[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #8500 [Orbot]: Warn the user about possible transparent proxying failure
#8500: Warn the user about possible transparent proxying failure
--------------------+-------------------------------------------------------
Reporter: cri | Owner: n8fr8
Type: defect | Status: new
Priority: major | Milestone:
Component: Orbot | Version:
Keywords: | Parent:
Points: | Actualpoints:
--------------------+-------------------------------------------------------
The transparent proxying feature is very likely to fail for a number of
reasons, the most common is lack of a firmware supporting the needed
iptables magic, or bugs like #3595.
Currently orbot doesn't warn the user when this occurs, leading to a false
sense of security.
* It only mentions "(Requires root)" in the settings menu: true, but not
enough: a special firmware is required too. It should be mentioned
(possibly with a link to https://www.torproject.org/docs/android.html.en )
* At orbot startup, a system notification message is issued, saying that
transparent proxying has been correctly enabled, even when this is not the
case!
Orbot should check more toroughly if transparent proxying is really
working, and issue a BIG WARNING in the user interface if this is not the
case (or if this can not be detected).
Also the web page at https://www.torproject.org/docs/android.html.en could
be improved, though it mentions the requirement for a suitable firmware,
the warning could be made more evident (now you have to read the fine
print to find out about this limitation).
We could also suggest the user to always check if a particular app is
behaving as expected, for example checking the current network connections
using a netstat-like tool like Os monitor
(see:
http://f-droid.org/repository/browse/?fdfilter=os%20monitor&fdid=com.eolwral.osmonitor
)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8500>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs