[tor-talk] Fwd: [guardian-dev] Auditing Twitter with Orbot

[Nathan Freitas]

-------- Original Message --------
Subject: [guardian-dev] Auditing Twitter with Orbot
Date: Wed, 13 Jun 2012 20:40:58 -0400
From: Nathan of Guardian <nathan at guardianproject.info>
Organization: The Guardian Project
To: guardian-dev <guardian-dev at lists.mayfirst.org>,
tor-dev at lists.torproject.org


Great post+effort by our new intern "Patch", and generally good outcome
in how Twitter implemented proxying support, save for one aspect - push
notifications!

"I decided to take on the challenge of auditing Twitter+Orbot to gain
more insight (and hopefully trust) into their new support for proxying.
I logged some traffic on my Nexus One using the proxied Twitter
application to see what was going on. To eliminate excess traffic I used
Droidwall to permit only traffic from Orbot and Twitter. This still
allows the Twitter application the option to leak data while blocking
other traffic we don’t wish to see.  I began logging with Orbot off and
attempted to update my Twitter application. So far so good, it was not
able to retrieve any tweets. Once Orbot was running the application
worked great, I ran some searches and made a test tweet. "

Read on:
https://guardianproject.info/2012/06/13/auditing-twitter-with-orbot/

_______________________________________________
Guardian-dev mailing list

Post: Guardian-dev at lists.mayfirst.org
List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev

To Unsubscribe
        Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
        Or visit:
https://lists.mayfirst.org/mailman/options/guardian-dev/nathan%40guardianproject.info

You are subscribed as: nathan at guardianproject.info