bug#35728: Tor & IceCat's TorButton shows it's connected but doesn't route the traffic

bug#35728: Tor & IceCat's TorButton shows it's connected but doesn't route the traffic

[sirmacik]

Hey Guix!

There seems to be a problem with Tor and TorButton in GNU IceCat's
package. Torsocks works for other apps, TorButton shows notification
that it's connected to the Tor server but when I go to
check.torproject.org I'm not routed through tor.

This problem doesn't appear in Archlinux or GNU/Debian so it seems
that bug is Guix related.

--
sirmacik
PGP: 0xE0DC81D523891771

bug#35728: Tor & IceCat's TorButton shows it's connected but doesn't route the traffic

[swedebugia]

On 2019-05-14 15:19, sirmacik wrote:
> Hey Guix!
> 
> There seems to be a problem with Tor and TorButton in GNU IceCat's
> package. Torsocks works for other apps, TorButton shows notification
> that it's connected to the Tor server but when I go to
> check.torproject.org I'm not routed through tor.
> 
> This problem doesn't appear in Archlinux or GNU/Debian so it seems
> that bug is Guix related.

Could you please post the output of "guix describe" and your config.scm?

-- 
Cheers
Swedebugia

bug#35728: Tor & IceCat's TorButton shows it's connected but doesn't route the traffic

[sirmacik]

[-- Attachment #1: Type: text/plain, Size: 865 bytes --]

swedebugia dixit (2019-05-14, 17:01):

> On 2019-05-14 15:19, sirmacik wrote:
> > Hey Guix!
> >
> > There seems to be a problem with Tor and TorButton in GNU IceCat's
> > package. Torsocks works for other apps, TorButton shows notification
> > that it's connected to the Tor server but when I go to
> > check.torproject.org I'm not routed through tor.
> >
> > This problem doesn't appear in Archlinux or GNU/Debian so it seems
> > that bug is Guix related.
>
> Could you please post the output of "guix describe" and your config.scm?

here is guix describe output:

$ guix describe
Generation 14   maj 14 2019 15:28:04    (current)
  guix 1731b29
    repository URL: https://git.savannah.gnu.org/git/guix.git
    branch: master
    commit: 1731b29742bb2abb24fb0000ea00b3f35b5133bc

You can find config attached to this message.

--
sirmacik
PGP: 0xE0DC81D523891771

[-- Attachment #2: config.scm --]
[-- Type: text/plain, Size: 5428 bytes --]

;; This is an operating system configuration template
;; for a "desktop" setup with GNOME and Xfce where the
;; root partition is encrypted with LUKS.

(use-modules (gnu) (gnu packages)
             (gnu packages cups)
             (gnu packages audio)
             (gnu packages xorg)
             (gnu services pm)
             (gnu services sound)
             (gnu services networking)
             (gnu system nss))
(use-service-modules desktop xorg ssh avahi mcron nfs cups)
(use-package-modules certs gnome)

(operating-system
 (host-name "*****")
 (timezone "Europe/Warsaw")
 (locale "pl_PL.utf8")

 (keyboard-layout (keyboard-layout "pl"))

 ;; Use the UEFI variant of GRUB with the EFI System
 ;; Partition mounted on /boot/efi.
 (bootloader (bootloader-configuration
              (bootloader grub-efi-bootloader)
              (target "/boot/efi")))

 ;; Specify a mapped device for the encrypted root partition.
 ;; The UUID is that returned by 'cryptsetup luksUUID'.
 (mapped-devices
  (list (mapped-device
         (source (uuid "f45c2a51d-fc66-4033-8d15-e87016ab5542"))
         (target "my-root")
         (type luks-device-mapping))))

 (swap-devices '("/swapfile"))

 (file-systems (append
                (list (file-system
                       (device (file-system-label "my-root"))
                       (mount-point "/")
                       (type "ext4")
                       (dependencies mapped-devices))
                      (file-system
                       (device (uuid "8646-7E06" 'fat))
                       (mount-point "/boot/efi")
                       (type "vfat")))
                %base-file-systems))

 (users (cons (user-account
               (name "user")
               (comment "user")
               (group "users")
               (home-directory "/home/user")
               (supplementary-groups '("wheel" "netdev"
                                       "audio" "video"
                                       "lp" "input"
                                       "kvm" "lpadmin"
                                       "users" "avahi")))
              %base-user-accounts))

