Giters

RoboSats / robosats

A simple and private bitcoin exchange

Home Page:https://learn.robosats.com

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Android app not usable over torbox wlan or orbot VPN mode

alaznem opened this issue · comments

commented

Describe the bug
When using a torified connection like a torbox wlan or an orbot VPN mode, establishing another tor connection over tor through the robosats app fails as expected

To Reproduce
Use Orbot in VPN mode or connect to a torbox wlan or similar torified connection Proton VPN with tor server might work as well to reproduce, but this is untested.

Expected behavior
The app should do a ping of the robosats onion site and only spin up an orbot or whatever you're using under the hood if there is no tor connection already.

As alternative: let the user disable spinning up a tor proxy within the app.

commented

Hey @alaznem ,

Thanks a lot for reporting and opening this issue. This one will be a bit tough to solve as the untorified webview will not open onion sites even if Orbot is on (at least on my tests).

A tested work around solution for Orbot in VPN mode is to go to Orbot Settings and disable RoboSats from the apps listed. This solution is about the same amount of work as As alternative: let the user disable spinning up a tor proxy within the app. . However for Torbox wlan I do not think there is any work around.

commented

This one will be a bit tough to solve as the untorified webview will not open onion sites even if Orbot is on (at least on my tests).

Thank you for having a look at this and a first guess about the work needed.

A tested work around solution for Orbot in VPN mode is to go to Orbot Settings and disable RoboSats from the apps listed. This solution is about the same amount of work as As alternative: let the user disable spinning up a tor proxy within the app. . However for Torbox wlan I do not think there is any work around.

✔️ This works if the user doesn't use Full Device VPN mode in Orbot.

❌ However, if the user uses Full Device VPN mode* in Orbot, this is not an option and I can't think of any orbot setting to workaround #378. This usage type of Orbot is probably not widely used, however it provides the best protection from IP leaking. Just as sidenote: the real IP does leak for sure in one way or another, if you don't use a dedicated tor router like torbox in front of your Android device.

*Full Device VPN mode is characterized by not selecting any app and therefore having all data routed through the Orbot VPN. See screenshot below.