151
What is EngineerMode?

  1. OmegaHsu OxygenOS Team Staff Member Nov 14, 2017

    OmegaHsu, Nov 14, 2017 :
    Friends,

    Yesterday, we received a lot of questions regarding an apk found in several devices, including our own, named EngineerMode, and we would like to explain what it is. EngineerMode is a diagnostic tool mainly used for factory production line functionality testing and after sales support.

    We’ve seen several statements by community developers that are worried because this apk grants root privileges. While, it can enable adb root which provides privileges for adb commands, it will not let 3rd-party apps access full root privileges. Additionally, adb root is only accessible if USB debugging, which is off by default, is turned on, and any sort of root access would still require physical access to your device.

    While we don't see this as a major security issue, we understand that users may still have concerns and therefore we will remove the adb root function from EngineerMode in an upcoming OTA.

    Thanks,
     

    #1
  2. rarog Lollipop Senior Moderator Dec 22, 2017

    Stickied Post
    rarog, Dec 22, 2017 :
    This is a semi-official list of OOS versions where the Angela backdoor has been tested and doesn't work anymore, so the security is fixed:

    OP3: OOS v5.0 or newer
    OP3T: OOS v5.0 or newer
    OP5: OOS v4.5.15 or newer
    OP5T: OOS v4.7.4 or newer

    The list will be refreshed, when new there is new insight. The list won't contain open beta versions, only the stable release versions.

    Edit: Added OP3 and OP3T after testing.
     
    Last edited: Dec 23, 2017

  3. MNavy_ Jelly Bean Nov 14, 2017


    #2
  4. youbi Portuguese POC Assistant Head Moderator Nov 14, 2017

    youbi, Nov 14, 2017 :
    Thanks for the quick response. :) Nice to see that you guys keep reacting fast to any questions in the OnePlus community and that the old days are gone.

    Keep up the good work. There's nothing better than quick communication and fast reactions. ;)
     
    Last edited: Nov 14, 2017

    #3
  5. jpswer Jelly Bean Nov 14, 2017

    jpswer, Nov 14, 2017 :
    Good common sense response. Unfortunately the media like to sensationalise everything.

    Physical access + password is needed. But surely this is just what would be required to root your device anyway...
     

    #4
    otto2, Jassijee, kapilathi and 14 others like this.
  6. BeingIncog Marshmallow Nov 14, 2017


    #5
  7. SoniaB Nougat Senior Moderator Nov 14, 2017

    SoniaB, Nov 14, 2017 :
    Indeed pinned for visibility
     

    #6
    Happy John, otto2, remedy and 15 others like this.
  8. Android450 Lollipop Nov 14, 2017


    #7
    Happy John, otto2, jeffroNC and 9 others like this.
  9. BeingIncog Marshmallow Nov 14, 2017


    #8
    otto2, pa5t1s, Praty_28 and 2 others like this.
  10. dsmonteiro Community Consultant Community Expert Nov 14, 2017

    dsmonteiro, Nov 14, 2017 :
    Will that change come to all models?

    What about the update that was meant to change data collection? No update was yet provided for the OPX.
     

    #9
    otto2, mannymac25, h313 and 14 others like this.
  11. An.I.Am Jelly Bean Moderator Nov 14, 2017


    #10
    pa5t1s, pablofg1978 and BeingIncog like this.
  12. pojr Jelly Bean Nov 14, 2017

    pojr, Nov 14, 2017 :
    I will gladly predict how OnePlus will reply to this:
















     

    #11
  13. marinobiagio Jelly Bean Nov 14, 2017

  14. dsmonteiro Community Consultant Community Expert Nov 14, 2017

    dsmonteiro, Nov 14, 2017 :
    I was looking at it and thinking "Weird, YouTube isn't loading...".
     

    #13
    otto2, ZacharyX8, Mr. BG and 9 others like this.
  15. dougninja Eclair Nov 14, 2017


    #14
    lostLambda likes this.
  16. SimonRam Lollipop Nov 14, 2017

    SimonRam, Nov 14, 2017 :
    "After sales support"?
    It's that that was using over 400mb of data since August was it, and for what exactly?

    This smacks of a cover up again!
     

    #15
    otto2, lostLambda, rvirex and 2 others like this.
  17. Serbian Overlord KitKat Nov 14, 2017

    Serbian Overlord, Nov 14, 2017 :
    What is a OPX?
     

    #16
    pojr, pa5t1s, Punk_69 and 3 others like this.
  18. dsmonteiro Community Consultant Community Expert Nov 14, 2017

    dsmonteiro, Nov 14, 2017 :
    The password is 'angela'.
     

    #17
    otto2, lostLambda, pa5t1s and 5 others like this.
  19. Android450 Lollipop Nov 14, 2017

    Android450, Nov 14, 2017 :
    You mean it's not "clicky buttons"? :eek:
     

    #18
    otto2, pa5t1s, Praty_28 and 2 others like this.
  20. youbi Portuguese POC Assistant Head Moderator Nov 14, 2017

    youbi, Nov 14, 2017 :
    I'm no expert but my guess is that it might be used for doing diagnosis on a phone with issues under warranty and with the help of a remote session, so in this point that talk about after sales really makes sense.
     

    #19
    otto2, luxuskamel and handheld_addict like this.
  21. Walkin_mn Jelly Bean Nov 15, 2017

    Walkin_mn, Nov 15, 2017 :
    Ok, but why is then the app in every phone in the first place? and why are you keeping it preinstalled after the OTA? what is the function of it for us the users?
     

    #20