Monday, November 28, 2022

Android skips some of the traffic, even if Always-on VPN is enabled

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Android skips some of the traffic, even if Always-on VPN is enabled

VPN provider Mullvad VPN has found that Android skips traffic every time the device connects to a Wi-Fi network, even if the "Block connections without VPN" or "Always on VPN" functions are enabled.

Data leaking outside of VPN tunnels includes source IP addresses, DNS queries, HTTPS traffic, and probably also NTP traffic.

This behavior is built into the Android operating system. But many users probably didn't know about it until now due to the inaccurate description of the "VPN blocking" functions in the Android documentation.

Mullvad discovered this leak during a security audit and published a warning to draw attention to this issue and put additional pressure on Google.

Google replied that this feature will not be fixed as "The impact on privacy is minimal."

As Mullvad VPN explains:

"The traffic that leaks outside the VPN connection contains metadata that can be used to obtain confidential information and deanonymize, for example, the location of Wi-Fi access points."

In addition, Mullvad explains that even if the leaks are not fixed, Google should at least update the documentation to correctly indicate that "Connection Checks" will not be protected by the "Block Connections without VPN" feature.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=Yl9M
-----END PGP SIGNATURE-----

https://multivpn.su

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.