Tech & Science OnePlus Is Collecting Data Without User Permission

15:02  11 october  2017
15:02  11 october  2017 Source:   International Business Times

OnePlus might launch its next flagship killer early next year

  OnePlus might launch its next flagship killer early next year I wouldn’t blame you if you forgot about this year’s “flagship killer.” That’s why it’s not surprising to hear that OnePlus may have ditched plans to launch a OnePlus 5T handset this year. Instead, it’s supposedly looking to release the OnePlus 6 in early 2018.

Data collected by OnePlus from its users include IMEI numbers, MAC addresses, mobile network names and IMSI prefixes, serial numbers and a lot more. OnePlus is collecting private user data without people's permission . Photo: REUTERS/Danish Siddiqui.

As detailed by the security engineer, Chris Moore, who has provided evidence that the Chinese smartphone manufacturer is collecting data from its users and without their consent. Info: oneplus -devices- collecting -sensitive- data - without - permission .

Android Authority was able to speak to a OnePlus representative about this issue, but received an unsatisfactory response.  © Provided by IBT US Android Authority was able to speak to a OnePlus representative about this issue, but received an unsatisfactory response.  Chinese phone maker OnePlus is under fire once again as it was recently discovered that it was collecting users’ analytics data without their permission. Data collected by OnePlus from its users include IMEI numbers, MAC addresses, mobile network names and IMSI prefixes, serial numbers and a lot more.

UK-based software engineer Chris Moore published a detailed article yesterday showing that OnePlus is able to collect his analytics data on his OnePlus 2 smartphone without his permission. Moore discovered this by proxying the internet traffic on his onePlus 2 using OWASP ZAP, which allowed him to track his phone’s network activity. Moore noticed that a large amount of data is being sent to the open.oneplus.net server through the secure HTTPS protocol. He also dug deeper into open.oneplus.net and discovered the domain name to be an Amazon AWS instance, which is also owned by OnePlus.

12 Artists Who Blasted Politicians For Using Their Music Without Permission

  12 Artists Who Blasted Politicians For Using Their Music Without Permission It must be tough enough as a musician when your art is taken out of context, but we bet it’s twice as hard when you suddenly find your songs used by politicians whose beliefs you’re rather opposed to. Madonna, Lady Gaga and Jay-Z.

It’s concerning that a major Android manufacturer has been collecting and transmitting user data without permission , but it’s even more concerning that OnePlus doesn’t seem to consider it a big issue.

> Notebook / Laptop Reviews and News > News > News Archive > Newsarchive 2017 10 > OnePlus is collecting user data without permission , and you should be scared. Ricci Rox, 2017-10-10 (Update: 2017-10-10).

Using the authentication key on his phone, Moore was able to decrypt the data that the company was collecting from his OnePlus 2. He saw that his handset was sending time-stamped information about locks, unlocks and unexpected reboots, according to Android Police.

Requesting time-stamped data for unexpected reboots makes sense. This allows developers to fix bugs that are in the operating system. What Moore considered excessive however is collecting data related to when users lock and unlock their phones. This is why Moore continued to run his proxy for a long period of time and discovered even more information on what OnePlus is collecting.

He discovered that the data being sent to OnePlus’ servers included the phone’s IMEI number, the phone number, MAC addresses, mobile network names and IMSI prefixes, info on Wi-Fi connection and the phone’s serial number. The worst thing that Moore discovered was that some of the data that OnePlus collected included every time a user opens an app and how long they have that app opened on their device.

12 Artists Who Blasted Politicians For Using Their Music Without Permission

  12 Artists Who Blasted Politicians For Using Their Music Without Permission It must be tough enough as a musician when your art is taken out of context, but we bet it’s twice as hard when you suddenly find your songs used by politicians whose beliefs you’re rather opposed to. Madonna, Lady Gaga and Jay-Z.

OnePlus ' behavior isn't exactly out of the ordinary, but the real issue lies with the way it's conducting its data collection . The company isn't explcitly asking for user permission to amass this type of info, and we'd wager that not all of its customers are aware of the type of data they're offering up.

Home X. OnePlus 5. Accessories. Support. Community. About OnePlus . Careers. Samsung and Apple and pretty much any phone maker are also collecting user date. And don't forget Windows 10

“These event data contain timestamps of which activities were fired up in which applications, again stamped with the phone’s serial number,” Moore explained on his website. “I took to Twitter to ask OnePlus on Twitter how this could be turned off, which disappointingly led down the usual path of ‘troubleshooting’ suggestions, before being met with radio silence.”

Android Authority was able to speak to a OnePlus representative about this issue, but received an unsatisfactory response. The representative didn’t provide an explanation as to why OnePlus didn’t simply have users opt-in for this instead of having it covertly happening in the background. What's also worrying is that the company didn't even address the implication on users' privacy. The representative said that users can disable the transmission of data by turning it off under Settings>Advanced>‘Join user experience program’.

BlackBerry Motion arrives with no keyboard and a giant battery

  BlackBerry Motion arrives with no keyboard and a giant battery That didn't take long -- mere days after images emerged, BlackBerry has launched the Motion. As expected, it's effectively a KEYone without the keyboard... and a couple of extra perks. You're still looking at a mid-range device with a Snapdragon 625 chip, 4GB of RAM, 32GB of storage and a 12-megapixel rear camera, just with a 5.5-inch 1080p display taking up most of the front (there's still a fingerprint reader). However, it's what you can't see that makes the difference. The Motion is IP67 water-resistant, and it packs a whopping 4,000mAh battery.

One plus compromising user data ,is it true? In OnePlus 5, Oct 11, 2017 at 4:13 AM. Forum Statistics.

- October 11, 2017. OMG! OnePlus Is Collecting User Data Without Permission . A security researcher has revealed that the Chinese company OnePlus would be collecting private data of its users without their consent, and without offering alternatives or options to disable or prevent such

The code that’s responsible for collecting users’ private data is part of the OnePlus Device Manager and OnePlus Device Manager Provider. Moore said that these services had sent out 16MB of data in approximately 10 hours. Since those two services are natively part of OnePlus’ OxygenOS operating system, meddling with it could have consequences. Even if that’s the case, there’s actually a way to permanently block this intrusive form of data collection.

Twitter user @JaCzekanski pointed out that the OnePlus Device Manager can actually be removed using the Android Debug Bridge (ADB) without having to root the phone. Android Police explained that that users will simply have to install ADB on their OnePlus device and plug in their phone into a computer with USB debugging enabled. Users will have to run this command [ pm uninstall -k --user 0 net.oneplus.odm ] to remove the OnePlus Device Manager permanently.

Paul George, JJ Watt send well wishes to Gordon Hayward .
Paul George, JJ Watt send well wishes to Gordon HaywardJust five minutes into his first game with the Boston Celtics, Gordon Hayward’s season might have come to an end with a gruesome injury.

—   Share news in the SOC. Networks

Topical videos:

This is interesting!