An Ode to Apple’s Hide My Email • Hacker News Board

Re: An Ode to Apple’s Hide My Email

#81

Post by b1n » Sun, Apr 10, 2022, 8:38 PM UTC

rootusrootus wrote: post #68

binwiederhier wrote: post #39

I have a unique email address for every single service that I sign up for, similar to this, though selfhosted. I've been doing this for years and it works wonderfully. If someone misuses my email address, or gets annoying, I can simply turn off the address. Bam! It's the easiest Postfix config in the universe, essentially just: virtual_alias_domains = domain1.com domain2.com virtual_alias_maps = hash:/etc/postfix/vir…

I do a simplified version of this. I just use a catchall account with Fastmail and then pick email addresses in the domain randomly. If someone abuses the address, I block it. I specifically do not use addresses that make it obvious what my strategy is. I end up just using a name and number that would look right at home on gmail. I'm also not trying to stop tracking, so much as I'm trying to have my own semi-permanen…

I've been thinking of a new way to use my email...

- Only use one email address: hi@example.com

- Always add a filter: hi+hn@example.com

- Send all emails without a filter to SPAM

Since it's not a common strategy, it is much more likely that spammers remove the +hn before sending an email than add one.

Re: An Ode to Apple’s Hide My Email

#82

Post by ultrasounder » Sun, Apr 10, 2022, 8:41 PM UTC

This is serendipitous. I just now signed up for the 5 day overcoming overthinking challenge by Jon Acuff and when I signed up Apple checkef with me if I wanted to hide my email and this is trending on HN!

Re: An Ode to Apple’s Hide My Email

#83

Post by r2b2 » Sun, Apr 10, 2022, 8:43 PM UTC

binwiederhier wrote: post #39

I have a unique email address for every single service that I sign up for, similar to this, though selfhosted. I've been doing this for years and it works wonderfully. If someone misuses my email address, or gets annoying, I can simply turn off the address. Bam! It's the easiest Postfix config in the universe, essentially just: virtual_alias_domains = domain1.com domain2.com virtual_alias_maps = hash:/etc/postfix/vir…

The problem with self hosted email is that your domain becomes a unique (or near-unique with a few domains) tracking reference.

Re: An Ode to Apple’s Hide My Email

#84

Post by bmarquez » Sun, Apr 10, 2022, 8:44 PM UTC

gzer0 wrote: post #53

Kwpolska wrote: post #45

Earlier quoted context omitted.

SMS is available as a fallback 2FA method for Apple ID.

Unfortunately, only one phone number is allowed per Apple ID. And I do not have multiple phone numbers to expend for an SMS only 2fa option here.

You can have multiple accounts on one "trusted phone number". Trusted phone number is where Apple sends the SMS 2FA code. I have several Apple ID's on 1 phone number.

This is different than "Reachable at" phone number which must be unique and is used for iMessage and Facetime, and if it's blank other people can only reach you via iCloud account email.

(It makes sense if you think about it, parents setting up iCloud accounts for their children's iPads who might not have their own phone).

Re: An Ode to Apple’s Hide My Email

#85

Post by lowdose » Sun, Apr 10, 2022, 8:45 PM UTC

I have been tinkering to use chrome auto filling form to sign up for random services with the email address of the current director of the CIA Bill Burns. Haven’t tried it though.

Re: An Ode to Apple’s Hide My Email

#86

Post by yellow_postit » Sun, Apr 10, 2022, 8:48 PM UTC

Love the service but nervous on the lock-in. Any guides for how to migrate off Apple after using lots of emails?

I’ve been happy with the Fastmail+1Password integration as that “feels” less painful to migrate off the in the future.

Re: An Ode to Apple’s Hide My Email

#87

Post by criddell » Sun, Apr 10, 2022, 8:48 PM UTC

kayodelycaon wrote: post #55

gzer0 wrote: post #34

The only thing really holding me back from wanting to use iCloud mailing services is the current implementation of MFA on Apple services. It would be fine if you were allowed to use normal MFA options, but no, that is not possible. Instead, you MUST confirm your logins via already signed in Apple-devices only. There is no other way. Cannot use phone number (for good reason, but that is besides the point), cannot have…

Actually, Apple allows SMS and recovery keys as a fallback and there is an account recovery option if none of these work. https://support.apple.com/en-us/HT204915 Google on the other hand… I’ve seen two people lose their Gmail accounts even they knew the password because google required verification from a mobile device that no longer existed. :|

I think Google also has recovery keys. I have a slip of paper with ten long strings on them that Google told me could be used to regain access to my account.

Re: An Ode to Apple’s Hide My Email

#88

Post by muhehe » Sun, Apr 10, 2022, 8:51 PM UTC

uuyi wrote: post #79

muhehe wrote: post #40

Earlier quoted context omitted.

That's true, of course. But this is adding another layer of dependency to already fragile reliability. Edit: also with custom domain you can switch email providers.

I use my custom domain with iCloud. I use the anonymous email feature only for crap signups. Problem solved.

Good for you (seriously), that's very reasonable, but far from author's recommendation.

Re: An Ode to Apple’s Hide My Email

#89

Post by SylvieLorxu » Sun, Apr 10, 2022, 8:52 PM UTC

I see SimpleLogin mentioned in the replies several times, but I haven't seen anyone mention that you can use your own domain name with them to prevent vendor lock-in.

You can also export your setup through their API so you can very easily migrate to a self-hosted instance if ever necessary:

wget --header "Authentication: YOUR_API_KEY" https://app.simplelogin.io/api/export/aliases -o simplelogin-export-$(date +%s).csv

And given the author talks about Have I Been Pwned, I feel I should mention that SimpleLogin has built-in HIBP integration (contributed by me in https://github.com/simple-login/app/pull/472)

Re: An Ode to Apple’s Hide My Email

#90

Post by gnuj3 » Sun, Apr 10, 2022, 8:53 PM UTC

notriddle wrote: post #65

gnuj3 wrote: post #8

Where is the ode to the likes of AnonAddy that have been about for a long time now AND are provides much better service?

Services that only provide disposable addresses get blocked. iCloud is too big to block.

I havent come across service that would reject me, although I use my own domain with AnonAddy.