[guardian-dev] Orfox, NetCipher and Psiphon (was Re: Android WebView SOP vulnerability (CVE-2014-6041))

[Adam Kruger]

> Have you seen our work on Orfox? I think we are going to
>> accelerate a release there, and kill off all of our WebView
>> based efforts.
>
>
>> Yes. I'm looking forward to seeing an Orfox release.
>
>
> Yes, and we should discuss if you want to do your own release
> of it for Psiphon, or if we should somehow have our Netcipher
> code check for Orbot and Psiphon, and prompt the user.


Ideally we would like to integrate Orfox into Psiphon as our built-in
browser. But it would be a problem if that makes our apk too big.

It would be cool if NetCipher detects Psiphon and let's the user use that.

Right now we don't have a proper interface to query the Psiphon service to
check if it is connected and to get its SOCKS port. By default we use 1080,
but automatically switch to 1081-1090 if we detect that those ports are
already in use.

Is there any other interface into Psiphon that NetCipher would need? Any
suggestions on how we would best provide those interfaces?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mayfirst.org/pipermail/guardian-dev/attachments/20140919/49254192/attachment.html>