Mullvad Tackles iOS VPN Leaks, Users Decide

Mullvad VPN has announced a new feature designed to protect users from data leaks and LocalNet attacks on Apple's iOS. This issue arises because iOS can be vulnerable to cybercriminals mimicking local Wi-Fi networks. To combat this, Mullvad's fix forces all app data through the VPN via an includeAllNetworks configuration.

However, implementing this fix on iOS has presented challenges. Apple's operating system updates have historically caused issues with such configurations, potentially leading to a loop where the VPN app is repeatedly updated, causing the device to brick. Mullvad has now introduced a safeguard, making the includeAllNetworks setting optional while providing a warning mechanism.

Users will receive a notification when an iOS update is available, prompting them to either disable the VPN temporarily or turn off the includeAllNetworks setting. Mullvad stresses that this workaround is not perfect and encourages iOS users to report any update-related device problems to Apple. The company, known for its commitment to privacy and advanced encryption, is rolling out this feature soon.