OnePlus Devices Secretly Collecting IMEI, Phone Number, Carrier Name Other Sensis

[Dave]

OnePlus Devices Secretly Collecting IMEI, Phone No, Carrier, Other Sensitive Data

According to security researcher Chris Moore, OnePlus devices collect data including the smartphone’s serial number and then transmit it to one of the company’s servers. While some of the data that is being collected is relatively mundane, including when a device is locked or unlocked and which WiFi networks it connects to, where OnePlus really gets things wrong is by collecting things like a device’s IMEI, phone number and other characteristics that mean all of the data collected can be identified as belonging to a particular user.

Moore’s blog post is receiving renewed attention this week after originally being posted back in January. According to Moore, the code that goes about the data collection is part of OnePlus Device Manager and OnePlus Device Manager Provider.

In his blog, Moore says that for his particular phone, the services had sent off 16MB of data in 10 hours. Considering what this data comprises, that’s quite a lot.

http://www.redmondpie.com/oneplus-d...number-carrier-name-and-other-sensitive-data/

These Chinese makers just can’t help themselves...