Re: [tor-bugs] #34025 [Applications/Orbot]: Orbot connects directly to raw.githubusercontent.com on startup

[Tor Bug Tracker & Wiki]

#34025: Orbot connects directly to raw.githubusercontent.com on startup
+---
 Reporter:  cypherpunks |  Owner:  n8fr8
 Type:  defect  | Status:  new
 Priority:  Medium  |  Milestone:
Component:  Applications/Orbot  |Version:
 Severity:  Normal  | Resolution:
 Keywords:  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+---

Comment (by n8fr8):

 https://github.com/guardianproject/orbot/issues/323

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #34025 [Applications/Orbot]: Orbot connects directly to raw.githubusercontent.com on startup

[Tor Bug Tracker & Wiki]

#34025: Orbot connects directly to raw.githubusercontent.com on startup
+---
 Reporter:  cypherpunks |  Owner:  n8fr8
 Type:  defect  | Status:  new
 Priority:  Medium  |  Milestone:
Component:  Applications/Orbot  |Version:
 Severity:  Normal  | Resolution:
 Keywords:  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+---

Comment (by n8fr8):

 It was only meant to run on devices without Google Play or F-Droid, i.e.
 users in China.

 Github was chosen for its accessibility in China.

 Will consider again how we implement this, and ensure it doesn't check in
 those cases. It should also have an option to disable.

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

Re: [tor-bugs] #34025 [Applications/Orbot]: Orbot connects directly to raw.githubusercontent.com on startup

[Tor Bug Tracker & Wiki]

#34025: Orbot connects directly to raw.githubusercontent.com on startup
+---
 Reporter:  cypherpunks |  Owner:  n8fr8
 Type:  defect  | Status:  new
 Priority:  Medium  |  Milestone:
Component:  Applications/Orbot  |Version:
 Severity:  Normal  | Resolution:
 Keywords:  |  Actual Points:
Parent ID:  | Points:
 Reviewer:  |Sponsor:
+---

Comment (by cypherpunks):

 ps this looks sketchy
 https://github.com/javiersantos/AppUpdater/issues/156

 plz no parsers

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs

[tor-bugs] #34025 [Applications/Orbot]: Orbot connects directly to raw.githubusercontent.com on startup

[Tor Bug Tracker & Wiki]

#34025: Orbot connects directly to raw.githubusercontent.com on startup
-+
 Reporter:  cypherpunks  |  Owner:  n8fr8
 Type:  defect   | Status:  new
 Priority:  Medium   |  Component:  Applications/Orbot
  Version:   |   Severity:  Normal
 Keywords:   |  Actual Points:
Parent ID:   | Points:
 Reviewer:   |Sponsor:
-+
 While leak testing Orbot, I noticed that it creates a connection to
 raw.githubusercontent.org

 
https://github.com/guardianproject/orbot/blob/master/app/src/main/java/org/torproject/android/OrbotApp.java#L42

 I dont know why this is even necessary as the app store updaters already
 provide a notification, this doesn't seem to have ever actually notified
 me about an update, but it sure does let M$ know who all the orbot users
 might be.

 Maybe if it's really necessary it could make the connection over... tor?

--
Ticket URL: 
Tor Bug Tracker & Wiki 
The Tor Project: anonymity online
___
tor-bugs mailing list
tor-bugs@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs