I use this feature often and I'm very disappointed. Depending on the exploit, I'm awaiting to join a class action lawsuit. I'm constantly humiliated by believing Big Tech's security promises and I've had enough. I suspect that this is yet another intentional backdoor. When these security systems fail, people like me experience violence.
Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
21–30 of 105 posts
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#22I think you should formally write to Apple and give notice of 30 days to contact you or you will reveal it. Send it to the USA media and regulator too
I've been going back and forth with Apple about it for a year. We don't feel comfortable releasing the exploit details even though they're being slow. We think enough people rely on Hide My Email for personal safety that it would be irresponsible.
I am guessing you haven't tried that excuse on the users your witholding is leaving exposed.
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#23That timeline was exactly my experience with Apple here - https://www.grepular.com/Apples_Protect_Mail_Activity_Doesnt... They don't seem to know or care what is going on with their own email systems.
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#24That's disappointing, both that the vulnerability exists in the first place, and that Apple takes over a year to not even fix it.
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#25Is it based on mail undeliverable errors? Or attempts to login using IMAP or SMTP with it? Or is it exposed during the SMTP protocol?
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#26Is it based on mail undeliverable errors? Or attempts to login using IMAP or SMTP with it? Or is it exposed during the SMTP protocol?
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#27Earlier quoted context omitted.
I've been going back and forth with Apple about it for a year. We don't feel comfortable releasing the exploit details even though they're being slow. We think enough people rely on Hide My Email for personal safety that it would be irresponsible.
> We think enough people rely on Hide My Email for personal safety that it would be irresponsible. I am guessing you haven't tried that excuse on the users your witholding is leaving exposed.
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#28Shameless plug https://github.com/webmonch/hide-my-mail-cloudflare
Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#29Re: Apple 'Hide My Email' vulnerability reveals peoples' real email addresses
#30That timeline was exactly my experience with Apple here - https://www.grepular.com/Apples_Protect_Mail_Activity_Doesnt... They don't seem to know or care what is going on with their own email systems.