search

mycelium-com / wallet-android

Mycelium Bitcoin Wallet for Android
http://mycelium.com
Other
667 stars 322 forks source link

TOR routing leaks #618

Open Azza888 opened 3 years ago

Azza888 commented 3 years ago

Doing some testing I have found potential leakage outside of Tor, hoping someone more technically advanced can advise here.

With TOR network routing switched on in Mycelium settings, Orbot installed but currently disconnected. Mycelium is still able to receive new transactions and is obviously connecting to Mycelium servers. I have rebooted multiple times since setting the Tor network routing on so it is not that, and have force closed all apps and reopened, same thing.

Is this a leak or am I missing something here?

maltfield commented 2 years ago

possibly related to #644 since mycelium doesn't work at all if you force it to use Tor in Afwall+

Giszmo commented 3 weeks ago

So at some point my explanation would have been that Mycelium tries to route wapi server calls over TOR but isn't using wapi anymore ... and never bothered to remove the TOR button.

If you want privacy, configure Mycelium in your Orbot so the whole app can't connect directly to any servers ... and ignore the TOR button.