Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

An Ode to Apple’s Hide My Email

empty.coffee

Post reply on HN
Print view View original

141–150 of 298 posts

Re: An Ode to Apple’s Hide My Email

#141

Post by sewsuiuldot »

m-p-3 wrote: post #133
Kwpolska wrote: post #45

Earlier quoted context omitted.

SMS is available as a fallback 2FA method for Apple ID.

I only wish they'd support standard TOTP as well, like everyone else.

I wish they'd let users decide what they want to use as additional factors. I would like to ban phone calls, emails, SMS, and TOTP entirely from all my accounts, especially those that hold credentials for other services, and use only WebAuthn.

I'd love to use Apple's keychain for credentials for convenience but it can quickly become the weakest link, when it should be the strongest.

Re: An Ode to Apple’s Hide My Email

#142

Post by skeletonjelly »

Vinnl wrote: post #91
up6w6 wrote: post #49

The most popular open-source alternatives are SimpleLogin[1] and AnonAddy[2]. The former one was just acquired by ProtonMail[3]. [1] https://github.com/simple-login/app/ [2] https://github.com/anonaddy/anonaddy [3] https://protonmail.com/blog/proton-and-simplelogin-join-forc...

Mozilla also has Firefox Relay: https://relay.firefox.com/ (Disclosure: I'm on the Relay team.)

I love Relay! Thank you!

Re: An Ode to Apple’s Hide My Email

#143

Post by sircastor »

sneak wrote: post #98
cromka wrote: post #61

Earlier quoted context omitted.

Surely some attorneys would be interested in a class-action.

According to https://www.xfinity.com/Corporate/Customers/Policies/Subscri... you have to give up your rights to a class action and a jury trial to get Comcast service. Additionally, they spend a ton of money lobbying and otherwise unfairly impeding competition, so in many places in the US, they are the only option, so it's give up your civil rights to lawsuits, or stay offline (or pay a wireless carrier who does the…

I’m no lawyer, but I wonder if this is more of a “go away” clause and if it would survive a real courtroom. Your lawyer would undoubtedly say “don’t waste your time and money”, but I question how many of our rights we can really, actually give up in a contract.

Re: An Ode to Apple’s Hide My Email

#145

Post by heinternets »

Gigachad wrote: post #129
plsbenice34 wrote: post #121

Earlier quoted context omitted.

Fastmail seems to be based in Australia unfortunately, so it is not secure

Email is not secure full stop. Don't do any kind of sensitive conversation over it regardless of where it is hosted.

Email using most large providers is transmitted using TLS

Re: An Ode to Apple’s Hide My Email

#146

Post by withinboredom »

plsbenice34 wrote: post #121
rootusrootus wrote: post #68

Earlier quoted context omitted.

I do a simplified version of this. I just use a catchall account with Fastmail and then pick email addresses in the domain randomly. If someone abuses the address, I block it. I specifically do not use addresses that make it obvious what my strategy is. I end up just using a name and number that would look right at home on gmail. I'm also not trying to stop tracking, so much as I'm trying to have my own semi-permanen…

Fastmail seems to be based in Australia unfortunately, so it is not secure

There is nothing secure about email. It's less secure than Telnet.

You can email anyone on the internet as anyone and it will be delivered with NO validation. Clients may/may not validate any DKIM signature and the may/may not validate that it actually came from the domain. It's literally the easiest thing on earth to spoof.

Email is sent over cleartext, it is not encrypted. Anyone can read email if they can inspect packets.

Re: An Ode to Apple’s Hide My Email

#147

Post by PascLeRasc »

beeboop wrote: post #140
rootusrootus wrote: post #68

Earlier quoted context omitted.

I do a simplified version of this. I just use a catchall account with Fastmail and then pick email addresses in the domain randomly. If someone abuses the address, I block it. I specifically do not use addresses that make it obvious what my strategy is. I end up just using a name and number that would look right at home on gmail. I'm also not trying to stop tracking, so much as I'm trying to have my own semi-permanen…

I've been happily using fastmail for years and I think I'm going to be forced to stop. My outbound emails are constantly getting caught in spam and it recently cost me a job offer.

I really really want to like Fastmail too, but it’s also cost me a job interview when the RSVP didn’t go through.

Re: An Ode to Apple’s Hide My Email

#148

Post by PascLeRasc »

binwiederhier wrote: post #39

I have a unique email address for every single service that I sign up for, similar to this, though selfhosted. I've been doing this for years and it works wonderfully. If someone misuses my email address, or gets annoying, I can simply turn off the address. Bam! It's the easiest Postfix config in the universe, essentially just: virtual_alias_domains = domain1.com domain2.com virtual_alias_maps = hash:/etc/postfix/vir…

Is Phil a pseudonym first name as well? That’s a smart new technique if so.

Re: An Ode to Apple’s Hide My Email

#149

Post by withinboredom »

PascLeRasc wrote: post #147
beeboop wrote: post #140

Earlier quoted context omitted.

I've been happily using fastmail for years and I think I'm going to be forced to stop. My outbound emails are constantly getting caught in spam and it recently cost me a job offer.

I really really want to like Fastmail too, but it’s also cost me a job interview when the RSVP didn’t go through.

Are your domains set up correctly? That sounds suspiciously like something isn't set up correctly and their client's thought it was spam.

Re: An Ode to Apple’s Hide My Email

#150

Post by PascLeRasc »

sewsuiuldot wrote: post #141
m-p-3 wrote: post #133

Earlier quoted context omitted.

I only wish they'd support standard TOTP as well, like everyone else.

I wish they'd let users decide what they want to use as additional factors. I would like to ban phone calls, emails, SMS, and TOTP entirely from all my accounts, especially those that hold credentials for other services, and use only WebAuthn. I'd love to use Apple's keychain for credentials for convenience but it can quickly become the weakest link, when it should be the strongest.

What’s wrong with TOTP? Isn’t it exactly as secure as WebAuthN?
Post reply on HN