Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-17 Thread Nathan Freitas
On 9/13/19 3:51 AM, Hans-Christoph Steiner wrote: > > teor: >> >> It's not always safe to have apps share Tor: a malicious website in one app >> can use various caches to discover activity in other apps. And there may >> be similar data leaks in other shared data structures or network >> connectio

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-13 Thread Michael Rogers
Hi all, Just saw this thread while heading out the door and wanted to mention that we already have a reproducible build setup for Tor and obfs4proxy binaries for Android and Linux. The binaries are published on JCenter. Hans-Christoph, hope this shortens your path! :-) https://code.briarproject.o

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-13 Thread Santiago Torres-Arias
On Fri, Sep 13, 2019 at 12:32:06PM +0200, Nicolas Vigier wrote: > On Thu, 12 Sep 2019, Hans-Christoph Steiner wrote: > > > > > And third, and tips on getting a Linux shared library to build > > reproducibly. E.g. is faketime a hard requirement? > > Usually it's not needed to use faketime. It's

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-13 Thread Matthew Finkel
On Thu, Sep 12, 2019 at 10:50 AM Hans-Christoph Steiner wrote: > > > Hey all, > > I'm currently working on tor for Android as part of a Guardian Project > project. One key goal is making a shareable, reproducible build process > for the tor daemon for Android. Then this would be published to > M

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-13 Thread Matthew Finkel
On Fri, Sep 13, 2019 at 7:51 AM Hans-Christoph Steiner wrote: > > > > teor: > > Hi, > > > >> On 12 Sep 2019, at 20:50, Hans-Christoph Steiner > >> wrote: > >> > >> Then that work > >> will hopefully be extended into sharing tor between apps, e.g. letting > >> Briar, Tor Browser, etc share the to

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-13 Thread Nicolas Vigier
On Thu, 12 Sep 2019, Hans-Christoph Steiner wrote: > > And third, and tips on getting a Linux shared library to build > reproducibly. E.g. is faketime a hard requirement? Usually it's not needed to use faketime. It's only useful if the toolchain has bugs that cannot easily be fixed, causing som

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-13 Thread Georg Koppen
Hans-Christoph Steiner: > Georg Koppen: >> Hans-Christoph Steiner: >>> >>> Hey all, >>> >>> I'm currently working on tor for Android as part of a Guardian Project >>> project. One key goal is making a shareable, reproducible build process >>> for the tor daemon for Android. Then this would be pub

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-13 Thread Hans-Christoph Steiner
teor: > Hi, > >> On 12 Sep 2019, at 20:50, Hans-Christoph Steiner >> wrote: >> >> Then that work >> will hopefully be extended into sharing tor between apps, e.g. letting >> Briar, Tor Browser, etc share the tor SOCKS proxy to other apps that >> want to use it. That would happen via Android me

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-12 Thread teor
Hi, > On 12 Sep 2019, at 20:50, Hans-Christoph Steiner > wrote: > > Then that work > will hopefully be extended into sharing tor between apps, e.g. letting > Briar, Tor Browser, etc share the tor SOCKS proxy to other apps that > want to use it. That would happen via Android mechanisms like Inte

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-12 Thread Hans-Christoph Steiner
Georg Koppen: > Hans-Christoph Steiner: >> >> Hey all, >> >> I'm currently working on tor for Android as part of a Guardian Project >> project. One key goal is making a shareable, reproducible build process >> for the tor daemon for Android. Then this would be published to >> MavenCentral as an A

Re: [tor-dev] reproducible builds for Android tor daemon

2019-09-12 Thread Georg Koppen
Hans-Christoph Steiner: > > Hey all, > > I'm currently working on tor for Android as part of a Guardian Project > project. One key goal is making a shareable, reproducible build process > for the tor daemon for Android. Then this would be published to > MavenCentral as an Android AAR package to

[tor-dev] reproducible builds for Android tor daemon

2019-09-12 Thread Hans-Christoph Steiner
Hey all, I'm currently working on tor for Android as part of a Guardian Project project. One key goal is making a shareable, reproducible build process for the tor daemon for Android. Then this would be published to MavenCentral as an Android AAR package to be used in all the apps that include