Comments (5)
Why are you pretending to be someone from Google? Also, this issue isn't relevant to us since the way that Tor uses OpenSSL is not affected by logjam.
from orbot.
This information appeared in the Developer Console. In your application using OpenSSL is vulnerable
from orbot.
What do you mean the Developer Console? Who's developer console?
As I noted, the way Tor uses OpenSSL is different than most apps, and it is not vulnerable.
from orbot.
what version of OpenSSL is used in your application?
1.02f / 1.01r vulnerable.
These versions contain a security vulnerability.
from orbot.
I am not saying there isn't a vulnerability, but that Tor is not a typical openssl client, and that it is not susceptible to this flaw.
https://lists.torproject.org/pipermail/tor-dev/2015-May/008868.html
Regardless, we will likely be updating OpenSSL to the latest release in our next version.
from orbot.
Related Issues (20)
- [Feature Request] Shut down Orbot when unused HOT 4
- [BUG] Sudden vast battery consumption HOT 14
- Connection URL, real IP is leaked HOT 1
- Upload to F-Droid without custom repo
- [BUG] System WiFi failure after installing Orbot 16.6.3-RC-1-tor.0.4.7.10 HOT 2
- [Feature Request] HTTPS-Only Mode for Orbot
- [Feature Request] Show current entry node country and current exit node country on the main screen; bring "Download" and "Upload" back
- APK for each chip architects
- Meek Bridge Progress Stops After 14%
- [Question] kindness mode: serving much more clients than a browser extension. Intentional?
- Bring the Obfs4proxy and Snowflake back. (IOS) HOT 1
- [BUG] android/spy. Agent. Dfm malware HOT 3
- [BUG]
- [BUG]
- Orbot for Android v17.2.1 RC 2 (tor 0.4.8.7)
- [BUG] No automatic network timeout (in german: Kein automatischer Netzwerk-Ruhezustand) setting does not change anything
- Web tunnel
- [BUG] App crashes from log with IllegalStateException
- [BUG] Hotspot always routed HOT 3
- [BUG] When “Block connections without VPN” enabled Orbot shows error
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from orbot.