Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

broken on torsocks #558

Open
bruceleerabbit opened this issue Oct 11, 2024 · 0 comments
Open

broken on torsocks #558

bruceleerabbit opened this issue Oct 11, 2024 · 0 comments

Comments

@bruceleerabbit
Copy link

bruceleerabbit commented Oct 11, 2024

This works fine, which is the normal case over clearnet:

GNIREHTET_APK=/my_apk_files/gnirehtet_v25.apk /usr/local/bin/gnirehtet run

But if gnirehtet is run on torsocks to proxy over tor, it falls apart because gnirehtet needs to make local connections:

$ GNIREHTET_APK=/my_apk_files/gnirehtet_v25.apk torsocks /usr/local/bin/gnirehtet run
... WARNING torsocks[…]: [connect] Connection to a local address are denied since it might be a TCP DNS query to a local DNS server. Rejecting it for safety reasons. (in tsocks_connect() at connect.c:191)
error: could not install *smartsocket* listener: Address already in use

* failed to start daemon
error: cannot connect to daemon
ERROR Main: Cannot stop client: Command adb ["shell", "am", "start", "-a", "com.genymobile.gnirehtet.STOP", "-n", "com.genymobile.gnirehtet/.GnirehtetActivity"] returned with value 1

This is related to bug #329 by @Kardshadow. The readme shows some manual ways of running gnirehtet. I’m sure just one of those commands needs to run on torsocks, but whichever command that is, it’s likely also broken in this regard because it will need to talk locally.

Gnirehtet really needs specific support for proxying.

It’s an important feature. Mind boggling that it was not built into the original design because Android devices are “chatty”. When running gnirehtet it’s immediately clear that there are unnecessary connections phoning home to Google. So the very first concern should be a way to anonymise that traffic and also to (egress) firewall it to stop the data leaks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant