Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
Sunshine (she/her) ( Sunshine@lemmy.ca )  to Linux@programming.devEnglish · 1 year ago

Introducing oniux: Kernel-level Tor isolation for any Linux app

blog.torproject.org

external-link
message-square
7
link
fedilink
  • cross-posted to:
  • privacy@lemmy.dbzer0.com
  • planetdyne@fed.dyne.org
  • pulse_of_truth@infosec.pub
91
external-link

Introducing oniux: Kernel-level Tor isolation for any Linux app

blog.torproject.org

Sunshine (she/her) ( Sunshine@lemmy.ca )  to Linux@programming.devEnglish · 1 year ago
message-square
7
link
fedilink
  • cross-posted to:
  • privacy@lemmy.dbzer0.com
  • planetdyne@fed.dyne.org
  • pulse_of_truth@infosec.pub
Introducing oniux: Kernel-level Tor isolation for any Linux app | Tor Project
blog.torproject.org
external-link
Introducing oniux: Kernel-level Tor isolation for any Linux app. This torsocks alternative uses namespaces to isolate Linux applications over the Tor network and eliminate data leaks.
alert-triangle
You must log in or # to comment.
  • swelter_spark ( swelter_spark@reddthat.com ) 
    link
    fedilink
    English
    arrow-up
    13
    ·
    1 year ago

    Niiiice.

  • Lemmchen ( Lemmchen@feddit.org ) 
    link
    fedilink
    arrow-up
    7
    ·
    1 year ago

    What happens to software that listens on an external port (0.0.0.0:12345)? Does a hidden service automatically get created for it? Or is this strictly a client tool?

  • trevor (any/all)  ( trevor@lemmy.blahaj.zone ) 
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 year ago

    Other than the example uses provided in the article, does anyone have any interesting ideas for how this could be used? The RUST_LOG=debug one looks like it’ll be particularly useful as an easy way to see what network requests a given binary might be making.

    • Brickfrog ( brickfrog@lemmy.dbzer0.com ) 
      link
      fedilink
      arrow-up
      4
      ·
      1 year ago

      Would be cool if this could work on Android and essentially be able to pick and choose which apps to run over Tor.

      • TwilightOracle ( TwilightOracle@programming.dev ) 
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 year ago

        You mean like orbot?

        https://github.com/guardianproject/orbot-android

        • Brickfrog ( brickfrog@lemmy.dbzer0.com ) 
          link
          fedilink
          arrow-up
          2
          ·
          1 year ago

          Sort of. Orbot is fine but for it to work it does have to modify the system’s networking. It installs itself as a VPN so if I try to use it it’ll kick me off the VPN my Android was already using. So yes Orbot can sort of let me pick apps to run over Tor but to do so it forces me off-VPN for all my other apps. Maybe that’s an Android limitation or an Orbot quirk, not really sure.

          The nice thing about this new Oniux is that it works more like a container for applications rather than have to modify the system’s network.

  • glitching ( glitching@lemmy.ml ) 
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    so, like torify up until now? tried it on a couple of apps as a replacement, works fine. the rust build chain though, madonn’…

Linux@programming.dev

linux@programming.dev

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !linux@programming.dev

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

  • !linux_memes@programming.dev
  • !linuxphones@lemmy.ca
  • our Matrix group chat
  • !reactos@programming.dev

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 196 users / day
  • 695 users / week
  • 2.3K users / month
  • 5.7K users / 6 months
  • 127 local subscribers
  • 15.4K subscribers
  • 4.51K Posts
  • 24K Comments
  • Modlog
  • mods:
  • Ategon ( Ategon@programming.dev ) 
  • adr1an ( anzo@programming.dev ) 
  • dwraf_of_ignorance ( dwraf_of_ignorance@programming.dev ) 
  • BE: 0.19.15
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code