Is Your VPN Leaking? 

Your data are belong to us

Call your data is belong to us what is it all your bases belong to us or something

It's all marketing lies anyway. The only reason to protect your traffic with encryption, is to keep people like ISP's and the government from snooping on what you are doing. Random web site on the Internet isn't doing that, they track you through cookies and other browser related stuff already. When you visit the bank or do online shopping those connections are already encrypted by default, and if your system is already compromised to the point someone can steal that info, adding a VPN layer will likely do very little to help you.

Mullvad is different.

​@@d_techterminal nothing is different from death threats and bank account freeze threats from "them".

So how do we break them into medium tech

@@MrGohan8000 Adblockers mainly. And remember - no subscribtions

how about small tech

Apparently nothing was learned from Microsoft malfeasance in the 80's and 90's and we let these scumbags run wild in the 21st century.

I'm right there with ya.

i always knew the govt could see my bs. but i only ever use a vpn for torrenting anyways. its used as a way to circumvent my ISP no no's

It wont

@@briani7858 Do not worry citizen. Government isn't stupid enough to sue you for copyright infringement when you are using VPN. That would reveal their built-in spyware on browsers, operating system, modem and VPN. Public would not like that.

​@briani7858 I use Tor for the mundane browsing I do anyway, which amuses me more than anything else.

It is just a matter of time until someone mentions Mullvad and "how they were raided and the authorities found nothing" or "they run everything on RAM". Yeah... Sure... Maybe... Oh, dude actually mentions Mullvad on the video? I guess my job is done.

The Mullvad group are real patriots to privacy.

​@@phrogtesem9410Too bad hey recently stopped port forwarding, so into the rubbish it goes like every single VPN ever.

😏

That also might be because TempleOS has a community much smaller than the Linux community and thus there could be less people constantly pentesting it.

it also doesnt have internet, so theres that

imagine letting Poettering control your pid1 lmao

more like giving a trusted neighbor the key

​@@dedsrsnglBut the only reason you trust the neighbour is because they have a sign in their yard that says "You can trust me!" and you've never really went to their house or talked to them.

@@VivekYadav-ds8oz That, and you’ve seen them do good things for other neighbors.

As opposed to your ISP? When using a VPN you can at least hope for safety. Without it you have guarantee of being spied on.

normies will never understand why ARPA is a largest zone... in-addr.arpa

Yeah only real sigmas will get this one

@@TheCommentor- create your own leaking VPN today and become rich like us! Grindset on top of em!

@@TheCommentor- create your own leaking VPN today and become rich like us!

@@TheCommentor- create your own leaking VPN today and become rich like us!!!

The most complicated thing I've done is getting a custom title bar fully functional in a WPF application (... not really but holy hell that's dumb) but aren't C libraries for functions like this specific to the environment and relying on various API calls anyway? It should behave the same for unix-like os but Android has its own library. I have no idea if only Android is affected but I don't think the 'same' function automatically implies every operating system has the same vulnerability.

@@JJFX- Yes, I think Android has its own getaddrinfo implementation, but I don't know if it calls into Java, or just the normal Linux APIs. Probably the latter. The API is the same, the implementation is probably not. I didn't want to imply that all OSes have the vulnerability.

@@szaszm_ Yeah as I understand it on Android this isn't calling Java but its own libc Bionic library. Looking at it briefly I'm guessing part of the issue is how the internal dns resolver functions and the system-wide caching of DNS lookups combined with Google hard-coding their own DNS servers as a fallback for apps like Chrome. This appears to be quite the rabbit hole that's over my head and has been going on a long time even though they did refactor the resolver code since Android 10. It's hard to imagine Google didn't know there was potential for issues like this but who knows.... As many have stated, assuming standard Android would be secure enough for such privacy concerns is already a bad start.

@@JJFX- I think the issue is not with getaddrinfo itself, but rather the VPN configuration infrastructure having some invalid transient state in which 1-2 packets can leak out, but it's not enough to open a full TCP connection, only for a DNS lookup.

@@szaszm_ It sure sounds like a race condition bug when reconnecting but I don't think the built-in VPN service has this problem. It may be an OS bug related to support for VPN apps or just an app bug but I'm suspicious at least part of this ties back to the internal DNS resolver, changes made to it or compatibility code. There's also a problem with packets leaking on local networks with VPN apps that would align with the added support for mDNS .local resolution. Perhaps Mulvad's workaround DNS server is arguably their responsibility anyway but even if the connection issue can be patched at the app level it still seems like something that shouldn't be happening.

It's not a wireguard thing, it's an Android issue with any vpn protocol

@@diasdeinvierno8041 Ah okay thanks. Everyone and where kept saying Wireguard so I was wondering if it was that specifically or not. Even his test here used WG.

@@diasdeinvierno8041 Okay thanks, wasn't sure since everywhere is saying WG and even in this video it was used as an example.

​@@diasdeinvierno8041I'm confused, wasn't the issue already found a few months ago? Or this time it isn't constrained to android?

DoH is very similar to a VPN. If you setup DoH to someone like Cloudflare, then sure all your DNS lookups are protected from everyone in between you and Cloudflare. But now Cloudflare knows 100% of where you go online. I would take a different approach. I keep the default DNS servers operating over plaintext. This way I still get to pick where my DNS queries go, but now my data is mingled in with the rest of the world's, and identifying me is a little more difficult. If the feds decided that everyone who is privacy focused (or whatever) is the new "threat", the first places they're going to subpoena will be where those types of users congregate - like Cloudflare DoH.

@@davidyoder5890 I use quad9 for doh and they are a swiss company so they wont necessarily give data to feds. I'd never give any data to cloudflare or god forbid google

from chatgpt so take it with a grain of salt, "it might not directly address the root cause of the DNS leakage if the underlying function (like getaddrinfo) inherently bypasses the VPN tunnel for DNS requests. A more effective solution would be ensuring that the applications and browser you use do not rely on the problematic API. Changing DNS settings might not fully address the leakage problem without an OS-level patch or using apps that avoid this specific API. Therefore, relying solely on a backup DNS might not resolve the issue effectively.

@@christeanaz bro

Google puts their tracking into Google Play Services because it's proprietary. Android is open source and you can install ROMs without Play Services

That's why you don't rely on that and bind your VPN to the torrent client

You know, for when you want to buy them a special gift. Obviously.

some video huh? it's not like this is iOS where the browser has to use webkit.

Yes... They are.... All androids are vulnerable.

@@Moe_Posting_Chad Isn't Firefox using DNS over HTTPS ?

yeah yeah

robert robert

Wow, that's awesome! Can I see it? :D

I wanna see the Fumo as well

@@ruchevsk3165 Yeah I tried to add it to my bio hopefully it shows

@@TheFingerMove its in my bio

Android implements their own made **debloated for mobile** c libraries (bionic) does that mean other devices using gnu standard c libs are immune to these issues?

That's not an issue with security. They even know all the Tor exit nodes

"just have the AI do all the work" how mother fucker?

Perfect Privacy is a bit expensive than mullvad but it has socks5 support built in

Ayo bro

Yeah, they had to as p3do's were using it and police kept turning up at their office.

@@Crazen2 Sounds like an accusation. I hate pedos more than most but its such a bullshit cop out to always go for the boogeyman.

There's DNS over https in Firefox, which avoids all DNS resolution provided by standard library. Also, there are OpenVPN clients on Android?

now u just have to install GrapheneOS and u have one of the best Pixels