Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't open webtorrent in tor windows #1134

Closed
tildelowengrimm opened this issue Sep 14, 2018 · 10 comments · Fixed by brave/brave-core#554
Closed

Don't open webtorrent in tor windows #1134

tildelowengrimm opened this issue Sep 14, 2018 · 10 comments · Fixed by brave/brave-core#554

Comments

@tildelowengrimm
Copy link
Contributor

Using the BitTorrent protocol over Tor results in poor performance and poor privacy. When using Tor, .torrent files should not be opened with webtorrent — instead, they should just be downloaded like any other file. Magnet links should result in a privacy warning. If the user choses to proceed, they could either be opened in-browser or in a desktop client. To reduce linkability, perhaps, Magnet links should be added to webtorrent but not opened until a short while after the Tor session ends

@srirambv
Copy link
Contributor

.torrent files open webtorrent on Tor windows.

@srirambv srirambv modified the milestones: 2.x Backlog, 1.x Backlog Sep 29, 2018
@diracdeltas
Copy link
Member

Changing this issue to reflect that webtorrent should not be enabled for Tor at all

@diracdeltas diracdeltas changed the title When using Tor provide a webtorrent fallback Don't open webtorrent in tor windows Sep 29, 2018
@diracdeltas diracdeltas modified the milestones: 1.x Backlog, Releasable builds 0.55.x Sep 29, 2018
@yrliou yrliou self-assigned this Sep 29, 2018
@bbondy bbondy added this to Tor in 0.55.x - Release Oct 2, 2018
@riastradh-brave riastradh-brave added release/blocking feature/tor/leakproofing Eliminating unexpected ways that someone using Tor might be unmasked. browser-laptop-parity labels Oct 3, 2018
@riastradh-brave
Copy link
Contributor

Marking this as a release blocker since torrents are a leak and this would be a regression from browser-laptop. Looks like @yrliou is on top of it, will take a look when the PR is ready.

@yrliou
Copy link
Member

yrliou commented Oct 3, 2018

QA note: See brave/brave-core#554 for the test plan.

@btlechowski
Copy link

btlechowski commented Oct 10, 2018

Verification passed on

Brave 0.55.12 Chromium: 70.0.3538.45 (Official Build) (64-bit)
Revision cbdc32e4334458954e9def214d7e5fa1ca1960eb-refs/branch-heads/3538@{#830}
OS Windows 7

Used test plan from brave/brave-core#554

Verification Passed on

Brave 0.55.12 Chromium: 70.0.3538.45 (Official Build) beta (64-bit)
Revision cbdc32e4334458954e9def214d7e5fa1ca1960eb-refs/branch-heads/3538@{#830}
OS Linux

Went through verification using the following build under macOS 10.13.6 x64 - PASSED

Brave 0.55.12 Chromium: 70.0.3538.45 (Official Build) beta(64-bit)
Revision cbdc32e4334458954e9def214d7e5fa1ca1960eb-refs/branch-heads/3538@{#830}
OS Mac OS X

@kjozwiak
Copy link
Member

@yrliou when there's no applications associated with magnet links, clicking on a magnet link won't do anything under Tor, meaning there's no feedback. I think we should add some type of warning/modal window that tells the user that webtorrent isn't supported under Tor if the user doesn't have a third party application installed.

Here's an example of what we did with browser-laptop (muon):

screen shot 2018-10-11 at 12 42 29 am

Thoughts?

@tildelowengrimm
Copy link
Contributor Author

What happens when you click a link which has no handler installed in general?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

9 participants