Opened 6 months ago

Last modified 6 months ago

#22551 assigned defect

F-Droid's Orfox APK file not updated to Tor Browser 7.0 yet

Reported by: cypherpunks Owned by: n8fr8
Priority: Very High Milestone:
Component: Applications/Tor Browser Version:
Severity: Critical Keywords: tbb-mobile
Cc: n8fr8, amoghbl1, fdsfgs@…, mcs Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

The rebranded Tor Browser, dubbed "Orfox", which is just TBB with some tiny patches against it for differences between Android's "Bionic" libc and the glibc that normal Tor Browser uses, is a year out of date.

Expected behaviour: when https://blog.torproject.org/blog/tor-browser-70-released was posted saying that Tor Browser for Android had been updated to disable RtspMediaResource (meaning https://trac.torproject.org/projects/tor/ticket/19078 was fixed), it should be possible to get the updated version.
Actual behaviour: it is not possible to get the update
Steps to reproduce: replace proprietary backdoored Google Play with F-Droid. See official Tor blog advertising an update for Android, with no way to get said update.

Many journalists and whistleblowers in third world countries can't afford a laptop and therefor must rely on Orfox. For their sake please try to at least release updates when critical zero day vulnerabilities come out. Your work is very appreciated, please keep at it.

There's no Orfox component to choose, presumably because it's almost exactly the same codebase as Tor Browser, so I'm putting this under Tor Browser.

Child Tickets

Change History (5)

comment:1 Changed 6 months ago by gk

Cc: n8fr8 amoghbl1 added
Keywords: tbb-mobile added

No, there is no Orfox component because the Tor Project is not distributing and developing it. That said we plan to work on a Tor Browser for mobile later this year with the aim to have a version on mobile that is in parity with the desktop version. Thus, we can leave it here for now. Adding mobile folks, though.

comment:2 Changed 6 months ago by tokotoko

Cc: fdsfgs@… added

comment:3 Changed 6 months ago by cypherpunks

Component: Applications/Tor BrowserApplications/Tor Browser Sandbox
Owner: changed from tbb-team to yawning

There seems to be an "Applications/Orbot" component here. Is that from Tor Project? Or is a mobile version of official Tor being made, similar to the situation with Orfox?

comment:4 Changed 6 months ago by yawning

Component: Applications/Tor Browser SandboxApplications/Tor Browser
Owner: changed from yawning to n8fr8
Status: newassigned

comment:5 Changed 6 months ago by mcs

Cc: mcs added
Note: See TracTickets for help on using tickets.