iOS VPNs have leaked traffic for more than 2 years, researcher claims

humminbird

Veteran
Joined
Nov 18, 2016
Messages
44,043
Reputation
8,417
Daps
181,705
Um, that's not clickbait, that's kind of a big deal, That's a MAJOR security risk and the main purpose of a VPN, not to mention this is NOT standard actions for VPNs. VPNs should protect all new and existing connections once they are on.
there’s a difference between privacy and securing your data
Is it securing your data yes it is giving you complete privacy? No but no vpn does
 

humminbird

Veteran
Joined
Nov 18, 2016
Messages
44,043
Reputation
8,417
Daps
181,705
But is a manual reset of your existing connections a required workflow for most VPNS?
You don’t have to do it But if you're worried about all your data then someone would do it.
The problem is that all of these vpns are bad the article mentions the only true fix
Horowitz's post doesn't offer specifics on how iOS might fix the issue. He also doesn't address VPNs that offer "split tunneling," focusing instead on the promise of a VPN capturing all network traffic. For his part, Horowitz recommends a $130 dedicated VPN router as a truly secure VPN solution.

VPNs, especially commercial offerings, continue to be a complicated piece of Internet security and privacy. Picking a "best VPN" has long been a challenge. VPNs can be brought down by vulnerabilities, unencrypted servers, greedy data brokers, or by being owned by Facebook.
 
Joined
Dec 27, 2017
Messages
3,825
Reputation
1,631
Daps
12,089
You don’t have to do it But if you're worried about all your data then someone would do it.
The problem is that all of these vpns are bad the article mentions the only true fix
It's a client issue and not a server side one. The client should block any connection attempt outside the tunnel.

uVjtvNz.png
 

bnew

Veteran
Joined
Nov 1, 2015
Messages
41,847
Reputation
7,092
Daps
129,910
It's a client issue and not a server side one. The client should block any connection attempt outside the tunnel.

uVjtvNz.png

how is it a client issue if multiple clients have the same issue? it's a baked in problem in iOS since these apps have to use the same API.
 
Joined
Dec 27, 2017
Messages
3,825
Reputation
1,631
Daps
12,089
how is it a client issue if multiple clients have the same issue? it's a baked in problem in iOS since these apps have to use the same API.
Do you even know how a VPN works? There's no API. It's an encrypted tunnel between two endpoints with one end being the server and the other end the client which can be one device or thousands. This is just laziness on the app developer's part to rely on iOS.
 
Last edited:

bnew

Veteran
Joined
Nov 1, 2015
Messages
41,847
Reputation
7,092
Daps
129,910
Do you even know how a VPN works? There's no API. It's an encrypted tunnel between two endpoints with one end being the server and the other end the client which can be one device or thousands.

Whoever programmed the network stack inside iOS proper didn't enable the blocking of connections that go outside the tunnel when activated.
so not a client issue.
 
Top