Live data from Hacker News

IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

mysk.blog

41–45 of 45 posts

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#41
post #39
post #38

Tommy Mysk, Talal Haj Bakry: how long did you wait after informing Apple of their incompetence before this public disclosure, please? Thank you for uncovering this and for the website proving the bug.

We didn't inform Apple at all. The reason why we didn't is explained here: https://x.com/mysk_co/status/2085026605529768261 Glad you found the website helpful. Thank you.

Understood, thank you, sad Apple has done enough to lose the trust of experts such as yourselves.

Reading your comment and this 404 piece, perhaps you informed them in the minutes* before disclosure and got some kind of approval? (But essentially that wasn’t really informing them ahead of time, simplified in your comment… or I’m thick somehow, hehe well I can be!)

  “We have already informed them. They said the issue was ‘dire,’ but they let us disclose the issue. They didn't provide any time when they will address this,” Mysk said.
https://www.404media.co/apples-private-relay-is-exposing-use...

*Edit: or informed after and “let us disclose” meant they didn’t demand retraction

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#42

Thank you for this report. My real IP on my phone was constantly leaking and I knew that WebKit was a culprit. However, I doubt that this was an accident. This is a backdoor that Apple planted.

To what benefit of theirs or others?

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#43
post #41
post #39

Earlier quoted context omitted.

We didn't inform Apple at all. The reason why we didn't is explained here: https://x.com/mysk_co/status/2085026605529768261 Glad you found the website helpful. Thank you.

Understood, thank you, sad Apple has done enough to lose the trust of experts such as yourselves. Reading your comment and this 404 piece, perhaps you informed them in the minutes* before disclosure and got some kind of approval? (But essentially that wasn’t really informing them ahead of time, simplified in your comment… or I’m thick somehow, hehe well I can be!) “We have already informed them. They said the issue w…

Many reporters got this comment wrong. "Them" in “We have already informed [them]" refers to the Tor Project team, not Apple. We didn't inform Apple at all. We filed a bug report with Apple soon after we had published the blog to let them [Apple] know.

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#44
post #43
post #41

Earlier quoted context omitted.

Understood, thank you, sad Apple has done enough to lose the trust of experts such as yourselves. Reading your comment and this 404 piece, perhaps you informed them in the minutes* before disclosure and got some kind of approval? (But essentially that wasn’t really informing them ahead of time, simplified in your comment… or I’m thick somehow, hehe well I can be!) “We have already informed them. They said the issue w…

Many reporters got this comment wrong. "Them" in “We have already informed [them]" refers to the Tor Project team, not Apple. We didn't inform Apple at all. We filed a bug report with Apple soon after we had published the blog to let them [Apple] know.

Correction requested! Thank you!

Re: IP and DNS Leaks in WebKit Affecting Proxy Browsers and iCloud Private Relay

#45
post #43
post #41

Earlier quoted context omitted.

Understood, thank you, sad Apple has done enough to lose the trust of experts such as yourselves. Reading your comment and this 404 piece, perhaps you informed them in the minutes* before disclosure and got some kind of approval? (But essentially that wasn’t really informing them ahead of time, simplified in your comment… or I’m thick somehow, hehe well I can be!) “We have already informed them. They said the issue w…

Many reporters got this comment wrong. "Them" in “We have already informed [them]" refers to the Tor Project team, not Apple. We didn't inform Apple at all. We filed a bug report with Apple soon after we had published the blog to let them [Apple] know.

The reporter believes it sufficiently clear already. Hmm
Post reply on HN