OnePlus has made a name for itself by selling inexpensive phones with top-of-the-line specs. You can buy a OnePlus 5T right now that compares well with a Galaxy S8 costing hundreds of dollars more. Sounds good, right? However, you might want to consider what OnePlus is doing on the security side. It’s been caught several times making basic errors, and it just happened again. The latest beta version of its custom “OxygenOS” Android build was sending user clipboard data to a server in China. Oops.
Yesterday, a user on the OnePlus forums noted that his OnePlus 3T (a phone released in late 2016) got a new system app in the latest beta build. Deep inside the Oreo-based software was “com.oneplus.clipboard.” The user’s firewall app reported this app was sending data to a server. It turns out the IP address is registered to Chinese megacorporation Alibaba. So, transmitting clipboard data to a remote server would be a very, very bad thing. Owners of this phone were understandably concerned.
According to a statement provided to Android Police, this app was only supposed to exist in builds of HydrogenOS. That’s the version of OnePlus’ Android software localized for the Chinese market. The clipboard app was mistakenly included in a beta build of OxygenOS for global devices. That raises the question: what is this app supposed to do in the first place? OnePlus has been vague on the details except to say “this feature is not uncommon for China users.” Maybe some sort of cloud clipboard syncing?
Anyone who installed the beta on their OnePlus 3T has nothing to worry about, according to OP. A spokesperson says no user data was stored on any servers, but we’ll have to take that on faith. If it was transferred insecurely, it’s possible someone could have intercepted it. Although, it’s important to remember this was not a final version of OxygenOS. The only people affected are those who manually flashed the 3T’s open beta build of Oreo.
OnePlus says it is removing the clipboard app from its next beta release. Consider this a reminder that beta software is called beta for a reason. This error doesn’t seem as serious as it did at first, but this is starting to look like a pattern for OnePlus. It was only a few weeks ago users flagged the company for including a system debug app in OxygenOS that could grant root access and compromise security.
Google’s AutoML Creates Machine Learning Models Without Programming Experience
The gist of Cloud AutoML is that almost anyone can bring a catalog of images, import tags for the images, and create a functional machine learning model based on that.
Intel Disclosed Spectre, Meltdown to Chinese Companies Before US Government
Intel's Spectre and Meltdown notification process and the rollout of fixes have been pretty rocky. The company is now under fire for notifying its Chinese customers of the flaws before the US government.
Valve Removed Steam Machines From Its Home Page
You can still access what remains of the Steam Machine landing site via a direct link — not that you'll see much when you get there.
Valve Isn’t Done With Steam Machines After All
Valve developer Pierre-Loup Griffais claims Steam Machines are not dead, and the company has big plans for gaming on Linux and the associated hardware platform.