Armin Šupukhttps://supuk.ch/Security-focused software engineering, independent research, and software by Armin Šupuk.Hugoen-USWed, 29 Jul 2026 12:00:00 +0000Fire-and-Forget Android VPN Lockdown Bypass: NAT-T Keepalives Every 10 Secondshttps://supuk.ch/posts/android-natt-keepalive-vpn-bypassWed, 29 Jul 2026 12:00:00 +0000https://supuk.ch/posts/android-natt-keepalive-vpn-bypassAbstract network tunnel boundary with a small red signal escaping below the protected path.<img src="https://supuk.ch/images/headers/android-natt-keepalive-post.jpg" alt="Abstract network tunnel boundary with a small red signal escaping below the protected path." width="1600" height="900"><p>Cross-OEM Android 16 runtime evidence establishes NAT-T keepalive VPN-lockdown exposure across most Android 12&#43; devices.</p>