PSA: Apple’s Private Relay can leak your real IP address

Researchers Talal Haj Bakry and Tommy Mysk disclosed that flaws in Apple’s WebKit allow Apple Private Relay (an iCloud+ Safari-only feature) to be bypassed and reveal users' real IP addresses; they published a blog post and a test site demonstrating the leak, noted Private Relay is not a system-wide VPN, and said they did not report the issue to Apple due to prior disclosure difficulties.