[guardian-dev] AndroIRC bug report

Abel Luck abel at guardianproject.info
Fri Oct 25 12:28:14 EDT 2013


Looks like this will be fixed in the next release!

>From a dev:
----
Hi,

Indeed, DNS requests were done before opening the proxy connection. It
should be fixed in beta 3.

Thanks for the report!

XXXXXX
-----

~abel

Abel Luck:
> I submitted this to AndroIRC's support desk. If they can fix this bug,
> they'll be the first app that works to connect to tor hidden services w/
> SASL auth (freenode!)
> 
> Unfortunately the app isn't open source AFAICT.
> 
> (It's #172 on their tracker)
> 
> ---
> 
> Hi,
> 
> Using the 4.0 beta, I'm attempting to connect to freenode using their
> Tor hidden service. Using the new SOCKS proxy feature in 4.0, I should
> be able to connect via Orbot (Tor for Android). However, connecting to a
> hidden service doesn't work because the app is not resolving the DNS
> through the proxy.
> 
> An example of a hidden service IRC server is freenode's:
> p4fsi4ockecnea7l.onion (see https://www.freenode.net/irc_servers.shtml#tor)
> 
> This is a security flaw (DNS leaking) but also a usability bug. The
> consequence is people cannot use AndroIRC to connect anonymously to IRC
> servers with Tor over a hidden service.
> 
> There are no IRC clients for Android that will work over Tor. AndroIRC
> is best positioned to fill this space as it already has SASL auth, and
> SOCKS proxy support.
> 
> I'm a developer for Guardian Project, who makes Orbot. We also have a
> developer library called NetCipher
> (https://guardianproject.info/code/netcipher/) which can be used to
> implement SOCKS proxies and direct Orbot integration.
> 
> Cheers,
> 
> ~abel
> _______________________________________________
> Guardian-dev mailing list
> 
> Post: Guardian-dev at lists.mayfirst.org
> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
> 
> To Unsubscribe
>         Send email to:  Guardian-dev-unsubscribe at lists.mayfirst.org
>         Or visit: https://lists.mayfirst.org/mailman/options/guardian-dev/abel%40guardianproject.info
> 
> You are subscribed as: abel at guardianproject.info
> 



More information about the Guardian-dev mailing list