3.13 Android client's provider setup with censorship circumvention does not warn the user that it will use Tor
When setting up a provider, if the user selects the option to use censorship circumvention, they are not warned that the client will initiate a connection to the Tor network.
Risk. A passive interceptor like the ISP can detect that the user is making use of Tor, which could be a privacy issue in certain regions.
Mitigation. Add a warning before the provider setup that if the censorship circumvention is enabled, it will make use of Tor.
Severity. 1 (Low)
Component. 0xacab.org/leap/bitmask_android