According to a ticket in your bug tracker, the source code for Orbot contains binary files for iptables.

To me, this sounds like Orbot is built off of some closed-source code. How then could this portion be scrutinized? Should we be worried about this?


Seems like the binaries got removed from the current development tree with git commit 9d6f3c8 in August 2013 as they were apperently "unneeded old".

| improve this answer | |
  • link to (still open) ticket: dev.guardianproject.info/issues/1735 – Cory Oct 4 '13 at 16:55
  • 1
    I know iptables is open source, but you can't verify that these files were compiled from the original source because the are already compiled. – Cory Oct 4 '13 at 17:00
  • 1
    Seems like the binaries were not removed. Found iptables in orbot's current version (12.0.5) source. page for that file's history shows it was added back in AFTER the commit you linked to: gitweb.torproject.org/orbot.git/history/HEAD:/res/raw/iptables Fdroid is hosting an old version of orbot for this very reason. They only host fully open source code. – Cory Oct 4 '13 at 17:07
  • @cory, clarified my statement - it was only about the current git tree. – weasel - Peter Palfrader Oct 4 '13 at 18:50

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.