5 ms·
I’ll try to add more later, but it is believed that multiple times, a bug in some random API has allowed for the “hidden” Apple account to be revealed because t
by floam 23d ago
I’ll try to add more later, but it is believed that multiple times, a bug in some random API has allowed for the “hidden” Apple account to be revealed because they resolve hide my emails to the original internally. Using a separate namespace would be the universal fix.
A mitigation for the cause of https://www.404media.co/apple-hide-my-email-vulnerability-reveals-peoples-real-email-addresses/ https://www.404media.co/apple-hide-my-email-vulnerability-re...
- nvme0n1p1 23d agoThis doesn't follow. The bounce message used to (effectively) say, > abc@icloud.com forwards to real@gmail.com If they switched the new domain and did nothing else, it would say: > abc@privaterelay.appleid.com forwards to real@gmail.com That's no better. Fixing that privacy leak is unrelated to whatever the destination domain is.