Top all-time · #20334
Armin Šupuk
Personal blog · supuk.ch/posts · on HN as bordercontrolsecuritysystems
Armin Šupuk's personal blog at supuk.ch covers security and systems. Since 2026, 3 different Hacker News readers have linked it 4 times, most often “Android NAT-T keepalive offload bypasses VPN lockdown”. It is still writing: the last post was on 2026-07-29, and you can follow it by feed.
Too few sampled comments (2) to say how often HN recommends it.?
Why HN links it
HN commenters link this blog's papers on an Android NAT-T keepalive offload that bypasses VPN lockdown, and one notes the leak may only affect wifi hardware, not cellular.
Summarised by Claude from a sample of 2 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Research updates and technical write-ups.
Most-linked posts?
- Android NAT-T keepalive offload bypasses VPN lockdown2 people · 3 mentions · first linked 2026-09-11
What Hacker News says?
Regarding cellular connection, the proof of concept presented here only works on wifi: https://github.com/GrapheneOS/os-issue-tracker/issues/8617 I have a hunch this leak is bound to wifi hardware only, for details: https://supuk.ch/papers/android-natt-keepalive-vpn-bypass
Comment linking /papers/android-natt-keepalive-vpn-bypass
on “Android NAT-T keepalive offload bypasses VPN lockdown”Submitted Android NAT-T keepalive offload bypasses VPN lockdown as a story · 213 points
HN discussionThis paper goes into much more detail: https://supuk.ch/papers/android-natt-keepalive-vpn-bypass
Comment linking /papers/android-natt-keepalive-vpn-bypass
on “Android NAT-T keepalive offload bypasses VPN lockdown”Submitted Fire-and-Forget Android VPN Lockdown Bypass: Nat-T Keepalives Every 10 Seconds as a story · 1 points
HN discussion