[guardian-dev] AndroIRC bug report
Abel Luck
abel at guardianproject.info
Fri Oct 25 12:28:14 EDT 2013
Looks like this will be fixed in the next release!
>From a dev:
----
Hi,
Indeed, DNS requests were done before opening the proxy connection. It
should be fixed in beta 3.
Thanks for the report!
XXXXXX
-----
~abel
Abel Luck:
> I submitted this to AndroIRC's support desk. If they can fix this bug,
> they'll be the first app that works to connect to tor hidden services w/
> SASL auth (freenode!)
>
> Unfortunately the app isn't open source AFAICT.
>
> (It's #172 on their tracker)
>
> ---
>
> Hi,
>
> Using the 4.0 beta, I'm attempting to connect to freenode using their
> Tor hidden service. Using the new SOCKS proxy feature in 4.0, I should
> be able to connect via Orbot (Tor for Android). However, connecting to a
> hidden service doesn't work because the app is not resolving the DNS
> through the proxy.
>
> An example of a hidden service IRC server is freenode's:
> p4fsi4ockecnea7l.onion (see https://www.freenode.net/irc_servers.shtml#tor)
>
> This is a security flaw (DNS leaking) but also a usability bug. The
> consequence is people cannot use AndroIRC to connect anonymously to IRC
> servers with Tor over a hidden service.
>
> There are no IRC clients for Android that will work over Tor. AndroIRC
> is best positioned to fill this space as it already has SASL auth, and
> SOCKS proxy support.
>
> I'm a developer for Guardian Project, who makes Orbot. We also have a
> developer library called NetCipher
> (https://guardianproject.info/code/netcipher/) which can be used to
> implement SOCKS proxies and direct Orbot integration.
>
> Cheers,
>
> ~abel
> _______________________________________________
> Guardian-dev mailing list
>
> Post: Guardian-dev at lists.mayfirst.org
> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
>
> To Unsubscribe
> Send email to: Guardian-dev-unsubscribe at lists.mayfirst.org
> Or visit: https://lists.mayfirst.org/mailman/options/guardian-dev/abel%40guardianproject.info
>
> You are subscribed as: abel at guardianproject.info
>
More information about the Guardian-dev
mailing list