Hot answers tagged

4

You may be interested in reading 'Mission Impossible: Hardening Android for Security and Privacy' and it's update 'Mission Improbable: Hardening Android for Security And Privacy'. To directly answer the question, if iptables and root access is available, then "Tor Everything" will provide a more complete means of enforcing Tor usage on the device, since it ...


3

A difficult question to answer decisively. The tl;dr is that if you are performing highly sensitive activies you should not be doing them on the same device as your normal day to day activies. This is a concept called Compartmentalization. To pull the answer straight from my own documentation on the subject: When you take your whole operating system and ...


3

Menu -> NoScript -> Tick the boxes for the sites. or Menu -> Tools -> Add-ons -> NoScript -> Enable/Disable/Configure Beware: whitelists and user-specific configurations are probably fingerprintable and enabling javascript at all might expose functionality that isn't fully protected against yet. Orfox is still not fully implementing the Tor Browser design ...


3

Besides the traditional identifiers, mobile devices have extra ones. Here's the ones I could come up with Baseband Identifiers: IMEI/MEID, IMSI/TMSI Device Identifiers: Browser user agent, device model, serial number, screen resolution, ANDROID_ID Network Identifiers: WiFi MAC, baseband MAC, IP, carrier OS Identifiers: Capability/function disclosure, OS ...


2

Starting with the current beta release of Orbot 15.4.0 beta-2, Orbot has a new menu which makes it very easy to add hidden services. Open settings menu Click on "Hidden Services" Click on "Hosted Services" Pick a name for your service Enter Port your service uses locally Select the port your service is reachable via .onion (choose 80 if it is a web ...


2

It's recommended to only use the official apps to connect to Tor. If you use a 3rd-party app, nobody can guarantee that it isn't leaking traffic. And if you don't use the official Tor browser, it's easier to track through browser fingerprinting. Download Orbot for Android here: https://play.google.com/store/apps/details?id=org.torproject.android And use ...


2

Looks good to me. If you connect to the VPN first, all of your internet traffic goes to the VPN. When you connect to the Tor network (after connecting to the VPN), your traffic does something like this: Device ==> VPN ==> Tor Network Your VPN service will show you the IP address they are giving you, and the Tor network will show you the IP address you have ...


2

The feature is already available, it's under the settings menu. However uptime isn't the only factor to consider. Most phones will not have enough processing power to throughput a significant amount of traffic. Most network providers will be behind some kind of NAT'd connection and it would be difficult if not impossible to allow users to connect to your ...


2

You've appear to have specified ReachableAddresses which means that you've told Tor is can't reach certain destinations, those destinations include the bridges that you've been given so Tor is avoiding connecting to them: NOTICE: Bridge at 'x.x.x.x:y' isn't reachable by our firewall policy. You need to go into your settings and remove the limitations you'...


1

Those "unused DT entry" messages mean that either your app crashes or it generates lots of error messages. Probably Tor was cross-compiled with wrong or deprecated compilation flags. In my opinion the best is to enter a bug report. This answer on Stackoverflow has more details about the message.


1

Check Orbot setting, could you able to see NOTICE: Bootstrapped 100%: Done if not you need to wait still it joins the Tor network. OrFox - check Tor connection by visiting https://check.torproject.org on your browser. you should see a message, "Congratulations. This browser is configured to use Tor. Then try accessing the website/onion sites. (make sure ...


1

The only approach to this is to use something like a "no-root" firewall. A "no-root" firewall uses the same principle as the Orbot VPN mode, except it uses it's position to deny connections to specific apps. In this way, you could deny connections to all apps, except for Orbot effectively only allowing apps that can locally talk to Orbot be able to reach ...


1

There is no supported way. .exe files (or PE files) are Microsoft Windows executables, which can't be natively run on Linux (which uses ELF files). .apk files are Android application packages, which are a zip file containing some Dalvik machine code and various other resources are intended to be run an the Dalvik VM which Android uses, and aren't natively ...


1

You need to use curly brackets like this: {us},{gb} The syntax corresponds to the one of ExcludeNodes in torrc.


1

I think, actually, this is a bug in the client not the relay. The circuit is failing but the error message is possibly a problem in the client, my reasoning is that the spec states: The payload of a RELAY_TRUNCATED or DESTROY cell contains a single octet. Since an octet is 1 byte and 65022 > 255, this value can't be carried in a valid cell so it must be ...


1

A VPN is best for your case I imagine. All the programs beside your browser knows who you are and probably phones home. This just puts more load on Tor than nessasary. It could obscure how much data you are using browsing(to fight correlation), but the VPN would offer the same(The VPN is much less likely to turn over logs than Facebook and Google would to ...


1

I haven't worked with Samsung devices, but the behaviour you described is very odd and warning by itself: it seems that application is being run in some kind of debugging or tracing container. Because - regardless of the OS, memory manager and so forth - any kind of forced garbage collecting should not affect running applications memory: it's not freed and ...


1

You could use FDroid and install the Orbot version available there or you can enable the Guardian Project repository (which is preconfigured in newer versions of FDroid) through the Repositories menu and install the latest stable release from there. It's worth noting that viewing just one circuit that Tor is using at the time is of little real security ...


1

Don't know if it's related, but the same issue seems to happen to me sometines. Simply changing identity works for me, tapping the round arrow in the notification or restarting orbot. Hope this helps


1

Root your phone, use OpenVPN, bridges, and test your traffic by disabling Wifi obviously. You want to run a VPN layered with TOR regardless of the device or the data source. And you need to root most droids to get all traffic from your phone (apps, not just browser) to pass through TOR.


1

You can connect to Tor on mobile data the same way you do on WiFi. In case your Carrier blocks Tor, you could use the bridges available in Orbot.


1

This is unsupported. Full disclosure: I am a developer of Whonix.


1

It is equally (un)safe as using your wired home internet connection. Both are registered to you and the respective providers can see your data, which is encrypted. Your IMEI and SIM are only used to connect to the cellular network. Not for IP streams over this connection.


1

On the page you've linked to, in the Installation and Setup: ROM and Core App Installation section, the instructions state: Then, attach it to your desktop/laptop machine with a USB cable and run the following commands from a Linux/UNIX shell... I think there's an assumption that the desktop/laptop you're using to do this won't be running Tails. The ...


1

it seems that some sites like Cloudfare and Google are mass-accessed through your exit point. Use "SIGNAL NEWNYM" command to forcibly change your exit and try again.


1

This may be considered a bug, an unfortunately collision between FirewallPorts, ReachableAddresses, FascistFirewall and the spoofed destination address of the Meek protocol. If you have configured Orbot to only pick guards to specific ports or addresses, then you should remove those settings as a work around to be able to use Meek.


1

Disclaimer: I'm not an expert. Everything should check out just fine. My understanding is that Orbot just opens a SOCKS5 proxy on whatever device it's on. If your phone can do connection sharing, running your traffic through the SOCKS port should do the trick. I should point out that if your intention is to make a cheap, small Tor proxy device, the ...


1

The first thing if you want to enable a hidden service on your Android phone is that you need Orbot and some application like a webserver or something similar. I assume you have configured a webserver which serves on port 8080. Now go to the Orbot settings: Near the bottom you find the settings for hidden services. Activate the configuration for hidden ...


Only top voted, non community-wiki answers of a minimum length are eligible