Apple's Hide My Email Could Unmask Real Addresses

A vulnerability in Apple's Hide My Email, an iCloud+ feature that creates anonymous aliases, could reveal users’ real email addresses. 404 Media, with EasyOptOuts, verified the flaw by generating an alias and linking it to an Apple account in about five minutes. Apple reportedly knew about the issue for over a year and said fixes were applied in a system update, but the vulnerability persisted. The story also notes Apple’s shift to a new anonymized domain for these emails (such as @privaterelay.appleid.com / @private.icloud.com), a change critics say could make it easier for sites to block anonymous signups.