greenart7c3 800641bf0d Require per-listener credentials on the built-in Tor SOCKS port ...

Arti's SOCKS listener accepted any local connection, so other apps could
use Amber's Tor client and find its port. It now only offers RFC 1929
username/password auth and checks it, in constant time, against a random
secret generated for each listener; empty credentials are refused so it
can never run open. TorSocksAuthenticator hands that secret to Java's
SOCKS client, answering only for the current loopback listener port, on
Android and desktop.

All native libraries are rebuilt from the updated tools/arti source:
Android (4 ABIs), desktop Linux x64/arm64 and Windows, and macOS
x64/arm64.

2026-10-24 10:27:05 -03:00

5.0 MiB

Executable File

Raw Permalink History

View Raw