Live data from Hacker News

Apple 'Hide My Email' vulnerability reveals peoples' real email addresses

easyoptouts.com

21–30 of 105 posts

Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses

#21

I use this feature often and I'm very disappointed. Depending on the exploit, I'm awaiting to join a class action lawsuit. I'm constantly humiliated by believing Big Tech's security promises and I've had enough. I suspect that this is yet another intentional backdoor. When these security systems fail, people like me experience violence.

[dead]

Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses

#22
post #10

I think you should formally write to Apple and give notice of 30 days to contact you or you will reveal it. Send it to the USA media and regulator too

I've been going back and forth with Apple about it for a year. We don't feel comfortable releasing the exploit details even though they're being slow. We think enough people rely on Hide My Email for personal safety that it would be irresponsible.

> We think enough people rely on Hide My Email for personal safety that it would be irresponsible.

I am guessing you haven't tried that excuse on the users your witholding is leaving exposed.

Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses

#23

That timeline was exactly my experience with Apple here - https://www.grepular.com/Apples_Protect_Mail_Activity_Doesnt... They don't seem to know or care what is going on with their own email systems.

Has anyone seen Protect Mail Activity get re-enabled after you've disabled it? I wrote about that a few days ago: https://lapcatsoftware.com/articles/2026/6/6.html

Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses

#24
post #5

That's disappointing, both that the vulnerability exists in the first place, and that Apple takes over a year to not even fix it.

Not as disappointing as the discover's decision to leave affected users ignorant and hence at risk.

Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses

#27
post #22

Earlier quoted context omitted.

I've been going back and forth with Apple about it for a year. We don't feel comfortable releasing the exploit details even though they're being slow. We think enough people rely on Hide My Email for personal safety that it would be irresponsible.

> We think enough people rely on Hide My Email for personal safety that it would be irresponsible. I am guessing you haven't tried that excuse on the users your witholding is leaving exposed.

We're hoping that by notifying people that there's a vulnerability, people can stop using Hide My Email if it matters to them. I don't think that disclosing the exploit method will get Apple to fix it faster at this point.

Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses

#30

That timeline was exactly my experience with Apple here - https://www.grepular.com/Apples_Protect_Mail_Activity_Doesnt... They don't seem to know or care what is going on with their own email systems.

Fetching any email content is always worse than blocking it, because the typical threshold for spam is "is this inbox monitored". If that is true, then blast it with spam. And fetching anything ever proves that the inbox is monitored.
Post reply on HN