Post #1729745

2026-04-26 22:22 UTC

😱 iOS 26.4.2 still leaks the real IP when updating VPN apps. Motivated by Mullvad&#39;s recent blog, we made a website that logs the iPhone IP every second. We started Mullvad VPN, opened the website, then let Mullvad update in the background. See the leaks in action.. 🤯 Link to Mullvad blog post: https://mullvad.net/en/blog/force-all-app-traffic-into-the-tunnel #privacy #iOS #security #infosec

Replies (4)

@mysk@mastodon.social 2026-04-28 15:22

Proton VPN demo: https://mastodon.social/@mysk/116483005277532812

Open ##2369397
@tsturm@famichiki.jp 2026-04-26 23:03

@mysk@mastodon.social I see the problem, but I'm not sure what the real solution would be - IOS is being told by the user to update the VPN software that the user is at that very time using. During the update, the VPN stops working for a moment. 🤷‍♂️ So should iOS shut down all apps if a VPN is being updated? Not sure if all users will appreciate that.

Open ##2369398
@abhiyantrik@mastodon.social 2026-04-27 00:29

@mysk@mastodon.social highly unlikely apple will fix it.

Open ##2369402
@fubaroque@mastodon.social 2026-04-27 07:14

@mysk@mastodon.social You do understand that you are sending all of your internet traffic to somebody you do not know, to protect against websites who each get only part of your traffic seeing your IP-address, do you? 🤔 #vpnshavetheiruses #buttheideathatusingthemallthetimemakesthingssaferiswrong

Open ##2369403