Forwarded from EMK Public Channel
對於 1+ 手機的 root 後門問題,1+ 官方作出回應,指出

1. 雖然可以透過 adb 獲取 root 權限,但是一來第三方應用仍然不能取得完整 root 權限,二來 adb 需要打開 USB debugging 而且需要硬件連接手機,所以一般不會在用家不知情的情況下取得 root。

所以,1+ 官方不覺得這個後門帶來嚴重的安全問題。

2. 不過由於用家擔心,所以在未來的 OTA 更新將會移除 EngineerMode 裡面的 adb root 功能。

原文:

"Yesterday, we received a lot of questions regarding an apk found in several devices, including our own, named EngineerMode, and we would like to explain what it is. EngineerMode is a diagnostic tool mainly used for factory production line functionality testing and after sales support.

We’ve seen several statements by community developers that are worried because this apk grants root privileges. While, it can enable adb root which provides privileges for adb commands, it will not let 3rd-party apps access full root privileges. Additionally, adb root is only accessible if USB debugging, which is off by default, is turned on, and any sort of root access would still require physical access to your device.

While we don't see this as a major security issue, we understand that users may still have concerns and therefore we will remove the adb root function from EngineerMode in an upcoming OTA."