[tor-bugs] #26252 [Applications/Tor Browser]: Orfox leaks actual IP address when downloading

[Tor Bug Tracker & Wiki]

#26252: Orfox leaks actual IP address when downloading
------------------------------------------+---------------------------
 Reporter:  Chai T. Rex                   |          Owner:  n8fr8
     Type:  defect                        |         Status:  closed
 Priority:  Medium                        |      Milestone:
Component:  Applications/Tor Browser      |        Version:
 Severity:  Critical                      |     Resolution:  not a bug
 Keywords:  tbb-mobile, tbb-proxy-bypass  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:                                |        Sponsor:
------------------------------------------+---------------------------
Changes (by sysrqb):

 * status:  needs_information => closed
 * resolution:   => not a bug


Comment:

 Replying to [comment:7 Chai T. Rex]:
 > Yes, I was trying to open it with the default video player application
 both times. I've retried with the Orfox downloader instead and the IP
 address no longer leaks.
 >
 > Could Orfox generate a warning message when an external application is
 about to be invoked in a way that could leak the IP address?

 Yes, I agree, thanks for reporting this! I opened #26529 for implementing
 that.

 I'm closing this as `not a bug` because this isn't a proxy-bypass within
 Orfox, itself. This is a general usability problem that we'll improve in
 #26529.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26252#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online