Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
1–10 of 105 posts
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#2We put up a timeline of the disclosure here: https://easyoptouts.com/guides/apple-hide-my-email-is-leakin...
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#3archive link: https://archive.vn/mCbBw
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#4We put up a timeline of the disclosure here: https://easyoptouts.com/guides/apple-hide-my-email-is-leakin...
Thanks! We'll make that the main URL and put the submitted link in the toptext.
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#5That's disappointing, both that the vulnerability exists in the first place, and that Apple takes over a year to not even fix it.
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#6[deleted]
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#7[dead]
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#8Is it based on mail undeliverable errors? Or attempts to login using IMAP or SMTP with it? Or is it exposed during the SMTP protocol?
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#9Is it based on mail undeliverable errors? Or attempts to login using IMAP or SMTP with it? Or is it exposed during the SMTP protocol?
As someone who doesn't rely on this feature, I'd love to know now as well, but perhaps the etiquette in public would be to align ourselves with:
> we will not discuss or disclose the details of the exploits until they're fixed.
But if there's a public forum where the cat's already out of the bag, then game on. Perhaps this:
https://www.reddit.com/r/apple/comments/1ukilw1/apple_hide_m...
...which makes it seem like perhaps the attack surface is limited to scenarios involving a Yahoo/Sonic address (assuming that Apple only sends X-Sonic-* headers when talking to those providers that want to see it), which might be a small percentage of users.
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#10I think you should formally write to Apple and give notice of 30 days to contact you or you will reveal it.
Send it to the USA media and regulator too