Brandon Fletcher
A security flaw potentially links real email addresses with anonymous ones.
The Hide My Email feature may not provide complete privacy for your personal data. This functionality, available to iCloud+ subscribers, allows users to generate a unique email address instead of exposing their actual contact information. It serves as a method to avoid unwanted spam and data trackers, while also safeguarding personal details against possible future data breaches. a report from 404 Media reveals a security vulnerability that permits hackers to link users’ legitimate email addresses with the anonymous ones assigned by Apple.
We have reached out to Apple for their response and will update this article as soon as we receive a reply.
The vulnerability was identified by the team at EasyOptOuts. According to CEO Tyler Murphy, they informed Apple about the issue and provided replication details a year prior. Conversations were held via email, and Apple allegedly indicated at various times that they were investigating the problem or had a solution in progress. Nevertheless, Murphy and 404 journalist Joseph Cox successfully exploited the vulnerability for this report. Specific details about the exploit remain undisclosed to protect Apple users from potential risks.
Murphy expressed concerns by stating, “We don’t understand why this hasn’t been resolved, but we are no longer comfortable waiting. Users of Hide My Email should be aware that attackers might be able to uncover their concealed email addresses.” He further noted, “While we don’t have a comprehensive understanding of the issue, our limited testing with volunteers showed that 100 percent of Hide My Email addresses were vulnerable.”
Daniel Mercer
Ethan Carter
