Apple’s ‘Hide My Email’ Privacy Flaw Exposes Real Email Addresses

Researchers at EasyOptOut reported a vulnerability in Apple’s Hide My Email (iCloud+) feature that may leak users’ real email addresses to websites. Apple provided two remediations that the researchers claim were bypassable; the researchers are withholding exploitation details until Apple delivers a full fix and have recommended temporarily limiting alias creation and notifying affected users.