Re:Gambling and Adult content DNS blocking using Mullvad VPN
by jeroenhd on Wednesday July 13, 2022 @08:52AM
(#32081908)
As I've recently been made aware here on HN, on Android system applications can bind to an arbitrary interface so they can effectively bypass the VPN system. I don't think it happens often in practice, but it's something to keep in mind.
[ Parent
| on HN ]
Re:Gambling and Adult content DNS blocking using Mullvad VPN
by flas9sd on Wednesday July 13, 2022 @06:41PM
(#32089640)
on paper (Android 8 and up) has the always-on type VPN that blocks any network connection not using the vpn (disallows bypass). Didn't poke it yet how it works if multiple apps create VPNs, I assume only one VPN of this type can be active
Re:Gambling and Adult content DNS blocking using Mullvad VPN
by jeroenhd on Thursday July 14, 2022 @07:00AM
(#32094342)
The single app restriction is a consequence of how the API works, but the always on VPN doesn't prohibit system apps from binding to an interface and bypassing the VPN configuration.
This kind of makes sense, you probably want a modem manager to talk to the modem interface directly, but it can be abused by data hungry manufacturers and perhaps Google.