Skip to content

Privacy fix: eliminate unintended clearnet traffic (Tails support in progress) - #1233

Open
atesfurkan wants to merge 12 commits into
eigenwallet:masterfrom
atesfurkan:feature/electrum-tor-routing
Open

atesfurkan wants to merge 12 commits into
eigenwallet:masterfrom
atesfurkan:feature/electrum-tor-routing

Conversation

@atesfurkan

Copy link
Copy Markdown

wireshark2.txt
eigenwallet_original.txt

Summary

This PR addresses privacy-sensitive network behavior in EigenWallet by routing critical Electrum and exchange-related communications through Tor and preventing the identified DNS leaks.

The changes were tested using a custom EigenWallet 4.16.0 AppImage build (Custom Build v2). Network traffic was analyzed on Linux Mint 22.3 without a system-wide Tor service or VPN.

Privacy Fixes

  • Electrum: Address the identified DNS leaks associated with Electrum server connections.
  • Exchange providers: Address the identified DNS leaks associated with Trocador and MajesticBank.
  • Tor routing: Verify local SOCKS5 proxy operation on 127.0.0.1:9150 and observe traffic to Tor relays.
  • Wallet operations: Test application startup, wallet creation/opening, and network synchronization.

Network Analysis and Verification

We compared network behavior between the previous custom build (v1) and Custom Build v2.

  • v1: DNS queries associated with Trocador were observed during testing.
  • v2: The wallet opened successfully, and the previously observed Trocador and MajesticBank DNS leaks were no longer observed in the tested scenarios.
  • Tor connectivity: Successful SOCKS5 proxy operation and traffic to Tor relays were observed.
  • Remaining clearnet observations: DNS resolution for api.kraken.com (market-price data) and cdn.crabnebula.app (application interface assets) was still observed over clearnet in v2.

The remaining clearnet observations are documented transparently and are not claimed to be eliminated by this PR.

Supporting network-analysis artifacts and test details will be provided to help reviewers independently examine the results.

Test Environment

  • OS: Linux Mint 22.3
  • Kernel: 7.0.0-31-generic
  • Application: EigenWallet 4.16.0 — Custom Build v2
  • AppImage SHA-256: 71e03dd511eb5a88458ecce854b29294ddffaea232477beeac4d9cdab086a8af
  • System-wide Tor/VPN: Not active during testing

Tails Support Is on the Way

We are continuing work toward Tails compatibility, with the goal of making EigenWallet's network behavior align with the privacy expectations of the Tails environment.

Review

Please review the code changes alongside the accompanying network-analysis evidence. Independent testing and feedback are welcome.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant