First small step towards a true Tor Browser on Android.

-------- Original Message -------- Subject: [guardian-dev] Orfox: first step towards Tor Browser on Android Date: Sat, 23 Nov 2013 23:18:30 -0500 From: Nathan of Guardian nathan@guardianproject.info To: Guardian Dev guardian-dev@lists.mayfirst.org

Since Android 4.4 replaced the guts of the WebView component with Chrome, and there is no apparent way to set a proxy anymore (even through tricks like reflection), I decided to accelerate our move towards an entirely new approach to privacy-enhanced browsing.

I discovered two projects that provide a full standalone browser component that you can embed in an app.

ChromeView, based on Chromium, and very much a drop-in replacement for WebView: https://github.com/pwnall/chromeview

GeckoView, Mozilla's own attempt to turn their browser engine into an Android developer component: http://starkravingfinkle.org/blog/2013/10/geckoview-embedding-gecko-in-your-...

I started with ChromeView, but got stuck just trying to get it to run. Both approaches require some strange use of putting .so and .pak binaries into asset folders and such. I don't entirely understand why yet.

I ended up getting the GeckoView project's GeckoBrowser sample running easily, and very quickly, started hacking in all the privacy-enhancing Firefox "about:config" preferences I know. All the SOCKS and HTTP proxying stuff works well, and I have even gotten to a fairly decent report back on ip-check.info in terms of cookies, referrals, user-agents, etc.

You can find the repo here, if you want to build and try yourself. No binaries posted yet: https://github.com/guardianproject/Orfox

I am aiming to do a release fairly quickly, at least for the Android 4.4 users who are currently left in a lurch.

Otherwise, if anyone wants to help build the best, most secure and privacy-enhancing mobile browser in the world, what we need to do from here is:

1) Start building the GeckoView library from source ourselves, and figure out which components we really need. It is very bloated, and the current APK is humongous.

2) Re-implement Orweb's various preferences into the new Orfox app, so that users can easily choose to turn on/off javascript, clear cookies, and so forth.

3) Connect with Mike Perry of Tor Project and start figuring out how the Firefox patches / modifications he makes for Tor Browser can be applied to the GeckoView builds.

Best, Nathan

_______________________________________________ Guardian-dev mailing list

Post: Guardian-dev@lists.mayfirst.org List info: https://lists.mayfirst.org/mailman/listinfo/guardian-dev

To Unsubscribe Send email to: Guardian-dev-unsubscribe@lists.mayfirst.org Or visit: https://lists.mayfirst.org/mailman/options/guardian-dev/nathan%40guardianpro...

You are subscribed as: nathan@guardianproject.info