Android VPN Leakage with Secondary User Profiles [252851265]

Duplicate

of 172762810

Bug

Status Update

No update yet.

Description

co...@tommytran.io

created issue #1

Oct 10, 2022 07:39PM

Steps to reproduce:

Create a new user profile (you need to create a secondary user profile for this, as it is not reproducible on your owner profile or a work profile). Do not log into your Google account at this stage.
Sideload a VPN app.
Setup the VPN and the Android VPN killswitch ("Block connections without VPN").
Log into your Google account through Play Services.
Restart the phone. Open the secondary user profile again.
Go to Google's My Devices page. Observe that one of the sessions for your phone has your actual location obtained with GeoIP. In some cases, your actual IP address will be shown there as well.

I am testing this on Android 13, though it has been an issue since at least Android 11. My guess is that applications which launch early when you log into a secondary user profile can bypass the VPN killswitch, though I have not done enough testing to find the root cause of this.

Comments

vi...@google.com <vi...@google.com> #2Oct 11, 2022 11:15PM

Assigned to vi...@google.com.

redacted

co...@tommytran.io <co...@tommytran.io> #3Oct 11, 2022 11:58PM

Can't open up b

vi...@google.com <vi...@google.com> #4Oct 12, 2022 02:15PM

Status: New

Apologies for delay in addressing this, it ended up in a big list of redesign-related issues.

The search widget isn't actually part of the site we control (you'll find it's the same on several Google owned properties), I agree it's not great so I've raised it with the internal team.

I'll close this issue as we can't address it ourselves, but it's helpful to show this is being noticed externally.

vi...@google.com <vi...@google.com> Oct 12, 2022 10:14PM

Status: New

gc...@google.com <gc...@google.com> #5Oct 25, 2022 01:49PM

Status: Duplicate of

172762810

Please visit the Android community forum where Product Experts may be able to assist you further:

https://support.google.com/android/community. We are marking this public bug status as "Duplicate" as it will be duplicative of the feedback you provide via the suggested channel. We will no longer provide responses or updates on this bug, but rather will investigate further based on the feedback you submit.

Issue 252851265