-
After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.
Paranoia: ES File Explorer
- Thread starter NeoMoa
- Start date
- Status
Crashdamage
Android Expert
You probably are being kinda paranoid. Lotsa people use ES and I've never heard of a security problem. But if you want another option with similar capability you might check out FX File.
Crashdamage
Android Expert
Do you use Windows?
pool_shark
Android Expert
I've been using ES file explorer for years and I've had no issues that I am aware of.
I can see a company supplying a really good free app to build their name and reputation, then when they come up with a really good paid app, their name and rep should carry them over.
There are very many ROMs that developers put out on their own time, they aren't making money either except from the few who donate.
I can see a company supplying a really good free app to build their name and reputation, then when they come up with a really good paid app, their name and rep should carry them over.
There are very many ROMs that developers put out on their own time, they aren't making money either except from the few who donate.
Crashdamage
Android Expert
If you use Windows you have FAR more security problems to worry about than ES. Take of your real risks if your so security-conscious. Your concerns are sorta misplaced.
I don’t want to be offensive on EStrongs, as I write in my introductory post; I think ES File Explorer is a VERY, VERY GOOD APP and I would like to use it.
pool_shark: The big difference is that the majority of ROM developers have a job for a living. EStrongs is a company and had to pay its workers. Also ES File Explorer seems to be on the market since around two years and claims 30 million installations. It seems they have already built a solid reputation and it seems strange to me that they don’t use it to make some money.
Crashdamage: That’s why I use TrueCrypt for my sensitive data. The difference is that I know who is Microsoft, not who EStrongs is.
Anyway, is a little of surprise for me to don’t find any discussion about this in the net and how easy it could be to build and spread malicious apps as nobody seems to care.
pool_shark: The big difference is that the majority of ROM developers have a job for a living. EStrongs is a company and had to pay its workers. Also ES File Explorer seems to be on the market since around two years and claims 30 million installations. It seems they have already built a solid reputation and it seems strange to me that they don’t use it to make some money.
Crashdamage: That’s why I use TrueCrypt for my sensitive data. The difference is that I know who is Microsoft, not who EStrongs is.
Anyway, is a little of surprise for me to don’t find any discussion about this in the net and how easy it could be to build and spread malicious apps as nobody seems to care.
Crashdamage
Android Expert
6) License software to be included in OEM hardware/software.
7) sell customized version of their generic software for enterprise use
jefboyardee
Extreme Android User
If you want to try something else, I
I know how to protect my data, and yes the simplest way is to not install this app but my point is more general about potential spyware threats.
Here we have an app installed in 30 million devices, having access to all your accounts and data, from an unknown Chinese company who sells nothing and on which you find nothing on the web… I know the reasons why people make free apps but none of them seems to apply to EStrongs. This app is like a candy, very complete and well done (by a team of 6 to 10???), totally free and with the perfect excuse to allow it full access to your phone, your Clouds and your PCs...
On the other hand, everybody knows that China is world’s #1 in governmental covered cyber war so my concern is not just about having some personal data stolen for commercial or financial crime. My point is: what if such an app had ‘dormant code’ in case of need? Can we be absolutely sure it hasn’t?
Like you I thought that the ‘mass effect’ of 30 million installations should quickly detect any suspicious activity but thinking better on this specific case, the question becomes: why and by whom it should be detected? Google, contrary to Apple, don’t make exhaustive inspection of the apps they put on Market and is very difficult to be sure without source code. Developers, geeks, labs, some national agency? I was very surprised to not find any in depth technical review or analysis on the web, not even a discussion about this and that’s why I opened this thread.
Like you I thought ‘big guys’ and ‘others’ took care of this. Where are they? How can we be sure? I found nothing relevant on the web and I’ll really appreciate if somebody could point me to a serious reference I can trust explaining why I should be confident with this app.
PD: Again I want to apologize for EStrong guys if they are honest but it doesn’t seem me foolish to ask these questions.
