Psiphon security advisory: browser-only mode is not tunneled on Android 4.4

15,534 views

Skip to first unread message

Psiphon Info

unread,

Nov 10, 2013, 10:06:51 PM11/10/13

to psip...@googlegroups.com, psiphon...@googlegroups.com, psiphon3-...@googlegroups.com

In Android 4.4, change were made to the underlying WebView (http://developer.android.com/guide/webapps/migrating.html) component used by the Psiphon browser. The technique used to set the HTTP proxy for this component silently fails with the new implementation on Android 4.4. As a result, the embedded browser silently fails to use the Psiphon tunnel.

We are investigating fixes for this issue. In the meantime, users are advised to use whole device mode on Android 4.4.

The Psiphon Team

Psiphon Info

unread,

Jan 29, 2014, 1:20:32 PM1/29/14

to psip...@googlegroups.com, psiphon...@googlegroups.com, psiphon3-...@googlegroups.com

Please note that this is now fixed in version 50 of the Android client. Browser-only mode has been re-enabled on Android 4.4.