Nathan Freitas

icon indicating a website link https://n8fr8.github.io/me/ icon indicating an email [email protected]

icon company Guardian Project, Tor Project, Berkman-Klein Center icon location Cambridge, MA icon location I have worked for over 20 years in mobile communications security software and systems, with a deep set of experience organizations, applications and platforms.

Results 341 comments of Nathan Freitas

Stream isolation of different apps in Orbot VPN mode

I rhink if you enable the "IsolateDestAddr" feature in torrc, this would create unique streams per destination address. If we expect apps to connect to unique back end addresses, this...

Stream isolation of different apps in Orbot VPN mode

>I tried to add SocksPort 127.0.0.1:9050 IsolateDestAddr, but then Orbot wouldn't connect. Perhaps, because that conflicts with the existing default socks port. You can change the default socks port in...

"Running" and "Working" but in reality not connectable

@theAkito are you talking about your own app that is integrating with Orbot? Are you using the NetCipher library or just the VPN mode in Orbot? If Orbot says it...

error creating FileDescriptor, causes Orbot to hang on start

This happens even without a native code crash first

error creating FileDescriptor, causes Orbot to hang on start

this also triggers the endless "waiting for lock", and requires a force stop to resolve

error creating FileDescriptor, causes Orbot to hang on start

Tor Browser and Orbot have no connection at all, and run entirely separate version of tor. Not sure how it could have solved the problem.

Alternative bridges disappeared

There are issues with those other kinds of bridges below Android 8. We are working to see if we can restore them or solve some of the crashes we were...

Don't enable VPN mode for the whole system as default

We are working on an updated UI for this. In earlier versions of Android, a VPN could not be just per-app, so that has still been our default. Our focus...

Explore the use of leaf instead fo go-tun2socks for both consistency and efficiency

Big fan @eycorsican ! :) We started with leaf, and had some concerns around resulting total binary size. Any thoughts on what a reasonable arm64 build of leaf, say for...

SIGSEGV with CN Exit Nodes

Strange that an exit node would cause a crash in the VPN, when they are running in separate processes. Will investigate. Otherwise, why would you use CN exit nodes?