 ;; This is where we specify system-wide packages.
 (packages (append (map specification->package
                        '("nss-certs" "gvfs" "dosfstools" "nfs-utils" "xclip" "xterm"
                          "xbacklight" "xprop" "gs-fonts" "pulseaudio" "pavucontrol"
                          "acpi" "tor" "torsocks" "emacs" "htop" "avahi" "zip" "unzip"
                          "tmux" "gnupg" "screen" "mutt" "offlineimap" "msmtp" "wget"
                          "file" "openssh" "lvm2" "icecat" "cryptsetup" "mosh" "iptables"
                          "openvpn" "network-manager-openvpn" "git" "bash-completion"
                          "seahorse" "gnome-tweaks" "rtorrent" "libreoffice"
                          "keepassxc" "password-store" "syncthing" "inkscape" "gimp"
                          "aspell" "hunspell" "rsync" "perl" "dconf-editor" "cups"
                          "ghc-pandoc" "texlive" "ghostscript-with-cups" "psutils"
                          "recutils" "gptfdisk" "font-gnu-freefont-ttf" "font-liberation"
                          "font-terminus" "font-ubuntu" "font-dejavu" "font-open-dyslexic"
                          "font-inconsolata" "font-comic-neue" "font-anonymous-pro"
                          "freetype" "font-lato" "tlp" "smartmontools" "thinkfan"
                          "ntp" "font-liberation"))
                   %base-packages))

 (services (append (list (service gnome-desktop-service-type)
                         (service cups-service-type
                                  (cups-configuration
			           (web-interface? #t)
		    	           (browsing? #t)
		                   (default-paper-size "A4")
			           (extensions
                                    (list cups-filters cups-pk-helper foomatic-filters hplip-minimal))))
                         (service mcron-service-type)
                         (service tor-service-type)
                         (service tlp-service-type
                                  (tlp-configuration
                                   (cpu-boost-on-ac? #t)))
                         (set-xorg-configuration
                          (xorg-configuration
                           (keyboard-layout keyboard-layout)
                           (modules (filter (lambda (mod)
                                              (not (eq? mod xf86-input-synaptics)))
                                            %default-xorg-modules)))))
                         (modify-services %desktop-services
                                          (alsa-service-type config =>
                                                             (alsa-configuration
                                                              (inherit config)
                                                              (pulseaudio? #t)))
                                          (bluetooth-service-type config =>
                                                                  (bluetooth-configuration
                                                                   (inherit config)
                                                                   (auto-enable? #t))))

                         ))

           ;; Allow resolution of '.local' host names with mDNS.
           (name-service-switch %mdns-host-lookup-nss))

Re: bug#35728: Tor & IceCat's TorButton shows it's connected but doesn't route the traffic

[Pierre Neidhardt]

I can confirm this issue and I've been experiencing it for almost a
year.
It used to work.

This is very embarrassing since our IceCat is misleading the users that
they are browsing anonymously while they are not.

Mark, any idea about this?

-- 
Pierre Neidhardt
https://ambrevar.xyz/

Re: bug#35728: Tor & IceCat's TorButton shows it's connected but doesn't route the traffic

[Mark H Weaver]

Hi,

sirmacik <sirmacik@wioo.waw.pl> wrote:
> There seems to be a problem with Tor and TorButton in GNU IceCat's
> package. Torsocks works for other apps, TorButton shows notification
> that it's connected to the Tor server but when I go to
> check.torproject.org I'm not routed through tor.

Thanks for bringing this to our attention.  I see the same problem.

> This problem doesn't appear in Archlinux or GNU/Debian so it seems
> that bug is Guix related.

Interesting.  Which version of Debian did you test with, and how did you
install the Firefox that you used for testing this?

I found this same problem with Firefox ESR 68.9 running on a stock
Debian 9 (stretch, a.k.a. oldstable) system, using Debian's
'firefox-esr' package, after installing the extension via
addons.mozilla.org, specifically version 0.1.8 of the "Onion Browser
Button by Benthum", available here:

  https://addons.mozilla.org/en-US/firefox/addon/tortm-browser-button/

Moreover, I found that even if Tor is not running at all, and nothing is
listening on port 9050, the extension still reports that it's "checking
tor proxy connection..." and then "TOR is running.  Connected to
127.0.0.1:9050", which is false on both counts.  I filed a bug report
upstream.

I've removed this extension from Guix's IceCat package for now, pending
further investigation, commit 416439263cb295260ba38ab1cce5b4468ae5691e.

     Thanks,
       Mark

Re: bug#35728: Tor & IceCat's TorButton shows it's connected but doesn't route the traffic

[Mark H Weaver]

Hello again.

In my previous message, I asked:
> Which version of Debian did you test with, and how did you
> install the Firefox that you used for testing this?

Also, what version of Firefox did you test with?

    Thanks,
      Mark

bug#35728: Tor & IceCat's TorButton shows it's connected but doesn't route the traffic

[sirmacik]

Mark H Weaver dixit (2020-06-18, 03:45):

> Hello again.
> 
> In my previous message, I asked:
> > Which version of Debian did you test with, and how did you
> > install the Firefox that you used for testing this?
> 
> Also, what version of Firefox did you test with?

Mark,
That was more than a year ago, I cannot recall. I'm also not using Debian
anymore so I cannot check it. 

Best regards,
Marcin

bug#35728: Tor

[Msavoritias]

[-- Attachment #1: Type: text/plain, Size: 89 bytes --]

Since Tor Button is removed from latest Icecat I propose we close this 
issue.

Marinus


[-- Attachment #2: Type: text/html, Size: 165 bytes --]