mycelium-com/wallet-android

TOR routing leaks

Azza888 opened this issue · 2 comments

Doing some testing I have found potential leakage outside of Tor, hoping someone more technically advanced can advise here.

With TOR network routing switched on in Mycelium settings, Orbot installed but currently disconnected. Mycelium is still able to receive new transactions and is obviously connecting to Mycelium servers. I have rebooted multiple times since setting the Tor network routing on so it is not that, and have force closed all apps and reopened, same thing.

Is this a leak or am I missing something here?

possibly related to #644 since mycelium doesn't work at all if you force it to use Tor in Afwall+

So at some point my explanation would have been that Mycelium tries to route wapi server calls over TOR but isn't using wapi anymore ... and never bothered to remove the TOR button.

If you want privacy, configure Mycelium in your Orbot so the whole app can't connect directly to any servers ... and ignore the TOR button.