Want to help moderate this community? We need more candidates in the ongoing election!

Hot answers tagged

6

Orweb is broken on Android 4.4.x due to the fact that Google removed proxy setting support in their WebKit component. We have a new browser coming based on Firefox, but it is not quite ready yet. Your option are: Use Firefox with our "privacy enhanced configuration" documented here: https://guardianproject.info/apps/proxymob/ (WARNING: this should be ...


6

There are a couple of circumstances in which it could be useful that spring to mind. You wish to prevent your Cellphone Network (AT&T, Verizon, Vodafone etc) from observing any data sent that isn't normally protected - think your web browsing for example. Android is quite configurable as to what data is sent to Google. You've stated you will be sending ...


5

The National Crime Agency is a law enforcement agency based in the UK. Their job is to fight serious organised crime. It's not against the law to use Tor (anywhere, and certainly not in the UK). If you are doing nothing illegal - for example, if you just want to browse the internet anonymously - then you have nothing to worry about, even if the authorities ...


5

No. By default, Orbot will not run a relay/exit/bridge. You may have seen one of the circuits Orbot built, which show the path your data will go through when using Tor. Unless you have changed your settings to become a Tor relay, you should be okay.


4

Seems like the binaries got removed from the current development tree with git commit 9d6f3c8 in August 2013 as they were apperently "unneeded old".


4

As Samuel Walker notes, it's probably better than nothing, depending on your circumstances and threat model. You might be interested in the Guardian Rom project. There's a thread at Wilders Security Forums. It was on hold for a while, but seems to be moving again. Here's a quote from a recent update from x942 aka Kyle Davidson: 1) Full disk Encryption and ...


4

You may be interested in reading 'Mission Impossible: Hardening Android for Security and Privacy' and it's update 'Mission Improbable: Hardening Android for Security And Privacy'. To directly answer the question, if iptables and root access is available, then "Tor Everything" will provide a more complete means of enforcing Tor usage on the device, since it ...


3

This is what I did and all is fine now: Reboot into ClockworkMod recovery Select advanced Wipe Dalvik cache Wipe cache partition Reboot All is working fine Hope this works for you.


3

Also all my circuits are now being built by zwiebelringrexlocus My circuits no longer seem to be popping around different connections and cities... whats happened? zwiebelringrexlocus is your (new?) guard node. It is normal and by design that you keep using the same guard for a long time. The 2nd and 3rd node in your circuits are all different. You do ...


3

Your question suggests a bit of confusion, so I'll try to clarify. Orbot is an app for Android phones that connects to the Tor network. You can then set other apps on your phone to use Orbot to route their traffic through Tor before entering the wider internet. It allows mobile phone users to access the web/messaging/email without being monitored or blocked ...


3

Similar q/a linked below should also apply here. Not necessary imo. Although it might be more secure to use orbot's built-in transparent proxying (requires a rooted device) which will torrify additional system applications/etc that you or the browser connect with. Secure my connection with VPN router & Tor


3

It's becoming more and more a necessity to use Tor on mobile devices, so yes it makes sense. Even though there are lots of privacy-anonymity risks with doing so, people could develop solutions over time as more people start using Tor on Android. You must be very careful and informed about how Android works, what is being sent to internet, etc. My best ...


3

Even if you consider Android security totally broken Tor is still useful, at least: For circumvention. As a political statement. For adding hay to the haystack.


3

If you want to experience with HTML5 video proxied through Tor, you can try the development builds of our new Firefox-based secure browser, named Orfox. This is development/debug grade technology and has not been fully tested!


3

Stopping android from connecting to the internet/disabling wifi/disabling wifi module/disabling auto connect unless Orbot is up isn't trivial. It would probably need modifications to the ROM/kernel itself. You can use firewall rules and set them to block every connection besides TOR. It would still try to connect to the internet when Orbot is off but it wont ...


3

A difficult question to answer decisively. The tl;dr is that if you are performing highly sensitive activies you should not be doing them on the same device as your normal day to day activies. This is a concept called Compartmentalization. To pull the answer straight from my own documentation on the subject: When you take your whole operating system and ...