Here we have an app installed in 30 million devices, having access to all your accounts and data, from an unknown Chinese company who sells nothing and on which you find nothing on the web… I know the reasons why people make free apps but none of them seems to apply to EStrongs. This app is like a candy, very complete and well done (by a team of 6 to 10???), totally free and with the perfect excuse to allow it full access to your phone, your Clouds and your PCs...
On the other hand, everybody knows that China is world’s #1 in governmental covered cyber war so my concern is not just about having some personal data stolen for commercial or financial crime. My point is: what if such an app had ‘dormant code’ in case of need? Can we be absolutely sure it hasn’t?
Like you I thought that the ‘mass effect’ of 30 million installations should quickly detect any suspicious activity but thinking better on this specific case, the question becomes: why and by whom it should be detected? Google, contrary to Apple, don’t make exhaustive inspection of the apps they put on Market and is very difficult to be sure without source code. Developers, geeks, labs, some national agency? I was very surprised to not find any in depth technical review or analysis on the web, not even a discussion about this and that’s why I opened this thread.
Like you I thought ‘big guys’ and ‘others’ took care of this. Where are they? How can we be sure? I found nothing relevant on the web and I’ll really appreciate if somebody could point me to a serious reference I can trust explaining why I should be confident with this app.
PD: Again I want to apologize for EStrong guys if they are honest but it doesn’t seem me foolish to ask these questions.
Please, let's end the Windows security discussion. If you want to pursue that discussion, I'd be happy to move your posts revolving around it into their own forum in the IT discussion section.
As for EStrong's File explorer, I've been using it for about a year now. I don't see anything malicious in any of my logs. Every ROM I've downloaded in the last 6 months has included it, as well.
As for EStrong's File explorer, I've been using it for about a year now. I don't see anything malicious in any of my logs. Every ROM I've downloaded in the last 6 months has included it, as well.
There is one old blog post for 2011 that reports it going online when root options are enabled. However, I've not been able to replicate this myself, so it may just have been something it did early on as an aid to debugging (as the same blog speculated). If you want to test, install the app, firewall it with Droidwall and turn on droidwall's log, then enable root features. Use as an on-device file manager (but not network features) for a while then see whether droidwall reports blocking any internet access attempts by it. That should let you see for yourself whether it attempts to report home.
Of course Droidwall is also free and not ad supported, so you have to ask whether you trust it either
Or you could try something really radical: ES's contact details are available, so you could just ask them "since your products are free and not ad supported, how do you fund development?". You never know, you might get a straight answer.
Of course Droidwall is also free and not ad supported, so you have to ask whether you trust it either
Or you could try something really radical: ES's contact details are available, so you could just ask them "since your products are free and not ad supported, how do you fund development?". You never know, you might get a straight answer.
Harry2
Extreme Android User
atljatl
Android Enthusiast
I would like to answer your first question; "Am I paranoid?"
To sum up the OP:
>>You gave all of your passwords and possible access to very important/personal information to a company/application you don't know anything about, and LATER decided to think about if that was a smart thing to do (let me know if I'm wrong)<<
No, I don't think you are paranoid. I think you are something else.
EDIT: I love ESfile explorer
To sum up the OP:
>>You gave all of your passwords and possible access to very important/personal information to a company/application you don't know anything about, and LATER decided to think about if that was a smart thing to do (let me know if I'm wrong)<<
No, I don't think you are paranoid. I think you are something else.
EDIT: I love ESfile explorer
kristalsoldier
Android Enthusiast
I suppose you don't use Google and its various services either....given your paranoia about such things.
Edit....one more point about your comment about the Chinese government's cyber warfare reputation. Quite true. They appear to be quite aggressive. But the fact remains that the US Government is perhaps even more lethal, experienced and continually engaging in such operations on a global scale. Does that mean small US-based startup companies who operate on angel and/or VC funds are also suspect?
kristalsoldier
Android Enthusiast
- Status