iCepa: iOS system-wide VPN based Tor client

github.com

27 pointsqalter3 comments

Great tool, but it has the already know* issue/leaking data of all the VPN apps on iOS?

* https://www.macrumors.com/2022/10/13/ios-16-vpns-leak-data-e...

This should definitely be fixed, but this applies only to network connections that are established before the VPN is run. Since you can't connect to .onion services before running the VPN, this is less of an issue for this type. Apple services are the most common ones run before the VPN connection is established, but these will be secured between the device and Apple and difficult to intercept.

Apple still sees your full client IP address history for your hardware-serial-number-linked APNS connections, which lets them log your city-level location via client IP GeoIP lookups.

To avoid this you need external VPN hardware upstream of the iOS device like the Mudi from gl.inet, then never using cellular data on the phone. I carry one with me. Unfortunately it is only LTE and has not been updated for 5G yet.

Reply on news.ycombinator.com