Apple's Hide My Email vulnerability reportedly exposes users' real email addresses
2026-07-01 16:29 UTC
A newly disclosed privacy vulnerability in Apple’s Hide My Email feature can reportedly allow an attacker to uncover the real email address behind a generated alias. According to the researcher who found the bug, it was responsibly disclosed to Apple more than a year ago but remains unpatched, and independent testing has verified the issue.
Replies (2)
-
@kayazere@feddit.nl 2026-07-02 06:47
I use DuckDuckGo’s email hiding service. I have had sites reject signing up with a @duck.com email address. So services will definitely move to block Apple’s new domain only for aliased email addresses.
-
@Anivia@feddit.org 2026-07-02 07:13
Just get a cheap domain and configure a catch-all redirect. Obviously not a solution viable for normies, but should be easy for many Lemmy users. Almost every website will accept a custom email domain