OnePlus Android mobes’ clipboard app caught phoning home to China

7 months ago admin Comments Off on OnePlus Android mobes’ clipboard app caught phoning home to China

Sorry! that was a test feature for Chinese users, company claims

Someone running the latest test version of OnePlus’s Oreo-based operating system revealed in its support forums that unusual activity from the builtin clipboard manager had been detected by a firewall tool.

Upon closer inspection, the punter found that the app had been transmitting information to a block of IP addresses registered to Alibaba, the Chinese e-commerce and cloud hosting giant.

While extra logging and telemetry are to be expected from beta software – so that developers get an idea of any problems with their code prior to an official release – the fact that data was being siphoned off without warning from a clipboard manager raised eyebrows, leading some to fear their copy-paste actions were being snooped on and question the privacy protections on their OnePlus handsets.

OnePlus has yet to respond to our request for comment, although a rep told Android Police that this was a feature destined for handsets in China, and will be removed from, presumably, mobes outside the Middle Kingdom.

“Our OnePlus beta program is designed to test new features with a selection of our community. This particular feature was intended for HydrogenOS, our operating system for the China market,” a OnePlus spokesperson was quoted as saying. “We will be updating our global OxygenOS beta to remove this feature.”

Shock horror

This should not come as much of a shock to those who follow the China-based OnePlus. In October last year, researchers discovered that OnePlus handsets were collecting unusually detailed reports on user activities, although the manufacturer said at the time it was only hoarding the data for its internal analytics. One month later, it was discovered that some phones had apparently been shipped with a developer kit left active, resulting in the phones sporting a hidden backdoor.

And lest we forget, today’s desktop and mobile operating systems are pretty gung-ho in phoning home information about their users, with Microsoft catching flak for Windows 10 telemetry in particular. ®

UPDATE, JAN 15th: OnePlus has been in touch with the following statement:

[afsp_imgs kwd=”technics” num=”1″ wd=”640″ hg=”360″]

[afsp_tube kwd=”technics” num=”1″ wd=”640″ hg=”360″]