Security researchers at Ben Gurion University claim to have found a flaw in Android’s VPN implementation that leaves what should be protected communications completely exposed.