404 Media: Vulnerability in iC... Note

404 Media: Vulnerability in iCloud’s ‘Hide My Email’ Reveals Peoples’ Real Email Addresses

Apple's Hide My Email service is reportedly leaking users' real email addresses. This vulnerability was discovered by EasyOptOuts and reported to Apple over a year ago. Despite the long reporting period, the issue remains unpatched. 404 Media verified the vulnerability themselves, confirming that hidden email addresses can still be exposed. This means that attackers could potentially discover the actual email addresses that users are trying to conceal. EasyOptOuts co-founder Tyler Murphy expressed concern about Apple's delay in fixing the problem. He highlighted that users deserve to be aware of this ongoing security risk. In tests conducted by Murphy, every tested Hide My Email address was found to be exploitable. The exact method of exploitation is being kept confidential by 404 Media due to the ongoing vulnerability. The long delay in addressing this issue raises questions about Apple's response to security reports.