Nice, now please rewrite the prototype in C and will happily use it.
It's written in Rust. What would you need a C version for?
Oniux: Kernel-level Tor isolation for any Linux app
31–40 of 54 posts
Re: Oniux: Kernel-level Tor isolation for any Linux app
#32Does this mean one can now access tor websites using chrome?
You always could by just setting the proxy environment variables (or in settings). The standard port for the tor daemon is 9050. In fact, it's relatively easy to write a socks proxy that lets you route traffic through a arbitrary protocols. For example, I can serve/visit websites on syncthing with a socks5 proxy as a translation layer: https://github.com/acheong08/syndicate
Chrome has zero user-facing proxy controls of its own on Windows, nor PAC support. But the --proxy-server command line argument works.
Re: Oniux: Kernel-level Tor isolation for any Linux app
#33Isn't all this reserved to TCP, in other words in which way may it protect non-TCP activity?
Non-TCP activity wouldn't route and will fail to send.
Thank you, therefore my first impression seems right: without any provision for UDP this isn't an easy-to-setup and transparent way for any user to preserve his/her privacy.
Re: Oniux: Kernel-level Tor isolation for any Linux app
#34Re: Oniux: Kernel-level Tor isolation for any Linux app
#35Isn't all this reserved to TCP, in other words in which way may it protect non-TCP activity?
Non-TCP activity wouldn't route and will fail to send.
Note that you can use the Tor daemon as a normal DNS via UDP server and it will resolve your DNS requests over the network for you.
Maybe I'm wrong, but it seems similar to I2P where if you want "UDP", you'd need bespoke plugins/transports/whatever for each application.
Re: Oniux: Kernel-level Tor isolation for any Linux app
#36Earlier quoted context omitted.
Non-TCP activity wouldn't route and will fail to send.
Thank you, therefore my first impression seems right: without any provision for UDP this isn't an easy-to-setup and transparent way for any user to preserve his/her privacy.
As always this will depend on your definition for "any user".
Users who try to do a lot of UDP traffic will have to change their habits, yes. But a majority of users who don't know a lot about computers rarely do anything on a PC that isn't driven by the browser anyway.
But at least the users who try to use UDP won't wind up specifically leaking info, just wind up slightly confused why certain things aren't working.
Re: Oniux: Kernel-level Tor isolation for any Linux app
#37Huh. I had a conversation with a Tor developer on this topic about a decade ago, when network namespaces were still kind of a new hotness - the feedback I got was that it would be an easy way for people to think they were being secure while still leaking a bunch of identifiable information, so I didn't push that any further.
Strange, because torsock and torify do the same thing, but less robustly.
When you have torsocks or torify for everything, you're gonna leave your footprint through tor, whereas something like Tor Browser is designed specifically not to leave any print on the web.
Using tor directly on the kernel level means that your DNS is gonna leak. Your OS telemetry is gonna leak etc.
It's still a good idea but it should be implemented top to bottom and nothing left in between, otherwise you're de-anonymized quickly.
Re: Oniux: Kernel-level Tor isolation for any Linux app
#38Re: Oniux: Kernel-level Tor isolation for any Linux app
#39Huh. I had a conversation with a Tor developer on this topic about a decade ago, when network namespaces were still kind of a new hotness - the feedback I got was that it would be an easy way for people to think they were being secure while still leaking a bunch of identifiable information, so I didn't push that any further.
I think the tor folks made a fundamental strategic error by pushing that line. Yes, people who face a serious threat need to use tor browser and still pay attention to other ways to leak etc. But if we'd got 'tor everywhere' it would still make mass surveillance a lot harder. For one thing, today mass surveillance can detect who is using tor. If everyone was using it that wouldn't matter.
Re: Oniux: Kernel-level Tor isolation for any Linux app
#40Instructions on front page for install don't work. Need to change the version number from 0.4.0 to 0.5.0
cargo install --git https://gitlab.torproject.org/tpo/core/oniux oniux@0.5.0