[tbb-bugs] #30518 [Applications/Tor Browser]: Android - Add missing command line options

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed May 15 19:00:20 UTC 2019

#30518: Android - Add missing command line options
     Reporter:  sysrqb                    |      Owner:  tbb-team
         Type:  defect                    |     Status:  new
     Priority:  Very High                 |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:  tbb-8.5-must
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
 After looking at #30284 and talking with sisbell, I noticed there are some
 more differences between how tor is launched on Linux and how it is
 launched on Android. Tor isn't given geoip DBs, but that's not a problem
 right now (we can add that later). More concerning is that on desktop we
 set `IPv6Traffic` `PreferIPv6` and `KeepAliveIsolateSOCKSAuth`. The first
 two are a distinguisher at the exit node (in theory, there shouldn't be
 many ways an exit node can identify different Tor Browser platforms if the
 connection between the exit node and destination server uses TLS). We
 should set these tor config options for both consistency but also because
 not being consistent is bad for anonymity.

 process.js#n456 Where Tor Launcher sets the args]. I currently see this on
 Linux when running Tor Browser:
 --defaults-torrc /home/user/tor-browser_en-US/Browser/TorBrowser/Data/Tor
 -f /home/user/tor-browser_en-US/Browser/TorBrowser/Data/Tor/torrc
 DataDirectory /home/user/tor-browser_en-US/Browser/TorBrowser/Data/Tor
 GeoIPFile /home/user/tor-browser_en-US/Browser/TorBrowser/Data/Tor/geoip
 GeoIPv6File /home/user/tor-browser_en-
 US/Browser/TorBrowser/Data/Tor/geoip6 HashedControlPassword 16:$hash
 IPv6Traffic PreferIPv6 KeepAliveIsolateSOCKSAuth __OwningControllerProcess

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30518>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list