diff --git a/src/content/en/blog/dns-traffic-leak-outside-vpn-tunnel-on-android.md b/src/content/en/blog/dns-traffic-leak-outside-vpn-tunnel-on-android.md index 18b6b442..51bcdcb7 100644 --- a/src/content/en/blog/dns-traffic-leak-outside-vpn-tunnel-on-android.md +++ b/src/content/en/blog/dns-traffic-leak-outside-vpn-tunnel-on-android.md @@ -9,8 +9,9 @@ categories: tags: - Apps date: 2024-06-13T08:00:00.000Z +thumbnailImage: /images-static/uploads/vpn.png --- -Recently we were made aware of a potential DNS traffic leak outside the VPN tunnel on Android. Even with Android OS "Always-on VPN" and "Block connections without VPN" options enabled, as per the report the plaintext DNS traffic can be observed outside the VPN tunnel. +Recently we were made aware of a potential DNS traffic leak outside the VPN tunnel on Android. Even with Android OS "Always-on VPN" and "Block connections without VPN" options enabled, [as per the report](https://issuetracker.google.com/issues/337961996) the plaintext DNS traffic can be observed outside the VPN tunnel. During our investigation, we were able to confirm the issue when using different VPN apps on Android (including the IVPN app). The issue was reproduced in several different Android versions, including the latest Android 14. @@ -25,9 +26,3 @@ A DNS leak can occur when an app (e.g. Chrome app) calls the `getaddrinfo` funct ### Recommendations DNS leaks can seriously impact user privacy, resulting in potential exposure of browsing history and geolocation, or tracking and profiling. Depending on your threat model, you might consider avoiding using Android in situations where DNS leaks can impact your privacy, until the issue is fixed in a future Android OS version. - -### Resources - -- https://mullvad.net/en/blog/dns-traffic-can-leak-outside-the-vpn-tunnel-on-android -- https://issuetracker.google.com/issues/337961996 -- https://news.ycombinator.com/item?id=40247604