Re: [ANNOUNCE] Tor anonymous proxy
 

I remember reading about that vulnerability last year, it was actually a vulnerability in Firefox. The problem was that the version of Firefox bundled with the Tor Browser Bundle was out of date leaving the vulnerability unpatched. This was quite embarrassing for the Tor Project so I'd be surprised if they haven't addressed the issue by now. That being said, personally I don't use the Tor Browser Bundle either, it is possible to route DNS lookups through Tor.

It's not impossible. I may wrong but IIRC the vulnerability was not platform specific but they targeted Windows as it has the largest user base. There's nothing to stop injection of Linux shellcode in the magneto variable.

I like Linux too but it would by naive to think that you are safe just because you use Linux.

Re: [ANNOUNCE] Tor anonymous proxy
 

@wicket You are absolutely correct

1 It was a vulnerability in Firefox
2 It is (was) not platform specific
3 Yes, Windows was the target in the specific case
4 but unpatched Linux was indeed vulnerable
5 Tor did indeed patch
6 Users didnt (all) upgrade, leaving them vulnerable

Re: [ANNOUNCE] Tor anonymous proxy
 

About the DNS, is there some reason why you haven't simply routed DNS requests through the tor proxy as described here: http://superuser.com/questions/10359...oxy-in-firefox I just tried it and it seems to work.

Despite the comments about vulnerabilities in tor-browser I would still like a dedicated tor browser on my Jolla. Long story short, for real security I use whonix and I certainly would't trust anything important to a hand-held device that holds my data unencrypted.

Re: [ANNOUNCE] Tor anonymous proxy
 

Thank you for this link. This I will update todsy in tor-switch paclage :)
Also. I will try to update so the icon refreshes. That will take a lipstick refresh, which will have the effect that screen will blank for a few seconds. But that is bearable.

To create a full torbrowser is a bit more difficult. So, no promises ither than I will look into that.

Re: [ANNOUNCE] Tor anonymous proxy
 

UPDATE

I have updated versions of tor and tor-switch to handle DNS queries (You can lookup .onion adresses).
Also, the icon is now changed as supposed (restarts lipstick service, so screen goes blank and a green light for a few seconds)

Enjoy
https://openrepos.net/content/nieldk/tor-switch
https://openrepos.net/content/nieldk/tor

Re: [ANNOUNCE] Tor anonymous proxy
 

Could I make another feature request?

Rather than overwriting the pref.js file, could the tor-switch script leave unchanged all settings other than the ones that it needs to modify? Shouldn't be too hard using scripting tools grep/awk/sed, or even as a starting point, it could save the file when starting tor and restore it when stopping tor.

Re: [ANNOUNCE] Tor anonymous proxy
 

I will make that.
Thanks, a good, and sensible suggestion :)