Update: OnePlus revises One release date, blames recently-announced OpenSSL vulnerabilities

Daniel Bader

June 10, 2014 6:35 pm

OnePlus is once again delaying the One, its spec-heavy debut smartphone starting at $299 USD.

Though the company has taken some questionable paths to get to this point, the latest delay, announced in a letter to those awaiting an invite, is blamed on a last-minute software update meant to “work on perfecting some final issues.” While the letter itseld doesn’t go into detail, a CyanogenMOD member took to Reddit to clear up some misconceptions about what exactly this software update entails.

Turns out that the OpenSSL bugs made public last week — these barely two months after the Heartbleed OpenSSL bug that racked the internet — were more severe than some would have let on. As a result, “[CyanogenMOD] decided to include the correction for those vulnerabilities, in the factory release of the One. A new release means the whole firmware needs to be re-certified (including QA time), but we believe the security benefits outweigh the delay. So yes, there was a new build issued at fairly last minute, but it wasn’t due to missing set deadlines or expectations.”

In other words, the issue isn’t with OnePlus, nor really with CyanogenMOD, but with bad luck and an emphasis on security. To that, I say good on you, CyanogenMOD. Way to take your time to deliver a better product rather than rushing it to market and risk your users’ data in the process.

Update: OnePlus has acted quickly and solved the software issues. In a statement yesterday, OnePlus noted that “We did choose to delay the shipment of the first phones in order to make sure the software was secure and provided the best possible user experience. The CyanogenMod team worked very quickly and efficiently and the Open SSL issues have already been fixed. The first OnePlus Ones ship to early users with invites as early as tomorrow.” – IH

ysi35GV

SourceReddit

  • leobg

    Meh. Sounds more like an excuse for yet another delay.

    • MikeOxlong

      Cyanogenmod as a whole has gone so far downhill over the past few years I wouldn’t touch anything they output with a ten foot poll, especially their software. Since I like the hardware of the one plus, here’s hoping the xda community gets on with the customization of this device, pronto.

    • leobg

      I’m kind of thinking CM isn’t the one at fault here. They’re doing fabulous job actually.

  • Ken K.

    How typical. Now it’s someone’s fault.

    Oppo is running out of excuses for failure to deliver the phone. I can’t wait for the OnePlus / Oppo fanboys to jump in.

    • Bri Bru

      *grabs popcorn*

  • Victor_Creed

    Will they ever get it to market? Doubtful

  • nekkidtruth

    I can see both sides of this. Of course security is important and it’s definitely in their best interest to resolve a security issue before release. However, delay after delay really takes it’s toll and even if it’s for a legitimate reason, people start to develop a “Yeah right.” type of an attitude.

    • MXH070

      Gaping holes in security never stopped apple or android releasing new devices. Starting to think this One plus is a vapor device.

    • nekkidtruth

      You’re absolutely right, it has never stopped them. In some cases, they should have.

  • asian don draper

    their collections of emails will be their marketing method to getting mass.

    no need to spend on glitzy campaigns when all you need is PR and emails.
    #asiandraper

  • Lakh Jhajj

    I think One + made a mistake going with CM. They should have just put vanilla Android on this phone and let it be free in the world of us android enthusiasts. And get those production lines going.

    Now it’s all excuses one after another. And I am sure by the time One+ gets their act straight , most of us will be bored of waiting for this phone.

    • HatInTheRing

      That’s true actually. I’m excited about CM. It looks awesome. More interesting than vanilla Android. But CM isn’t Google, it’s another skin. It sounds like they just aren’t there. It’s one more thing to go wrong between the raw experience and end use. And it sounds like that is already effecting OnePlus negatively. This delay is gonna piss off a lot of a potential buyers.

  • J-Ro

    They claim to be delayed due to security yet they use the most open OS on the market. If they were really worried about security, they would build a new OS from the ground up based on security.

    P.S. If this was discovered months ago, why mention this today as a delay?

    • Ivan

      You should read some information about the most recent OpenSSL bugs…

    • J-Ro

      New ones will always surface. You just can’t use any sensitive information on the internet anymore. After the government of Canada was hacked, that was a big sign.

      I am actually more shocked that no one has been in the works to make a better platform. Building it around security first instead of openness.

    • Ivan

      I’m not sure I understand… Open as Open source? Because that openness is exactly what contributes to security… It does have some flaws but less than it would if it wasn’t. This isn’t just about Android, OpenSSL is the issue. One critical bug was discovered two months ago, and a new one very recently (not as easy to exploit as the previous one but still…) so I assume they had to make sure they do everything properly. It would only be common sense to do it even if they didn’t have security as the main point of the device.
      Then again, I can’t deny there have been too many delays regarding the release of one plus one, so they could be using this as an excuse for failing to deliver since they already have updates set up pretty well on CM.
      Also there’s plenty of platforms focusing on security, but there’s not much they can do about things like these where a lot of the web relies on these technologies.

    • J-Ro

      Security is an excuse. They only use it because people are more likely to believe it and give them more time rather than what is really delaying them. The price is too good to be true. If the glitch was so serious, why aren’t any other manufactures doing recalls?

      They will likely find something else to blame to delay the release till christmas.

    • Dan

      You should read some information about Android.

    • Ivan

      Anything specific?

  • Bri Bru

    Come on already… this kind of incidents show how unprofessional the company is. Why do I feel that the company knew this all along and this is a part of their “plan”. They know they can still win this game with their card of “low pricing”

  • Rich

    I was waiting to get a new phone since my old phone is dying. I think I’ll just get the Moto G 4G instead.

  • Guest

    Even the release gets postponed again and again. How would be the service?? Lots of questions to be answered.!

  • hoo dat

    I know they’re a new company with a new product so I was expecting some delays but I finally gave up and cancelled my order yesterday. I was genuinely intrigued by this device and hoped it would do well but the old adage comes true once more: You get what you pay for.

    • KiwiBri

      Exactly why I won’t get one. What happens if you have a warranty claim..

  • jay

    Think is software so can update over the air so don’t see a reason for a delay

  • easy

    I never worry about new releases of anything. You’ll drive yourself crazy. I live in the “now” and make decisions that way.

    • crocop24

      edgy.

  • KiwiBri

    I’m embarrassed I actually wanted this device and got caught up in their Crap and lies marketing.

    #NeverShipping

  • Devon

    Its always best to be patient, just give the guys over at OnePlue a little more time to deliver.

    If its worth talking about it’s worth waiting on.

  • Devon

    If they had released the devices and then users start running into problems this could hurt their long term goal which is not worth the short term cash.

    A solid product will eventually please the masses even if it was late to market.

  • Alain Lafond

    Really! This phone maybe te best flagship phone in the west… But their marketing sucks,,,
    Yeah, yeah, yeah… Tell me about it…. Again…

  • HatInTheRing

    They should update/improve the camera software before the release. I’ve noticed a lot of people getting bored of the waiting and the “perfect phone” has imperfections that are festering in the meantime. I was so excited and now I don’t know if I’ll take the phone the day that email finally comes.

  • YankeeJatt

    Please can I get an invite?

  • boris

    security is important and if its not to spec fix is better than headache….

  • Shyam Sharma

    i recive a invitation but my net conn not established 2 days. so i not use invitaion. What i can do now

  • KiwiBri

    Well, my OnePlus One is getting delivered today.. lol..

    We’ll see how good it is, but still have my eye on the LG G3…

  • Parth Desai

    How to get invites from users? can someone help me with that?