Re:Apple's “iCloud Private Relay” broke risk based authentic...
by vinay_ys on Wednesday July 07, 2021 @03:09PM
(#27764717)
More likely to happen: Apple's IP addresses get allowlisted.
[ Parent
| on HN ]
Re:Apple's “iCloud Private Relay” broke risk based authentic...
by knodi on Wednesday July 07, 2021 @03:13PM
(#27764749)
There is no Apple's IP address with Private Relay. Apple is using 3rd part companies as its exit nodes to avoid this "whitelist apple ip addresses" concern.
Re:Apple's “iCloud Private Relay” broke risk based authentic...
by Boerworz on Wednesday July 07, 2021 @04:41PM
(#27765530)
The "Get ready for iCloud Private Relay" session[1] from this year's WWDC makes it seem like there will be a publicly available list of IP addresses used by Private Relay:
Private Relay guarantees that users can't use the system to pretend to be from a different region, so you can continue to enforce region-based access restrictions. Details about the proxy IP addresses will be available as an article associated with this session.
Though I haven't been able to find the aforementioned article.
[1]: https://developer.apple.com/videos/play/wwdc2021/10096/
Re:Apple's “iCloud Private Relay” broke risk based authentic...
by banana_giraffe on Wednesday July 07, 2021 @06:45PM
(#27766620)
Here's the article:
https://developer.apple.com/support/prepare-your-network-for...
And their IPs, as mentioned in that article:
https://mask-api.icloud.com/egress-ip-ranges.csv
Seems to be mostly Fastly IP addresses right now, but I'm sure that'll change over time.
Re:Apple's “iCloud Private Relay” broke risk based authentic...
by alam2000 on Tuesday July 20, 2021 @12:33AM
(#27890102)
I'm running the list using IP2Location and it is showing 3 CDNs now.
(a) Fastly (b) CloudFlare (c) Akamai
Re:Apple's “iCloud Private Relay” broke risk based authentic...
by mike_hearn on Thursday July 08, 2021 @10:01AM
(#27772049)
I used to work on anti-hijacking "risk based analysis" at Google. Here's what's even more likely to happen: Apple's IP addresses get marked as VPN/Tor ranges and treated exactly the same way as other such ranges. This may trigger e.g. requirements to use two factor authentication on an account if you wish to log in from such ranges.