Live data from Hacker News

Apple is about to make Hide My Email useless

arseniyshestakov.com

291–300 of 369 posts

Re: Apple is about to make Hide My Email useless

#291
post #23

Shameless plug - I created a chrome extension that allows to create unique email addresses that forward to your real inbox. It uses Cloudflare email routing, simplifies creating/labeling of new addresses and keeping track of them. Always 1 click away. The addresses are pre-allocated and recycled when deleted so creating a new one is faster that with Apple's hide my mail. https://github.com/webmonch/hide-my-mail-cloud…

With cloudflare you can also just setup catch-all and be done wirh it. I personally doing catch-all already, but problem is that using your own domain for website registration basically gives everyone unique id to eaaily connect all the information that ever been leaked for your accounts and something always gets leaked. Not a very good idea for privacy.

Spammers aren't going to make that connection. Your custom domain will be like any other corporate entity as far as their scripts are concerned.

Re: Apple is about to make Hide My Email useless

#293

Earlier quoted context omitted.

I'm curious what you think the difference is between "a paying iCloud user" and "an anonymous rando off the internet." How many Apple gift cards do you reckon get sent to fraudsters every day? Decades worth of iCloud+ surely. I'm running a business where I need to know who you are, because my platform can be used defraud other people. If you're trying to hide who you are from our very first interaction, that's a mass…

> If you're trying to hide who you are from our very first interaction, that's a massive red flag. If you're trying to collect personal information that's none of your business from the very first interaction, that's a massive red flag. Like how many data leaks and customer data exposures is it going to take to understand that the data I'm giving you is a liability for me? How much spam am I expected to put up with b…

You not bending over and opening your wallet is, frankly, a red flag. /s

Re: Apple is about to make Hide My Email useless

#294
post #287

Hide My Email is fundamentally broken in two major ways: 1. Services those emails are used with cannot unilaterally send email to them. They must pre-register how they will send email to them, which breaks services with third-party relationships such as online retail with payment processors or shipping companies. Users don't like not receiving shipping notifications, and users don't like not seeing invoices or at wor…

If you have iCloud Keychain enabled you don't have to "remember" a sign-in at all. Flip a toggle, say "Yes" when Safari offers to remember the new password you generated for the fake email you generated in a drop down menu, and you're a FaceID/TouchID away from auth. My 80 year old uncle can manage this. I have been a happy Hide My Email user for years. This is simply not a problem, and even for normies it's no more…

It’s a problem if you use non-Apple devices as well as Apple devices.

Re: Apple is about to make Hide My Email useless

#295
post #28

> If you use iCloud+ and Hide My Email, there is still time to generate more aliases on @icloud.com as the change has not yet landed and the rate limit for creating aliases is at least 30 per hour. Part of the reason to use Hide My Email was that it made keeping myself private hassle-free. Making a system to pre-generate values and then catalog them for later use is quite the hassle.

Yep, but I still generated some for myself just in case and fellow hackers can do the same if they want to. iCloud+ was the best $1 / month custom domain email and email alias service with 100GB of E2EE cloud drive. Obviously it will be sad to see it enshittified for seemingly no reason.

It's E2EE (only if you turn it on, which you can't do in the UK) but it saves (non-encrypted) the hashes of the plaintext of the files to Apple (presumably for dedup).

This allows Apple to see which sets of users share unique Winnie the Pooh memes. They know who had them first, who they sent them to, and when.

The E2EE is useless with such unencrypted metadata leaks.

https://www.youtube.com/watch?v=tL8_caB35Pg

Re: Apple is about to make Hide My Email useless

#296
post #198
post #147

Earlier quoted context omitted.

But what happen if you stop paying $1 / month?

If you cancel iCloud+, all the aliases remain active. As parent said, you just can't create more of them.

And you'll still be able to receive email send to these aliases? Even on a free-tier iCloud account?

Re: Apple is about to make Hide My Email useless

#298
post #24

Earlier quoted context omitted.

Yes but not always applicable unfortunately… e.g. the other day I was in Italy, I needed to park on the publicly available parking which was paid to the municipality. No other parking available anywhere near in 30 mins walking distance. (paid or free) I had to download a 3rd party app that asked me to register. This app isn’t by the Italian government, it’s affiliated though. So in that situation, I want nothing to d…

tutanota.com protonmail.com create a burner for when ‘not always applicable unfortunately’

Proton does require phone number now. It's not anaonymous email provider anymore.

Re: Apple is about to make Hide My Email useless

#299

Earlier quoted context omitted.

tutanota.com protonmail.com create a burner for when ‘not always applicable unfortunately’

Proton does require phone number now. It's not anaonymous email provider anymore.

didn't know that, but the point of the burner is to trap junk email in an account you don't care to read

Re: Apple is about to make Hide My Email useless

#300
post #295
post #28

Earlier quoted context omitted.

Yep, but I still generated some for myself just in case and fellow hackers can do the same if they want to. iCloud+ was the best $1 / month custom domain email and email alias service with 100GB of E2EE cloud drive. Obviously it will be sad to see it enshittified for seemingly no reason.

It's E2EE (only if you turn it on, which you can't do in the UK) but it saves (non-encrypted) the hashes of the plaintext of the files to Apple (presumably for dedup). This allows Apple to see which sets of users share unique Winnie the Pooh memes. They know who had them first, who they sent them to, and when. The E2EE is useless with such unencrypted metadata leaks. https://www.youtube.com/watch?v=tL8_caB35Pg

> only if you turn it on, which you can't do in the UK

Fortunately changing Apple account country is as easy as buying US gift card on Amazon and unlike Google they dont mess with account location.

As about encryption I totally agree its pretty meh, but again it's not why I paid my $1.

Post reply on HN