technology
Apple Hide My Email feature bug exposes real addresses in tests
A reported vulnerability in Apple's Hide My Email tool allowed real addresses to be revealed during limited testing. The issue was identified more than a year ago and remains unresolved. Details of the flaw have not been released publicly.
helpnetsecurity.comAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
A bug in Apple's Hide My Email feature has allowed real email addresses to be revealed during testing, according to research reported by 404 Media. The feature is designed to provide disposable addresses that shield a user's actual email. Tests conducted with volunteers showed that every Hide My Email address examined could be linked back to the real account.
Background on the reported issue The vulnerability was first reported to Apple more than a year ago. It remains unclear why a fix has not been implemented. Details of how the bug works have not been disclosed publicly to reduce the chance of misuse.
Privacy implications Publicly accessible people-search sites can connect an email address to other personal information. Users who rely on the feature for safety may face increased exposure if the addresses can be traced. TechCrunch contacted Apple for comment and stated it will update the story if a response is received.
Transparency
How sources framed this
Single source — no framing comparison available.
CorroborationModerate · 1 source
