😄 Not quite private

A researcher found that even Android’s strict “Block connections without VPN” setting may still leak a user’s real IP address.

Any app with basic internet access can use a standard system mechanism to send keepalive packets outside the VPN tunnel.

How the flaw works — and which devices may be affected:

↖️ https://durovscode.com/android-vpn-bypass-real-ip-address-leak