DNS traffic can leak outside the VPN tunnel on Android (mullvad.net)

Article summary

A VPN provider has discovered that DNS traffic can leak outside the VPN tunnel on Android devices due to bugs in the Android operating system. This can occur when a VPN is active without a DNS server configured or during a short period while a VPN app is re-configuring the tunnel. The provider has found workarounds to mitigate the issue, but notes that these should not be necessary and that the problems should be addressed in the OS. The leaks can have serious privacy implications for users.

Main themes

• Android VPN issues
• DNS leaks
• Privacy concerns
• VPN security
• Android OS bugs
• Mitigation strategies

What commenters say

• Mullvad's transparency and efforts to address the issue are commendable and set a good example for other companies.
• The use of traditional advertising methods, such as billboards, is seen as a positive approach by some, while others find it unusual or even suspicious.
• Some commenters express concern that Mullvad's ads may be misleading, as they imply that the VPN can prevent all forms of tracking, which is not the case.
• There is a discussion about the effectiveness of physical ads and how to measure their impact, with some suggesting that it is difficult to quantify their success.
• The importance of transparency and accountability in VPN providers is highlighted, with some commenters appreciating Mullvad's efforts to provide detailed information about their practices.
• Some commenters are skeptical about the possibility of truly trustworthy VPN providers, citing the potential for bad actors and the limitations of current technologies.
• The use of homomorphic encryption and other advanced technologies is proposed as a potential solution to the problem of DNS leaks and other privacy concerns.
• There is a debate about the trade-offs between security, privacy, and convenience, with some commenters prioritizing one over the others.