<Thread> Hi @OnePlus
! How are you today? Let's talk about the OPBugReportLite found in your phone.
This app is a pre-installed system app which sends silently, every 6 hours, the battery stats, kernel panics, watchdogs, ANRs and all crashes of your device to Singapore.
-
-
When you boot your device, the OPReportReceiver start the BugReportLiteService. In the BugReportLiteService OnCreate method, they check if you are a beta user and set flag accordingly. By default, it log the system crashes, watchdogs and the power consumption of your devicepic.twitter.com/hEArigtvJe
Show this thread -
Did I forget to mention that they can modify this configuration remotely. Yes, you heard me REMOTELY! It’s a global mechanism they implemented in the Android framework and they used it a lot. I will come back to that in another thread.pic.twitter.com/eRusC3YDpO
Show this thread -
Let’s say these guys are nice and “only” dump your battery stats. They can access very detailed information with the command “dumpsys batterystats”: get the list of installed apps, which apps are most active,…pic.twitter.com/aisHNV3peb
Show this thread -
Every 6 hours, these logs are zipped in /sdcard/oem_log/OPBRLite.zip and upload to a server located in Singapore.pic.twitter.com/qYNs3mTEUb
Show this thread -
In the code, you can also find some unused methods and variables like getMediaFile (seriously?), TYPE_LOGGING_TCPDUMP, TYPE_LOGGING_BT, TYPE_LOGGING_CAMERALOG, TYPE_LOGGING_GPS. Imagine all the data they used to dump before…pic.twitter.com/dmcRAyHrpo
Show this thread -
-
Big thanks to
@AFAFontes for getting my attention to this app and his analyse of this app.Show this thread -
The decompiled source code of
@OnePlus OPBugReportLite is available: https://github.com/fs0c131y/OPBugReportLite …Show this thread -
Here some clarifications about
@OnePlus BugReportLite app: 1. You can't totally disable the logging 2. You can disable the upload 3. Logs are stored unencrypted in your sdcard. All apps with READ_EXTERNAL_STORAGE perm can access and upload it.Show this thread
End of conversation
New conversation -
-
-
Hi Elliot, I just checked on a OnePlus 5T (in French) but it is said that BugReportLite doesn't have any permission. Do you have any explanation for this ?pic.twitter.com/iQOgvdjqHr
-
Yes. As a lot of system apps you will not see his permissions in the Settings apps.
End of conversation
New conversation -
-
-
wow, please tell us how to disable it.
-
Root and remove the app from system
-
how to know app name?
-
Iam pretty sure
@fs0c131y Can tell us -
true ,waiting.
-
BugReportLite
-
ok, pm disabled com.oneplus.opbugreportlite, hope this is correct way
-
Should do it. Lets just hope there isnt some sneaky backdoor which enables it again (hardly think so though)
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.