3

Yes, Tor is unaffected by KRACK. At best KRACK could be used to perform some denial of service (stopping your packets from being sent), but it will not be able to forge or intercept Tor traffic, since it is end-to-end crypted before it is sent over the network. Assuming you have a good copy of Tor (you both verified it's signed by the correct key and that ...


2

Support for HTML5 has been removed from Orweb, because it contains security leaks (possible to get users' IPs) - see here . You can use Firefox for Mobile and ProxyMob extension to it.


2

No, utorrent won't work with Orbot if you do not use root. The incoming port option will not configure utorrent to use the Orbot proxy. I just looked through the settings of utorrent and there appears to be no proxy settings, so unless you use the transparent proxy feature of Orbot (which requires root) utorrent's traffic can't be routed through tor.


2

Orbot has been updated on Google Play Store and here: https://guardianproject.info/releases/Orweb-release-0.5.2.apk with a fix for KitKat!


2

This isn't possible in Orweb. It is a very basic browse that lacks features like saving images. If you want to be able to do this there are two possibilities: Use Firefox Mobile and configure it using our Privacy Enhanced instructions. Try the development builds of our new Firefox-based secure browser, named Orfox. This is development/debug grade ...


2

Close and restart orbot. Make sure the format of obfs3 bridge is correct. obfs3 works in mainland China, but those bridges you added might be blocked. If you see warning messages like 'TTL expired', then try adding more bridges.


2

Everything goes over a single connection and using fewer connections speeds up things This is possible, especially over a cellular network. Of your 5 theories, this is the best one. The exit node might have a DNS cache This is not it. A normal DNS lookup from your ISP or whatever DNS you use is at least as fast as through Tor. (There might be ...


2

I found the problem. I set up a custom exit node (which is noiseexit01d at atlas.torproject.org). I enabled "Transparent Proxy" (so you must asume I'm root). That's when I think the problem came from. So I deleted that set up and restart the phone, with a random circuit, and I didn't have the problem anymore. I'm not sure, however, that's the real problem,...


2

Looks good to me. If you connect to the VPN first, all of your internet traffic goes to the VPN. When you connect to the Tor network (after connecting to the VPN), your traffic does something like this: Device ==> VPN ==> Tor Network Your VPN service will show you the IP address they are giving you, and the Tor network will show you the IP address you have ...


2

There is some prior art in this field, however there is always an implicit Caveat Emptor when doing novel things. The "OrWall" android application is intended to create a 'fail-closed' scenario, however it doesn't appear to be actively developed anymore. It installs an init script that blocks outbound traffic with the intent that it stops applications ...


2

You won't change IP mid-download. Tor considers creating new circuits by looking at the 'dirtiness' of existing circuits. If a new connection request is received and the current circuit is more than 10 minutes old, it will build a new circuit for the connection. However any connections which are on the old (>10 minute) circuit will be unaffected. If you ...


2

Those are the nicknames of the relays that were in your circuit; you can go look them up on Atlas and see information on them, which is kinda cool. Since Orbot is running on a phone, it will shut down during periods of inactivity and reconnect later. This is pretty common, and not anything you should be worried about.


2

Tor should work fine on ARM CPUs. On distributions like Debian there are Tor versions for arm, arm64, armel, armhf (even mips, mipsel and powerpc). The Tor Project themselves also distribute debian packages for armhf and armel. Fedora (and likely other redhat derivatives) also distributes a [Tor package for armv7hl. ArchLinux for ARM similarly package Tor ...


2

You've appear to have specified ReachableAddresses which means that you've told Tor is can't reach certain destinations, those destinations include the bridges that you've been given so Tor is avoiding connecting to them: NOTICE: Bridge at 'x.x.x.x:y' isn't reachable by our firewall policy. You need to go into your settings and remove the limitations you'...


Only top voted, non community-wiki answers of a minimum length are eligible