InfoSecBulletin Cybersecurity for mankind
What Is Orbot?
Orbot is a free app created by the Guardian Project. It helps protect your privacy by routing your internet traffic through the Tor network, which encrypts your data and conceals your online activity, keeping your identity and location private.
“Forces Penpals” exposed US and UK Military Social Network’s 1 Million Records
CVE-2024-51503
Trend Micro released updates for Deep Security Agent RCE
Apple Releases Patch for two Actively Exploited Zero-Day
Maxar Space Data Leak, Company admit, Investigation ongoing!
GitHub CLI Vulnerability Could Allow RCE
“Sarcoma” ransomware group
Hacker to disclose “Popular Life Insurance” 36 GB of stolen data
BugHunt 2024: A Milestone Cyber security Competition held at Dhaka
TP-Link DHCP Vulnerability Allow Attackers Takeover Routers Remotely
WSJ reports
T-Mobile hacked in massive breach of telecom networks
Palo Alto Networks Confirms critical RCE zero-day actively exploited
How Does Orbot Work?
Here’s a breakdown of how Orbot utilizes the Tor network to provide anonymity:
Entry Node:
When using Orbot with an app, your data is first sent to an entry node in the Tor network, similar to giving a sealed letter to a trusted friend in a big city to forward it for you.
Relay Nodes: Obfuscating the Path:
The starting node in the Tor network doesn’t know your final destination. It randomly selects another relay node which then sends the encrypted data. This double encryption makes it impossible to decipher the content or your identity.
The Onion Routing Magic:
Here’s where the name “Tor” comes in.
Relay nodes in the network remove one layer of encryption, similar to peeling an onion. However, unlike an onion, relay nodes only know the previous and next node in the chain, not the entire path.
Onion routing makes it hard for monitors to track data to its origin or destination.
Exit Node: The Final Stop:
Data passes through relay nodes and reaches the exit node before being decrypted and sent to the website. Each node changes your IP address, making it difficult for anyone to identify or track you.
What Can You Use Orbot For?
Orbot offers a variety of benefits for users seeking online privacy and anonymity. Here are some common use cases:
Accessing Censored Content: In countries with strict internet censorship, Orbot allows you to bypass restrictions and access blocked websites or services. This can be particularly useful for:
Journalists and activists researching sensitive topics in censored regions.
Citizens seeking access to information and resources that their governments restrict.People want to explore a wider range of content and perspectives online.
Protecting Your Privacy on Public Wi-Fi:
Public Wi-Fi networks are notoriously insecure, making your data susceptible to interception. Orbot encrypts your internet traffic on public Wi-Fi, adding a layer of protection for activities like:Online banking and financial transactions.
Accessing personal email accounts and social media profiles.
Sending and receiving sensitive documents.
Communicating Anonymously:
Whether you’re using a chat app for casual conversations or a platform for more sensitive communication, Orbot can help shield your identity from:
Government surveillance in countries with heavy monitoring programs.
Hackers and malicious actors trying to intercept your online communication.
Third-party trackers who collect data about your online activity.
Researching Sensitive Topics:
If you’re researching sensitive topics that could put you at risk of retaliation, Orbot can help anonymize your online searches and browsing activity. This can be beneficial for:
Whistleblowers uncovering wrongdoing or corruption.
Individuals researching topics related to human rights, political dissent, or social justice movements.
Anyone wanting to explore controversial topics without revealing their identity.
Download Anonymously (with Caution): While not explicitly endorsed by the Tor Project, some users choose Orbot for anonymous downloads. However, this practice comes with significant risks:
Malware Distribution:
Malicious actors can use the Tor network to distribute malware. It’s crucial to only download files from trusted sources.
Copyright Infringement: Downloading copyrighted material through Tor is illegal and could have legal consequences.
