Thanks, InfinityDevil. I've noticed two problems with the constant tsocks method -

1) Gizmo doesn't work. You can override this by running it "LD_PRELOAD= gizmo". I tried setting the networks it uses as "local" in the tsocks configuration, to no avail.

2) Logging in to a hotspot like t-mobile's won't work with this method due to not being able to establish the tunnel until you've authenticated on their website. One workaround to this might be (I haven't tried this) to open a ssh connection back onto the tablet (ssh -D9999 root@0). I honestly don't know if the openssh server will be tsocked... Worth trying.

I'm still looking for the best solution....