3

I use USB tethering on an Android 10 mobile to access internet on my laptop. I use Tor browser (TB) on laptop and keep my OS (a Linux distro) on laptop patched for security vulnerabilities. At times I need to consume certain content from websites which I don't want any intermediary to know about.

Can my mobile device see what data I am requesting and receiving other than that I am connected to a Tor entry node and passing data to it back and forth?

Here's what I have in mind:

  1. I enter security.stackexchange.com in TB's URL bar in laptop
  2. TB establishes a secure connection and sends my request to Tor network.
  3. My telecom provider, the first potentially hostile intermediary I usually think of can see only that I am connected to Tor network. For scope reduction of this question, let us become ignorant and assume that my ISP or any intermediary further down does not have the capability to either see my original request or link it back to me.

So far, reasonably good. But, the first intermediary seems to be the Android 10 device itself. How can I be sure that my Android 10 device cannot know what data I am requesting and receiving other than that I am connected to Tor?

I am concerned because my mobile device is potentially hostile in my eyes. I do not know the capabilities of the baseband OS (which some state sponsored entities may exploit), don't know the vulnerabilities of my Android 10 device which has vanilla Android fused with proprietary code. My mobile device is also at the mercy of its OEM which may not provide security updates for it in future.

1
  • 2
    If the ISP can't see what you are doing, why do you think another intermediary can? – multithr3at3d Jun 17 '20 at 18:16
2

As already mentioned in a comment, your phone is an intermediary to the same extent as our phone's ISP. They see exactly the same traffic. Therefore, any technology that protects you from a hostile ISP protects you equally from a potentially hostile phone.

This is under the assumption that the only thing that the phone can see is the network traffic from the laptop. There are actually two ways the phone could be a more powerful attacker. Neither are due to the fact that the laptop's network traffic transits via the phone, only to the fact that the phone is located nearby and connected to the laptop via a cable.

  • If your laptop's USB stack is buggy, it might allow your phone to attack your laptop. The best remedy is to have an up-to-date operating system (and hoping your adversary doesn't have a zero-day on the OS drivers) and secure USB firmware (which you don't really have any control over, so don't obsess about it).
  • A smartphone has a lot of sensors which can observe all kinds of side channels. For example, malware on the phone may be able to figure out what you're typing from the sound of the keys being hit.

This is movie-plot-level paranoia, well beyond FBI-level attackers, but possibly not beyond NSA-level attackers.

Tor protects you by routing all traffic through an encrypted channel so that any intermediary between your laptop and the Tor network (your phone, your ISP, connections between ISP, the Tor entry node's ISP, the Tor entry node) can see that you're using Tor and can see the volume and timing of data, but not the content nor the ultimate destination of the data. The usual limitations of Tor apply (traffic between the exit node and the ultimate server, a state-level actor that sometimes controls both the entry node and the exit node that you happen to use at that time and manages to correlate packets through timing, occasionally forgetting to use Tor, etc.). None of these limitations are made any worse by having a smartphone as the first network gateway out of your computer.

0

I would consider using a vpn for this. This way if Tor does leak some data your phone's internet connection would only be able to see that you are connected to a vpn.

If you only want a vpn for this reason you could easily host your own on a shared vps (like digitalocean) or at your own house for very cheap.

I don't know the intricacies of how the TOR browser works but I know the vpn would protect you in this case because your entire connection would be encrypted through the vpn.

4
  • 1
    Yes, I can use a VPN but my question can easily be reworded into "Can Android see my data when I am using VPN or a privacy oriented distro like Whonix on laptop?". In that respect I am yet to see your answer addressing the core of my question. :-) – Firelord Jun 17 '20 at 11:13
  • No, your phone would not be able to see any data. The VPN is an encrypted tunnel where all the data is passed through. The phone will only be able to see that you are using a vpn. – Royce Jun 17 '20 at 11:18
  • But how do I verify that claim, that is the question here. A tunnel in networking is not the right term to use. A VPN software simply ensure that all the hosts traffic leaves the system (the laptop in this case) in such manner (usually through VPN's gateway established during installation) that an intermediary up to the VPN server can only see that the destination requested by user is that server itself. The same happens with requests from Tor-browser as well. I can also run Whonix so that all traffic of my system leaves encrypted and must connect to Tor network... – Firelord Jun 17 '20 at 11:31
  • ...but none of that helps me to be sure that my Android OS (or an entity which can compromise my Android) cannot see my data. – Firelord Jun 17 '20 at 11:32
-2

Since you are using TOR , you will be actually safe. The data which is being passed through Android phone will be encrypted. Neither your phone nor your ISP will get to know what you are doing on your Laptop

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.