We were recently made aware of multiple potential DNS leaks on Android. They stem from bugs in Android itself, and only affect certain apps.
  • Scolding0513@sh.itjust.works
    2·
    7 months ago

    Mullvad is awesome. i think this is the second android bug/incident they brought to light?

    Anyway, really really hope this gets fixed upstream, maybe by Graphene

    How much you wanna bet this was intentional by Google? 😏

    • viking@infosec.pub
      1·
      7 months ago

      They didn’t bring it to light, it was a user report posted on reddit. They merely investigated it further. Nothing against mullvad, it’s a great vpn, but credit where credit is due.

  • Pantherina@feddit.de
    1·
    7 months ago

    Any system app on Android, the captive portal login and more CAN all bypass a VPN in “block all other connections” mode.

    Android is really problematic and having as little system apps as possible is the only fix.

  • darcmage@lemmy.dbzer0.comEnglish
    0·
    7 months ago

    “The report detailed how the user managed to leak DNS queries when disabling and enabling VPN while having “Block connections without VPN” on.”

    Not to diminish the severity of the issue but I can’t imagine this being the factor that pushes the average person to ios over android.

          • meseek #2982@lemmy.ca
            1·
            7 months ago

            The one that irks me is how some apps that have already established a connection can ignore the VPN. I always wondered about that, like if I enabled my VPN, what happens to existing connections. One thing I couldn’t find is what apps can do this? If it’s third party apps, that’s pretty serious. But if it’s just Apple apps or default ones, that’s a far less of a concern seeing as Apple seems to bypass VPN anyway for its in-house wares.

              • meseek #2982@lemmy.ca
                1·
                7 months ago

                LOL. They built the entire fucking OS. If they want to siphon my data, they can. Without anyone knowing. Also everything is linked to my Apple ID. So what’s the point? They already know everything and have tied it all together with my unique IDs, device serial numbers and the payment data associated. What’s the point the of running FaceTime over a VPN? They already know everything…

                At some point you have to stay calm and think rationally.

                Now if Twitter or some random app I downloaded from GitHub can bypass my VPN, then yeah, that’s a pretty big concern as they currently have nothing on me.

                I’m going to ignore the “corpos aren’t your friend” because FUCKING DUUUHHHHHH

    • Possibly linux@lemmy.zipEnglish
      02·
      7 months ago

      I’m not sure of anyone who switches from iOS. Once you are in the ecosystem they won’t let you leave.

      • dubyakay@lemmy.ca
        2·
        7 months ago

        Why is this stupidity repeated ad nauseum? I’ve successfully switched from iOS to Android and back to iOS again without any hindrance.

        It’s not any different from switching from windows to Linux.

        • Possibly linux@lemmy.zipEnglish
          0·
          7 months ago

          Then why can’t I use an Apple watch with anything but Apple products? Why do I need a Mac to create iOS apps?

          • meseek #2982@lemmy.ca
            1·
            7 months ago

            Lmao. People really are just out there on the raggedy edge. The watch communicates with a shit ton of sensors and other tech only found on Apple devices. Also, last I checked, I can’t run an Android Watch on iPhone fully, there is always a slew of things that don’t work or kinda work. Maybe Apple didn’t want that experience for its users.

            You need a Mac to build Apple apps because why in the actual fuck would you use a PC to do that!? What’s the point?

            I’m not defending Apple as they clearly gate a lot of shit but the complaining about the dumbest shit ever doesn’t make them Nazis. Also, Google, Samsung, Microsoft, all of them are the same level of asshole. Big Tech is trash. This is not new news.

            • Possibly linux@lemmy.zipEnglish
              0·
              7 months ago

              You could use an Android watch with iOS but Apple will not let you. I don’t get why you are defending Apple

          • kugmo@sh.itjust.worksEnglish
            1·
            7 months ago

            If you just have an iPhone and nothing else and treat it like a smart phone it is very easy to migrate over to android and vice versa. If you get invested in the apple ecosystem it might be hard to leave or use some other products that are gimped without an iPhone

            • Possibly linux@lemmy.zipEnglish
              0·
              7 months ago

              Third party products will not work well with an iPhone as Apple makes sure that there products work best. Additionally, iphones have very bad SMS and MMS support.

    • youmaynotknow@lemmy.ml
      1·
      7 months ago

      If you do this, you’ll be using the DNS you assign instead of using the VPN’s DNS, as intended. That will make you stand out from the rest of the same VPN users, effectively affecting privacy.