lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Sun, 30 Apr 2017 16:07:26 +0000
Subject: [FD] ES File Explorer android app snoops data to China Unicom
 network via insecure HTTP


With the ES File Explorer android app ( ( installed on my phone, when I monitored the network connections on my phone via the Network Connections app ( (, I found that it frequently transferred data to an IP address ( on the Chinese state owned China Unicom network ( ( via insecure HTTP connection. This is a privacy risk, as anyone can monitor the data exchanged over this unencrypted link & also constant data exchange with this IP address raises spying concerns. 

Attached is a screenshot of the Network Connections app showing the insecure HTTP connection used by the ES File Explorer app.


Download attachment "Screenshot_20170429-230000.png" of type "image/png" (449535 bytes)

Sent through the Full Disclosure mailing list
Web Archives & RSS:

Powered by blists - more mailing lists