[tbb-bugs] #16395 [Tor Browser]: Circuit isolation by SOCKS proxy may be breaking other proxies or non-proxies

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Jun 17 22:54:00 UTC 2015


#16395: Circuit isolation by SOCKS proxy may be breaking other proxies or non-
proxies
---------------------------------+--------------------------
 Reporter:  GigabyteProductions  |          Owner:  tbb-team
     Type:  defect               |         Status:  new
 Priority:  normal               |      Milestone:
Component:  Tor Browser          |        Version:
 Keywords:                       |  Actual Points:
Parent ID:                       |         Points:
---------------------------------+--------------------------
 If, for whatever reason, the user wants to disable the Tor Browser from
 connecting to their local Tor daemon (such as to prevent tor-through-tor
 with forced transparent torrification, or use the Tor Browser for it's
 security rather than it's anonymity, or point the Tor Browser to an SSH
 SOCKS proxy), they will find that since the release of the Tor Browser
 4.5.1, it will fail to connect to any SOCKS proxy that isn't a Tor daemon,
 and it will complain saying, "Firefox is configured to use a proxy server
 that can't be found." when proxies are disabled.

 I believe the cause of this issue is
 https://gitweb.torproject.org/torbutton.git/commit/?id=59445b7baed58e712bd38c02e6dc75882ff0c997
 or a related commit to the Tor Button. Disabling the Tor Button resolves
 the issue, but this isn't desired as the Tor Button provides additional
 protections such as the HTML5 canvas extraction.

 This can easily be recreated by having the 32-bit Linux package of the Tor
 Browser, and the attached 0000tor-use-system-4.5.2test.js file in the
 current directory, and then running something along the lines of:
 {{{
 xz -d < tor-browser-linux32-4.5.2_en-US.tar.xz | tar -xv
 cp 0000tor-use-proxy-4.5.2test.js tor-browser_en-
 US/Browser/TorBrowser/Data/Browser/profile.default/preferences/
 tor-browser_en-US/Browser/start-tor-browser --verbose
 }}}
 The above assumes there is a SOCKS5 proxy running on your machine on port
 1080. This can easily be done with something like
 {{{
 ssh -Dlocalhost:1080 localhost -N
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16395>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list