Live data from Hacker News

Apple is about to make Hide My Email useless

arseniyshestakov.com

241–250 of 369 posts

Re: Apple is about to make Hide My Email useless

#241

Earlier quoted context omitted.

COUGHredditCOUGH

I think Reddit falls under this category. > If your website will block me out because I used a privacy friendly email, I want nothing to do with your website.

Reddit doesn't even require an email address to make an account. You can just leave the email field blank.

Re: Apple is about to make Hide My Email useless

#242

Earlier quoted context omitted.

Just a regular old username + password, kind of like HN allows?

I feel like email overtook usernames because it was more likely to be unique/memorable. I hate when websites ask me to remember a username (even though I'm using a password manager so I should really just calm down.)

Usernames are no less likely to be unique and memorable than an email. You presumably chose something memorable for your email, so just enter that without the @foo.com bit. There, memorable and probably unique.

Re: Apple is about to make Hide My Email useless

#243

If your website will block me out because I used a privacy friendly email, I want nothing to do with your website.

[flagged]

> fake email

Its a real address that I can use to monitor your behavior, since businesses send so much damn spam.

Been using them for 25 years, not gonna stop any time soon.

Re: Apple is about to make Hide My Email useless

#244

Earlier quoted context omitted.

Completely agree - have you encountered this before? The Gmail plus sign alias trick has been widely known for a long time and, to my knowledge, still works well today. It would be easy enough for websites to either block + in gmail addresses or instead grab the true email.

Spammers know to just cut out the +whatever. It's a simple regex to keep those from even getting into a database.

The + has no special meaning in the standards, and thus removing it will just result in invalid addresses in many cases…

Re: Apple is about to make Hide My Email useless

#245

Earlier quoted context omitted.

You can use Hide My Email independently from Sign in with Apple.

I know that, but in doing so you prevent yourself from ever using Sign in with Apple

I think you as the user can use the aliases without Sign in with Apple though, right?

But otherwise, you're right, any website that wants to accept Sign in with Apple will almost certainly be agreeing to Apple's TOS for Sign in with Apple I presume will stop you from blocking this service.

Re: Apple is about to make Hide My Email useless

#246
post #53

For me personally, Hide My Email is binding me to the Apple ecosystem more than iMessage (but I'm European).

This is one reason I never used it, but another reason is that I never felt that the privacy benefits were worth the hassle of randomized emails.

If I need to make an account with someone I don't trust enough to hand my email over to, usually the right answer is to just not create an account with them.

I have also tried things like having email aliases but what ends up happening is now I have more email accounts aliases to maintain/think about. It's annoying.

I don't personally find the prospect of "receiving spam email" or "having my email account leaked in a hack" to be particularly threatening. Spam just goes to the spam box, it's usually not my problem.

And besides, my real email can get exposed by my own legitimate companies that really should have my real email getting hacked. See also: EquiFax.

Re: Apple is about to make Hide My Email useless

#247

Earlier quoted context omitted.

It’s unsettling, you’re either an iCloud customer for life or hundreds of logins could break.

Nothing breaks when you switch. You just can't create more private icloud addresses. I recently switched back to Android and can still use my old icloud logins.

Thanks, undocumented? Meanwhile reddit’s answer:

> In what universe if you stop paying for a service you can still access the resources of that service? Basic common knowledge.

But on MacRumors:

  “Update: So I let my iCloud+ account expire.

  When this happens you lose access to managing ALL your Hide My Email emails. Yet you can't even see what the Hide My Email addresses are any longer.

  But, people can still send emails to those emails. However, you apparently cannot reply to the emails with the Hide My Email address.

  This is troubling...”
https://forums.macrumors.com/threads/what-happens-to-hide-my...

Re: Apple is about to make Hide My Email useless

#248

Earlier quoted context omitted.

Completely agree - have you encountered this before? The Gmail plus sign alias trick has been widely known for a long time and, to my knowledge, still works well today. It would be easy enough for websites to either block + in gmail addresses or instead grab the true email.

Some sites that block "+" in email addresses are actually just doing it out of incompetence. My credit union, for example, will actually accept an address with a "+" in it, but nothing will work because some broken bit of web 1.0 plumbing along the way converted it to a space (it shows up that way on my profile page). I wouldn't be surprised to see "&nbsp" on my printed bank statements.

Oh yes, so many websites are incompetent like that.

And of course after registering with foo+bar@example.com they will happily send invoices to bar@example.com

Re: Apple is about to make Hide My Email useless

#249
post #14

Earlier quoted context omitted.

I guess their thought process is, both alias and non-alias accounts use @icloud.com You were always able to reserve a normal icloud email address just like you would a GMail account, so banning all icloud email addresses would be banning non-alias Apple customers That being said, I'm not convinced anyone who wanted to ban aliases couldn't have already. The alias emails look weird enough I'm guessing you could ban the…

> The alias emails look weird enough I'm guessing you could ban them with few false positives. While this is true not all of them been weird. Some can be just word + number + word without dots or underscores. Also blanket banning whole domains is just much easier and already done for temporary emails. No false positives.

The point of the article is previously banning Apple's temp domain would create many false positives (all the normal Apple registered emails that chose @icloud.com during setup)

Re: Apple is about to make Hide My Email useless

#250

Earlier quoted context omitted.

Within the space of 2 weeks I had both Etsy and Mapbox block signups with Proton Mail aliases. The practice is rapidly becoming more common.

Blocking signups from proton.me is not the same thing as only allowing signups from the big mail providers.

Great, so all I need to do is to authoritatively check each plausible combination of domains that _might_ work and rule each of them out before I can make my claim, according to you?

What a load of pedantry.

Post reply on HN