Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple is about to make Hide My Email useless

arseniyshestakov.com

Post reply on HN
Print view View original

361–369 of 369 posts

Re: Apple is about to make Hide My Email useless

#361

Post by lern_too_spel »

pseudalopex wrote: post #218
jonotime wrote: post #153

Earlier quoted context omitted.

I have run this for years with very little problems. And I can honestly say that have not found anyone writing to addresses I did not give them at their domain. Simple as this is, it is way to niche for companies to figure it out and exploit it. And if that really was a problem I'd just create a new subdomain. If you are worried about privacy, get a domain just for this. Use domain privacy and dont host other things…

> I have run this for years with very little problems. And I can honestly say that have not found anyone writing to addresses I did not give them at their domain. Simple as this is, it is way to niche for companies to figure it out and exploit it. Someone I knew did this. Spammers used lists of common names.

They'll do this to the sld, but if you only set up mail routing for a subdomain, you're fine in my experience.

Re: Apple is about to make Hide My Email useless

#362

Post by wxw »

darknoon wrote: post #76
wxw wrote: post #13

I pay for Fastmail just for masked email and its integration with 1Password.

I frequently run into scenarios where it won't let me generate the email within 1password on a website, and I have to go to Fastmail and then manually do it. Is this something you have bene able to work around?

Unfortunately not really.

I scripted something to hit Fastmail’s API + 1Password API to generate emails and make accounts in these scenarios. But it’s still annoying.

Re: Apple is about to make Hide My Email useless

#363

Post by akimbostrawman »

pbgcp2026 wrote: post #298
rTX5CMRXIfFG wrote: post #269

Earlier quoted context omitted.

tutanota.com protonmail.com create a burner for when ‘not always applicable unfortunately’

Proton does require phone number now. It's not anaonymous email provider anymore.

They do have sign up with only a captcha but it seems to be ip reputation depended if you get them.

https://proton.me/support/human-verification

Re: Apple is about to make Hide My Email useless

#364

Post by trollbridge »

JoblessWonder wrote: post #161
trollbridge wrote: post #81

Earlier quoted context omitted.

It’s up to the app architect to make a way to make this work, and to stop using emails as anything other than a UUID type of token

So I guess the solution is just to begin to allow accounts to always register multiple emails? Although I guess the issue of multiple accounts is still going to exist if the users don't know the initial (private) email that they signed up with though unless there is a different unique ID that everyone will be able to remember. I'm curious (and not trolling by asking) what a solution might be since email has been used…

Use a platform like Authentik where the immutable characteristic of your user is a UUID.

Allow them to sign in with OpenID, etc., to put one (or more) e-mail addresses on (obviously those e-mails end up unique to that account), in my case, I always force-link e-mail addresses from Google's OpenID (mostly to prevent people accidentally creating multiple accounts). Allow phone numbers too!

Also allow usernames (and just automatically generate them); the user can change their username if they really want to.

Every other dependent system should only be using the UUID. If you have some dumb legacy system that insists on e-mails for a primary key, have an internal only domain and hang the UUID off of that.

There is a specific use case when two people want to have their own accounts but share an e-mail or a phone number for logging in. In that case you want to just let the user pick a "primary" email address and "primary" phone number (which is the only one they can log in with as a user ID) and the secondaries are just for verification. This is kind of common with people who want their spouse's phone to be able to get into their account for example (a pretty common use case for one of our apps, although they're technically supposed to make their own accounts, we allow this simple form of sharing).

Re: Apple is about to make Hide My Email useless

#365

Post by trollbridge »

bigstrat2003 wrote: post #242
JoblessWonder wrote: post #195

Earlier quoted context omitted.

I feel like email overtook usernames because it was more likely to be unique/memorable. I hate when websites ask me to remember a username (even though I'm using a password manager so I should really just calm down.)

Usernames are no less likely to be unique and memorable than an email. You presumably chose something memorable for your email, so just enter that without the @foo.com bit. There, memorable and probably unique.

That's what I set the defaults to in Authentik. Of course, you do have to watch out for poorly-designed systems that have "reserved" usernames.

Re: Apple is about to make Hide My Email useless

#366

Post by cavoirom »

Someone wrote: post #331
cavoirom wrote: post #301

Earlier quoted context omitted.

For now I think Hide My Email is for power users! It's on the user side to manage their identities. My current workflow: - Label Hide My Email with the service name I registered with it. Add number or nickname if I have multiple accounts on that service. - Add an email rules to move the email addressed to that Hide My Email addressuu to a separate inbox. - Use the same label in password manager, also save the email t…

> For now I think Hide My Email is for power users! It's on the user side to manage their identities. My current workflow: > - Label Hide My Email with the service name I registered with it. I think the ‘normal’ way to do it is way simpler: - a site asks for an email address - click “Hide My Email” - use Apple’s flow to create a new email address - use Apple’s flow to pick a password - phone or Mac automatically asso…

yes, I wish I've done that, but I'm too paranoid that I use KeePass for the password manager and always want to know the email address ahead of the time.

Re: Apple is about to make Hide My Email useless

#367

Post by kodt »

MoonWalk wrote: post #355
kodt wrote: post #260

Earlier quoted context omitted.

I know I have created accounts on Reddit with disposable email services before.

I have been "permanently" banned for embarrassing some abusive moderators; now it has become a vendetta. I'm not sure how many user-identifying methods they attempt, but it overcomes VPN usage. I obfuscate my Web traffic now and it seems to have foiled these losers.

Use Brave browser as it avoids browser fingerprinting.

Re: Apple is about to make Hide My Email useless

#368

Post by bb88 »

rufo wrote: post #286
janc_ wrote: post #254

Earlier quoted context omitted.

Most RBLs are scams. No competent mail admin uses them to block mail ever.

…lots of major mail services do? https://www.fastmail.help/hc/en-us/articles/360060591413-Spa... https://senders.yahooinc.com/smtp-error-codes/ https://www.xfinity.com/support/articles/email-errors

Honestly those are used as weights now in some kind of obscure calculation (or maybe not so obscure calculation but I still don't understand it).

What I really learned during that time is that mail servers have well known IP addresses and reputations. And you can say all you want SPF/DKIM fixes that, but the reality is when google sends your email (even with your custom domain) it gets received.

Re: Apple is about to make Hide My Email useless

#369

Post by ElFitz »

calvinmorrison wrote: post #346
ElFitz wrote: post #290

Earlier quoted context omitted.

That, especially the conclusion, is hilariously bad.

It's worse I just checked " You are eligible for up to a $1.00 credit to be applied to ParkMobile’s service fees. The code provides a $0.25 discount on ParkMobile’s service fees and may be used up to four times for a total discount of $1.00. The code will expire on October 8, 2026. For residents of California, the code will not expire. The code will only work for accounts associated with email addresses that are in t…

I am at a loss for words.
Post reply on HN