[guardian-dev] Orfox: New Firefox-based Android Private/Secure Browser

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Based on work done this summer by Amogh Pradeep during his Google Summer of Code stint with me, we now have a real working version of Firefox/Fennec for Android with all the necessary defaults changed to match Tor Browser's defaults as closely as possible. We also remove the Android permissions for things like camera, mic, GPS and turn off webrtc. You can see the primary commits we've made here (many by me, but started successfully by Amogh): https://github.com/guardianproject/gecko-dev/commits/adaa37949dbba690ed0392c1fd004b006e73bfdf We still need to figure out which preferences and features map between the desktop mobile browser and the Android version, so there is quite a bit of work to do. For instance, even though the preference from Tor Browser is set to start in private browsing mode, it doesn't work at all in the Android app. Also, we haven't applied any of the lower level source patches to the gecko engine yet, or included any of the default extensions like HTTPS Everywhere or NoScript. Sorting out and resolving these differences is what is on deck for this fall, and everyone is welcome to join in. In addition, the recent audit work from iSec (https://blog.torproject.org/blog/isec-partners-conducts-tor-browser-hardening-study) is also on our minds, and figuring out how we can live up to the goals of that study on a mobile device is also very important. The current build successfully passes the DNSLeakTest.com tests and passed the HTML5 video leak issue here: http://xordern.net/why-you-really-shouldn't-use-orweb-anymore.html ip-check.info still doesn't see the browser as being Tor Browser, so there are some differences yet to resolve there. The whole project is automatically building on our jenkins server, and you'll find all the links to APKs and our test build repo below. Over the next few months we hope to launch this as our new official browser for Orbot, and deprecate Orweb as quickly as possible. *** Main project repo: https://github.com/guardianproject/OrfoxFennec Our fork of Mozilla's Gecko-Dev: https://github.com/guardianproject/gecko-dev/tree/adaa37949dbba690ed0392c1fd004b006e73bfdf (which we can rebase on the original as needed) Nightly/dev builds direct APK download here: https://guardianproject.info/builds/OrfoxFennec/ OR our fdroid test build repo: https://dev.guardianproject.info/fdroid/repo?fingerprint=F8ED4C73C125E7A67F99DB269480DAF50BE1758952E07EE5ABF116FE4B2DB1E8 *** +n -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJT9NGaAAoJEKgBGD5ps3qpeUQP/1cB6E3K6so8wMD4H5wb4sB2 DPffJJRMcm2elVGsdr0+EDtPkZd+/1XomPr82j4YTT7S36LvTHm+Tt9ZgvSZJINj qDGCA58EpIkH6idrGulPKJVhp4NxKl0JNIoSon6hbH2sK89yROXQrQV5kDd8TVDT Y7NCADoeR53XwwJeUVSO+LFfjv2bQK8AEVKUVzL2qHx24Y7AllbaJ4DV9nraYRQ/ q21/qXe5X0wMaIJg3llaVmqjDZQyeXjQ2mS/zC6mnICvieAB8SZcFwr2cPJ/LO1/ DG91gy0bWVySUtDU/gQa+agg26KbOnm+2rLRk/op/WWsyM72n3w+W/OIuPdRwmIx dpAUN1bEAeSopo4L/UwPkfyXC8tAR3JwT4yo20kPHUtb204t6prdye1o5e6VzQB4 73XFIto6wjFtCzzZNZy7H9Btmxr/ayReFSx4PFz4OriUfjihcpwkPMp1nrqX195z 1DrcJN9IlvGkMNEWDyPVDuD46zgyT+v93n59DJMG8upgTqH0UfVRZ9yzR9762dnP 9x6lpA0sqGxTpXzBOlbTwyjsJaazpLUqY7FXQJGL9dVVBNGwDE/0gPtPJ+7BC6Qc WXd2xbDcXzdsiHub+SIAGSnPhnPVpocIcMJ0KK2YiKn+WuAEctxc3VOKIjHLPb/G 1jY8Ly6K62N7wyvtAPvI =rm6R -----END PGP SIGNATURE-----