anonymity Archives

AppWizard

September 18, 2025

The Tor Project quietly launches a beta Android VPN – and looks for testers

The Tor Project has launched a VPN app for Android users, currently in beta, aimed at enhancing online privacy and circumventing censorship. The app is available on the Google Play Store and operates under an open-source model. It routes user traffic through the Tor network to conceal real IP addresses and features split tunneling, allowing users to select specific applications for Tor traffic. The app is built on advanced infrastructure using Arti, the Tor Project's next-generation implementation, and includes built-in bridges to disguise Tor traffic. Users are cautioned against using the beta version if they face severe surveillance threats, as it is primarily a testing platform.

AppWizard

September 17, 2025

How Pixel and Android are bringing a new level of trust to your images with C2PA Content Credentials

The Google Pixel 10 phones incorporate C2PA Content Credentials in their camera and Google Photos, marking them as the first to attach these credentials to every photograph taken. The Pixel Camera app has achieved Assurance Level 2, the highest security rating from the C2PA Conformance Program, ensuring a secure environment for digital content. The integration employs a private-by-design strategy for certificate management, preventing traceability back to the creator. On-device trusted time-stamps allow users to trust images even after the certificate expires. The technology is supported by the Google Tensor G5 and Titan M2 security chip, enhancing hardware-backed security features. Content Credentials provide detailed information about the creation and protection of media files, helping users identify AI-generated or altered content. Google is a steering committee member of the Coalition for Content Provenance and Authenticity (C2PA), which aims to establish industry standards for digital content verification. The Pixel 10 categorizes digital content based on verifiable proof of its creation process. Each JPEG photo captured includes Content Credentials, and Google Photos validates these credentials for edited images. The implementation architecture is designed to be secure, verifiable, and usable offline. Google employs a unique certificate management strategy to enhance user privacy, ensuring that each key and certificate is used for only one image. An on-device offline time-stamping authority allows for the generation of trusted time-stamps without requiring internet connectivity.

AppWizard

September 10, 2025

Tor Project Launches Experimental Beta VPN App for Android

The Tor Project has released a VPN app for Android, allowing users to route their internet traffic through the Tor network. This app, labeled as a beta version on the Google Play Store, is intended for feedback and development rather than for critical privacy needs. The app's development started in January 2022 and is open source under the BSD 3-Clause license. It utilizes Arti, a Rust-based implementation of the Tor protocol, and offers features such as IP and location obfuscation, per-app routing, censorship resistance, and support for .onion domains. However, users are cautioned that the app is not production-ready and may leak identifying information, making it unsuitable for sensitive activities. The Tor Project, a nonprofit organization founded in the early 2000s, aims to enhance mobile privacy with this new offering.

AppWizard

September 4, 2025

Popular Android VPN apps found to have security flaws and China links

A report by researchers at the University of Toronto’s Citizen Lab and Arizona State University reveals significant vulnerabilities in several Android VPN applications on the Google Play Store, indicating that many are owned by a Chinese company and mislead consumers about their ownership. The study analyzed the 100 most-downloaded VPNs not based in the U.S. and identified three families of providers with shared technical infrastructures and security flaws. Family A includes eight VPNs linked to providers like Innovative Connecting, which have a hard-coded key for Shadowsocks, allowing eavesdroppers to decrypt communications. Family B consists of six providers, including Global VPN, also using hard-coded passwords for Shadowsocks, raising concerns about anonymity. Family C includes providers like Fast Potato VPN, vulnerable to traffic manipulation attacks. The researchers suggest that the obscured ownership of these VPNs may be a strategy to mitigate reputational risks. They also highlight the responsibility of platforms like Google to vet the security of applications, noting that hosting insecure apps could damage Google's reputation. Users are advised to conduct thorough research and choose reputable VPN services.

