Complete work-around for video DNS- and/or other leaks? about onionbrowser HOT 2 CLOSED

The problem is that video connections seem to operate entirely outside of the control of the app — ignoring the app’s attempts to proxy all connections.

For most connections, we are able to force the app to use our own internal Tor client as a proxy. See this code — basically, anything that isn't "file://", "data://" or an App Store link (handled by the OS), is caught and routed over Tor (instead of the OS's proxy server).

Unfortunately, the bug is that videos seem to ignore this code entirely. They might be using their own connection code via QuickTime or something. I’m not actually sure, but I could not find any way to get videos to respect the proxy while developing this portion.

So you’d still need a way to get the video data from your "video handler" to the Onion Browser app without leaking over non-Tor internet. Yes, the connection between the VPS and the video site is secure, and the VPS may not know the identity of the requester, but the client is still exposed and known to be requesting certain videos that are no longer securely encrypted at that point. Further, in the case of censorship or oppressive governments, using this "VPS video handler" method but sending over clear internet still runs severe risks. Even in the case of encryption, the amount of data funneling to one "VPS video handler" service would make it easy for content filters to identify and block.

If you really need to do something like this, you can possibly do this today:

• find some VPS service compatible with iPhone
• connect to that VPS in phone settings and ensure that traffic is going over VPS
• then use Onion Browser

Any videos (and other connections) that leak outside of Onion Browser will still be caught by this proxy or VPS.

from onionbrowser.

Thanks a lot for your answer and interesting thoughts. I certainly see your point.

But now I'm thinking — why not then have a VPN connecting point to the Tor network, in addition to the standard connection through OnionBrowser? Is that feasible? Connect to the Tor-network as VPN—I guess this is not implemented in Tor, and needs to be in order to work?

Too bad it might just be an incompatibility issue with what proxies Apple (and Android I guess) accept then. (But then again, real anonymity rotted in Apple and the other fruits with #Snowden, and only decentralized architecture has any hope left.)

from onionbrowser.