OnePlus May Have Accidentally Sent Clipboard Data to Chinese Server
OnePlus has made a name for itself by selling inexpensive phones with top-of-the-line specs. You can buy a OnePlus 5T right now that compares well with a Galaxy S8 costing hundreds of dollars more. Sounds good, right? However, you might want to consider what OnePlus is doing on the security side. It’s been caught several times making basic errors, and it just happened again. The latest beta version of its custom “OxygenOS” Android build was sending user clipboard data to a server in China. Oops.
Yesterday, a user on the OnePlus forums noted that his OnePlus 3T (a phone released in late 2016) got a new system app in the latest beta build. Deep inside the Oreo-based software was “com.oneplus.clipboard.” The user’s firewall app reported this app was sending data to a server. It turns out the IP address is registered to Chinese megacorporation Alibaba. So, transmitting clipboard data to a remote server would be a very, very bad thing. Owners of this phone were understandably concerned.
According to a statement provided to Android Police, this app was only supposed to exist in builds of HydrogenOS. That’s the version of OnePlus’ Android software localized for the Chinese market. The clipboard app was mistakenly included in a beta build of OxygenOS for global devices. That raises the question: what is this app supposed to do in the first place? OnePlus has been vague on the details except to say “this feature is not uncommon for China users.” Maybe some sort of cloud clipboard syncing?
Anyone who installed the beta on their OnePlus 3T has nothing to worry about, according to OP. A spokesperson says no user data was stored on any servers, but we’ll have to take that on faith. If it was transferred insecurely, it’s possible someone could have intercepted it. Although, it’s important to remember this was not a final version of OxygenOS. The only people affected are those who manually flashed the 3T’s open beta build of Oreo.
OnePlus says it is removing the clipboard app from its next beta release. Consider this a reminder that beta software is called beta for a reason. This error doesn’t seem as serious as it did at first, but this is starting to look like a pattern for OnePlus. It was only a few weeks ago users flagged the company for including a system debug app in OxygenOS that could grant root access and compromise security.
Continue reading
Report: Apple Ignored its Partners’ Repeated Violations of Chinese Labor Laws
Apple has reportedly turned a blind eye to repeated violations of Chinese labor law in its partners' factories over the past six years.
Chinese CPU Designer Loongson Wants to Raise $544 Million With IPO
The Chinese CPU designer Loongson hopes to raise $544 million in its IPO. The company's CPUs have been improving rapidly in recent years.
How to Install Windows 10 in a Virtual Machine
If you have to deal with files you can't trust, need to test multiple OS installations on the same system, or otherwise need access to the OS without wanting to use it as a daily driver, here's how to install Windows 10 in a virtual machine.
Windows 11 Will Launch on Oct. 5, but Only for Select Machines
Microsoft says Windows 11 will start hitting compatible PCs on October 5th. However, you might have to wait much, much longer to install it on your machine.