[tor-bugs] #32923 [Applications/Tor Browser]: Detached Tor Browser Firedox APK - Option to Customize Configuration - VPN Function - Android

[Tor Bug Tracker & Wiki]

#32923: Detached Tor Browser Firedox APK - Option to Customize Configuration - VPN
Function - Android
-----------------------------------------------+---------------------------
 Reporter:  onestep                            |          Owner:  tbb-team
     Type:  enhancement                        |         Status:  reopened
 Priority:  High                               |      Milestone:
Component:  Applications/Tor Browser           |        Version:  Tor:
                                               |  0.4.2.5
 Severity:  Major                              |     Resolution:
 Keywords:  Tor Browser APK Android VPN Nodes  |  Actual Points:
Parent ID:                                     |         Points:
 Reviewer:                                     |        Sponsor:
-----------------------------------------------+---------------------------

Comment (by cypherpunks):

 Replying to [ticket:32923 onestep]:

 > Also, as Android' built in Always-on VPN can take advantage of outdated
 Orbot's VPN feature to tunnel everything over Tor with zero leak when user
 chooses Block internet without VPN option in Android network settings.
 >

 This is simply and sadly not true! Don't rely on this feature. It is leaky
 by design! Don't trust this block anything but or orbot feature please!

 This Android feature natively is multi user supported. This means you can
 run a 2nd profile (user) or Android guest account or Android work profile
 under same user without switching and have actively bypass the Android'
 built in Always-on VPN (block everything else's) option.

 In fact you can even configure two or more Android always online VPN in
 coexistence parallel. For this profiles each.


 And tunneling and blocking some system process seems broken too. Ntp for
 example. Feel free to check with Wireshark on your own.

 This is the reason I badly missing transparent proxy with root support
 removed from orbot earlier. :(

 ...

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32923#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online