AppWizard

September 2, 2025

Citizen Lab Exposes Hidden Ties in 20 Android VPN Apps with 700M Downloads

Researchers from Citizen Lab discovered that over 20 popular Android VPN applications, collectively downloaded 700 million times, are interconnected through undisclosed ownership ties. These applications, marketed as independent privacy solutions, share codebases, servers, and encryption vulnerabilities. The VPN providers are categorized into three families linked to a Russian entity, a Chinese company, and another with ambiguous origins. Apps like Turbo VPN, X-VPN, and UFO VPN share cryptographic keys and backdoors, increasing the risk of man-in-the-middle attacks. Many applications use outdated encryption methods, making it easy for attackers to decrypt user traffic. Some apps route user data through servers in jurisdictions with lax privacy regulations, exposing sensitive information. The investigation revealed identical backend infrastructures among different apps, despite claims of no-log policies, breaching user trust. Hidden trackers within the apps contradict their privacy assurances. Regulators are beginning to respond, with Google removing problematic apps and the EU considering stricter data access regulations. Experts recommend choosing vetted, paid VPN services that undergo independent audits to ensure better security.

AppWizard

August 30, 2025

Google’s Android Lockdown: Are You Really In Control Of Your Phone?

On August 25, Google announced a policy change requiring all app developers to verify their identities before their applications can operate on certified Android devices, extending this requirement to all apps, including side-loaded ones. This policy allows Google to prevent users from running disapproved applications, raising concerns about user freedom and control over their devices. Google cites cybersecurity concerns, claiming that side-loaded apps have led to a significant increase in malware. The company aims to collect personal information from developers to enhance user security, despite criticisms regarding the effectiveness of this approach. Data breaches have become increasingly common, with notable incidents affecting millions, and identity theft costs Americans billions annually. The text discusses the potential of cryptography to enhance trust in digital interactions, highlighting technologies like PGP and concepts like webs of trust as solutions to secure identity verification. Alternative app stores and operating systems focused on user privacy are emerging as potential responses to the challenges posed by Google's policy.

Tech Optimizer

August 30, 2025

Avast Is No Longer Just an Antivirus, Plus Get 60% Off This Labor Day Deal

Avast is offering discounts of up to 60% on its security products, with Avast Premium Security available for .99 for the first year (.67 per month) for a single device, and a 10-device plan for families. Avast Ultimate is priced at .99 for the first year (.50 per month) and includes additional features like a VPN and PC optimization tools. Premium Security protects against viruses, malware, ransomware, and phishing scams, while Avast Ultimate offers enhanced privacy and performance features. Avast is a well-established cybersecurity provider, trusted by millions.

Tech Optimizer

August 29, 2025

Which Norton VPN plan should I choose? Standard, Plus or Ultimate?

Norton VPN offers three plans: Standard, Plus, and Ultimate. - The Standard plan includes AES-256 encryption, a no-logs policy, a kill switch for desktop users, support for up to five simultaneous connections, a double VPN option, and an ad and tracker blocker. - The Plus plan adds Norton’s antivirus software, real-time protection against malware, phishing, ransomware, and viruses, dark web monitoring, AI-powered scam detection, a password manager, and 10GB of secure cloud storage. - The Ultimate plan includes all Plus features, parental controls for monitoring children's online activities, and a Privacy Monitor that alerts users about personal information exposure online. The Standard plan is suitable for basic VPN needs, the Plus plan is ideal for enhanced security, and the Ultimate plan is designed for extensive coverage with additional parental controls and privacy monitoring.

AppWizard

August 29, 2025

Google to make developer verification mandatory on Android

Google will implement mandatory identity verification for all Android app developers, starting in September 2026 in Brazil, Indonesia, Singapore, and Thailand, with early access for registrations beginning this October. This initiative aims to combat the rising threat of malicious applications targeting users' financial data. The requirement will apply to all developers, including those not publishing on the Play Store, to enhance accountability and reduce the distribution of harmful apps. Google is also developing a new Android developer console for those distributing apps outside of the Play Store and has introduced data privacy labels to inform users about data collection practices.