Timely kernel source releases allow developers and power users to dive deeper into the code that runs the device, figuring out different ways to tinker with configuration parameters. OnePlus 8T Review: The T upgrade that makes sense

Moreover, the device-specific unbrick package, commonly referred to as “MsmDownloadTool”, is up for grabs as well. This comes as no surprise as the OEM has historically been receptive to the needs of the developer community. It’s been less than two weeks since the phone went on sale, and already we are seeing OnePlus promoting third-party development for the device by releasing the kernel source code. The smartphone is the mid-cycle refresh to the OnePlus 8.

/phoenix_technologies_bios/atom.The OnePlus 8T was announced on October 14.

Tizen - An open source, standards-based software platform for multiple device categories.

Blog - Möbius Strip Reverse Engineering.

IBM Product Security Incident Response Team.

Disclaimer: I tested the vulnerabilities on OnePlus 3 only, but OnePlus 3T contains the vulnerable code too.[…[ CVE-2017-5624, reported on January 16th, should be fixed in a future OxygenOS release – the reason for its today’s public disclosure is because someone already published it on January 24th. It was also found independently by a OnePlus engineer. The first vulnerability, CVE-2017-5626, was reported on January 23rd. Both issues were responsibly disclosed to and acknowledged by OnePlus Security. The combination of the vulnerabilities enables a powerful attack – persistent highly privileged code execution without any warning to the user and with access to the original user’s data (after the victim enters his credentials). The second vulnerability, CVE-2017-5624, affecting all versions of OxygenOS to date (Feb 10 UPDATE: OxygenOS 4.0.3, released Feb 09, seems to be patched), allows the attacker to disable dm-verity. This vulnerability allows for kernel code execution (albeit with a 5 seconds warning upon boot). The vulnerability allows for a physical adversary (or one with ADB/fastboot access) to bypass the bootloader’s lock state, even when Allow OEM Unlocking is disabled, without user confirmation and without triggering a factory reset. The first one, CVE-2017-5626, is a critical severity vulnerability affecting OxygenOS 3.2-4.0.1 (4.0.2 is patched). In this blog post I disclose two vulnerabilities in the OnePlus 3/3T bootloader. Owning a Locked OnePlus 3/3T: Bootloader Vulnerabilities New Bootloader Vulnerabilities in OnePlus 3/3T – CVE-2017-5626 and CVE-2017-5624

Msm download tool oneplus 3t