[guardian-dev] Hi, i' new

[arrase]

Orbot currently uses a random port, at each boot it writes its value to a
file of shared preferences and the application reads it. I have not had
problems locating the port in Proc and I have been able to communicate with
it using the connection library used by Orbot itself

Access to the port is not protected by password, if the objective was to
provide security has not been achieved

Proc parser:

https://github.com/arrase/TorMessage/blob/master/app/src/main/java/llanes/ezquerro/juan/tormessage/procParse/FindOrbotPort.java

El 14 nov. 2016 2:16 p. m., "Hans-Christoph Steiner" <
hans at guardianproject.info> escribió:

>
> Hmm, this sounds like a bug report then :-/  Apps should not be able to
> use the control port, as far as I know.  I don't think its possible to
> allow apps to use the Tor control port in a secure way, unless there is
> some kind of query-only "guest" mode.
>
> Orbot should really use ControlSocket to use a UNIX domain socket on the
> filesystem so it can be protected by file permissions.
>
> .hc
>
> arrase:
> > NetCipher looks good, but, is there a method to find the orbot control
> port?
> >
> > I was reading the library and i cannot see a method to connect to the
> > daemon and i would like to manage my own hidden service.
> >
> > I don't understad why orbot uses a random port every run for control
> port,
> > do not adds an extra securety layer, is only tedious
> >
> > now i'm parsing proc file to catch the port number
> >
> > 2016-11-14 12:54 GMT+01:00 Hans-Christoph Steiner <
> hans at guardianproject.info
> >> :
> >
> >>
> >> Hi, welcome!
> >>
> >> If you want to add Tor support to apps, you'll definitely be interested
> >> in our NetCipher library, which is where we do all our Tor integration
> >> work:
> >>
> >> https://github.com/guardianproject/netcipher
> >>
> >> .hc
> >>
> >> arrase:
> >>> Hi, I'm interested in developing applications under Tor and I've known
> >> your
> >>> project, I find it interesting.
> >>>
> >>> Here is my github:
> >>>
> >>> https://github.com/arrase
> >>>
> >>> I am currently interested in writing something like TorChat or Ricochet
> >> for
> >>> android
> >>>
> >>>
> >>>
> >>> _______________________________________________
> >>> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
> >>> To unsubscribe, email:  guardian-dev-unsubscribe at lists.mayfirst.org
> >>>
> >>
> >> --
> >> PGP fingerprint: EE66 20C7 136B 0D2C 456C  0A4D E9E2 8DEA 00AA 5556
> >> https://pgp.mit.edu/pks/lookup?op=vindex&search=0xE9E28DEA00AA5556
> >> _______________________________________________
> >> List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev
> >> To unsubscribe, email:  guardian-dev-unsubscribe at lists.mayfirst.org
> >>
> >
>
> --
> PGP fingerprint: EE66 20C7 136B 0D2C 456C  0A4D E9E2 8DEA 00AA 5556
> https://pgp.mit.edu/pks/lookup?op=vindex&search=0xE9E28DEA00AA5556
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mayfirst.org/pipermail/guardian-dev/attachments/20161114/88f3c88f/attachment.html>