, or explanation?

https://en.wikipedia.org/wiki/Mobile_baseband If it has GSM/LTE/CDMA/etc baseband processor with closed implementation, assume it has remote root backdoor. Samsung has already been caught. osmocombb tried to solve this. That project is essentially dead.

Librem 5 is a partial solution because the baseband has no access to the system.

Re: Backdoor with root access found from OnePlus phones

#82

Earlier quoted context omitted.

I just asked another commenter who suggested Lineage to talk a little about their experience with it since I just flashed PA onto my 3t this past Friday. I'm going to check it out a bit today. Do you know if it's a simple process to go from PA -> Lineage? A little about me: I am a pretty experience developer but not much of a tinkerer when it comes to phones. This flash to PA is only the third time I've done this wit…

Not sure specifically how you installed PA, but, generally, that would look something like: 1. Unlock bootloader 2. Install aftermarket recovery (CWM or TWRP) 3. Install new ROM (PA) Now that you've done 1 and 2 (usually the difficult parts), you really just need to repeat step 3 with a different ROM. Assuming you have TWRP installed, LineageOS has instructions for your specific situation (installing from recovery) a…

I just started messing with LineageOS on my Moto G4. Make sure you make a backup of the stock image so you can flash it back if something goes wrong with your cell network settings. I didn't and now I only have 3G and have been procrastinating flashing the stock everything and starting over.

Re: Backdoor with root access found from OnePlus phones

#83
post #18

Earlier quoted context omitted.

> I enjoyed the hardware but Do like me, if you don't want to trash a OnePlus device: install LineageOS.

Third party software is always a bumpy ride. Something is going to not work out of the box, optimization will be less than stellar, battery usage won't be as good. I cannot tolerate my cellphone not working 100% of the time.

Can you tolerate a backdoor in it?

Re: Backdoor with root access found from OnePlus phones

#84
post #16

Isn't the EngineerMode APK an MTK app? I have been involved in developing an Marshmallow MTK based phone in the past and in my experience their BSP's were pretty messy. I.e. a lot of cleaning up is necessary if you want a relatively quiet logcat and debugging APK's removed - even for user builds. Edit: I must have remembered wrong or I saw the EngineerMode on the QComm device we developed before our MTK based device.…

I have a Blu Studio Max (2017) with a MTK chipset. EngineerMode is installed and running.

Re: Backdoor with root access found from OnePlus phones

#85

I've said it on HN before but it bears repeating: If you have a OnePlus, do yourself a favour and put LineageOS on it. It works perfectly on my OP3.

Android's bootloader isn't supposed to be locked when installing custom firmware. An unlocked bootloader is a large physical access vulnerability.

How does LineageOS help security exactly?

Re: Backdoor with root access found from OnePlus phones

#86

Earlier quoted context omitted.

It hasn't been released yet, but Purism recently smashed their fundraising goal for the Librem 5. From the description linked to below: > Librem 5, the phone that focuses on security by design and privacy protection by default. Running Free/Libre and Open Source software and a GNU+Linux Operating System designed to create an open development utopia, rather than the walled gardens from all other phone providers. https…

Because a small fly by wire company is likely to have better QA than a much larger company....

Different priorities might work very well.

Re: Backdoor with root access found from OnePlus phones

#87

I've said it on HN before but it bears repeating: If you have a OnePlus, do yourself a favour and put LineageOS on it. It works perfectly on my OP3.

Android's bootloader isn't supposed to be locked when installing custom firmware. An unlocked bootloader is a large physical access vulnerability. How does LineageOS help security exactly?

Encryption helps.

Re: Backdoor with root access found from OnePlus phones

#88
post #72
post #60

Earlier quoted context omitted.

> I am consistently blown away at the level of garbage Android users are expected to deal with on a regular basis. My girlfriend uses an iPhone; I am consistently blown away by the amount of garbage she's expected to deal with on a regular basis. When she changes to another app, our video chats go dark; there's no Termux or GNURoot equivalent (that I'm aware of); tapping doesn't move the cursor but instead selects wo…

> she's stuck using Safari and seeing ads. So, so many ads. Ads everywhere. I never see ads on my phone, but on hers the Internet is nothing but ads as far as the eye can see. Purify is an ad blocker that works great on the iPhone. Content blockers have been a supported part of iOS for the last couple versions. Apple actually caught a lot of flack from websites for allowing them. > But at least with Android I have fr…

iTunes is user hostile. I might try an iPhone if not for the terrible experience of managing one on Windows.

I was also unimpressed by how difficult it was to get my family member's pictures out of their cloud offering, when asked to do so for relatives.

Re: Backdoor with root access found from OnePlus phones

#89

Earlier quoted context omitted.

Android's bootloader isn't supposed to be locked when installing custom firmware. An unlocked bootloader is a large physical access vulnerability. How does LineageOS help security exactly?

Encryption helps.

Does it? It seems useless when anyone with physical access can replace the bootloader.

https://android.stackexchange.com/questions/38909/unlocked-b...

Re: Backdoor with root access found from OnePlus phones

#90
post #18

Earlier quoted context omitted.

> I enjoyed the hardware but Do like me, if you don't want to trash a OnePlus device: install LineageOS.

Third party software is always a bumpy ride. Something is going to not work out of the box, optimization will be less than stellar, battery usage won't be as good. I cannot tolerate my cellphone not working 100% of the time.

LineageOS gives me a 30% more battery on the OPO! Everything works great.
Post reply on HN