News for hackers. Stuff that matters.
Re:Apple stole $100s from me, Customer Service says there's ... by derefr on Wednesday August 02, 2023 @03:13PM (#36975642)
> All your emails if you use iCloud for your email, and thus potentially locking you out of any other sites that use email as a 2-factor-auth.

...but you can use iCloud Mail through regular POP3/IMAP and thus have a local copy of all your mail. (And, as far as I know, this is what Mail.app itself does, save for some push-notification optimization; am I wrong here?) There's no walled garden here. It's email.

Re:Apple stole $100s from me, Customer Service says there's ... by tolmasky on Wednesday August 02, 2023 @03:35PM (#36976010)
If they disable your account, you're not going to get any new email. So if a website uses your email address for 2-factor-auth, then you are straight out of luck, as I'm sure they also use that email for any sort of account changes. To be clear, "don't use email for 2-factor-auth" isn't a real answer here, there are plenty of services that don't give you an option.

Additionally, you can't send email. That's also a pretty important part of the whole "email" thing. Any ongoing discussions will just be cut off.

Seems pretty walled garden-y to me, considering the entire framing of this is that nothing bad was done with said email. It was because Apple has a unilateral switch that turns everything off if anything bad happens to an associated credit card. That is to say, if your credit card number is stolen, completely outside of your control, this could happen to your email. I'm not aware of any other email service where that is the case.

Re:Apple stole $100s from me, Customer Service says there's ... by jrockway on Wednesday August 02, 2023 @03:41PM (#36976116)
* * *
Re:Apple stole $100s from me, Customer Service says there's ... by derefr on Wednesday August 02, 2023 @03:46PM (#36976208)
I don't think there exist any Mail Submission Agents well-connected to the graph of what you would think of as "email on the Internet", that allow you to send FROM an arbitrary address without SMTP AUTHing yourself as an account that maps to someone with privileges to send from that address.
Re:Apple stole $100s from me, Customer Service says there's ... by jrockway on Wednesday August 02, 2023 @04:48PM (#36977181)
You connect to the recipient's server. It's nice that iCloud Mail automates this all for you (and is allowlisted), but you don't need an email provider to send email.
Re:Apple stole $100s from me, Customer Service says there's ... by hiatus on Wednesday August 02, 2023 @05:02PM (#36977388)
Let me know when you can telnet into gmail to send mail as an unauthenticated user to another gmail user. Let alone DMARC, SPF and other modern protections. The last time I could do what you describe was more than a decade ago.
Re:Apple stole $100s from me, Customer Service says there's ... by hiatus on Wednesday August 02, 2023 @05:04PM (#36977425)
This used to be a thing, with open mail servers making it trivial to send emails to your friends masquerading as whitehouse.gov for instance.
Re:Apple stole $100s from me, Customer Service says there's ... by derefr on Wednesday August 02, 2023 @03:43PM (#36976158)
But that's true of... any email provider, though? You'd lose access to your ISP email account if you switch ISPs, etc.

Federated email just generally sucks, insofar as email addresses are expected to stick around indefinitely, yet are almost-always associated with some service provider you might eventually no longer be a customer of (for whatever reason) and with "owning your own email providing" being nigh-impossible for deliverability reasons.

Also, people's emails to you wouldn't go into a black hole; they'd start bouncing. Which would mean that those people would realize that they should be reaching out to you some other way.

(In fact, properly-coded 2FA systems should recognize an SMTP bounce and use it as a signal to temporarily reduce the level of authentication required to reset 2FA. Things like this are why it's so hard to get 2FA right.)

Re:Apple stole $100s from me, Customer Service says there's ... by tolmasky on Wednesday August 02, 2023 @03:59PM (#36976447)
No, it isn't true of any other provider, that's the whole point. If my HBO Max account detects a fraudulent charge, my completely unrelated email provider doesn't then irreversibly disable my email account and tell me to just set up a new one.

Yes, if my non-Apple email service "locks me out", then the same would happen as here. The point however is that:

1. Usually this would only happen if something weird specifically happens on that account. For example, if I am paying for an email provider and my card is declined. Notice that with the Apple case, a problem in something completely unrelated to email can cause this (including apparently the card being flagged for a fraudulent charge on some unrelated service).

2. Even then, usually the next step is I am told that that happened. Notice that in the Apple case they won't even tell you what the situation is to give you a chance to remedy it.

3. Finally, you then almost always have a way to remedy the problem. For example, by giving them a new credit card. Notice in the Apple case they insist that the account is disabled forever.

Do you see the difference? It's not in the "what happens if your email stops working" part, it's in the "what leads to your email not working anymore" and "how do you fix your email" parts.

Re:Apple stole $100s from me, Customer Service says there's ... by ezfe on Wednesday August 02, 2023 @04:40PM (#36977056)
> If my HBO Max account detects a fraudulent charge, my completely unrelated email provider doesn't then irreversibly disable my email account and tell me to just set up a new one.

Do you have any evidence Apple has done that here?

Re:Apple stole $100s from me, Customer Service says there's ... by tolmasky on Wednesday August 02, 2023 @04:46PM (#36977148)
It is a natural consequence of the services being bundled together, and with Apple not telling you what the cause is. The response from the person who says they used to work at Apple is informative: https://old.reddit.com/r/applehelp/comments/15gechw/apple_ju...
Re:Apple stole $100s from me, Customer Service says there's ... by ezfe on Wednesday August 02, 2023 @11:37PM (#36981057)
Again, nobody has said they have an account that's been flagged and lost iCloud access, including the post you linked to.
Re:Apple stole $100s from me, Customer Service says there's ... by hiatus on Wednesday August 02, 2023 @05:00PM (#36977360)
Based on the OP, Apple did not provide any reason as to why the account was flagged, just that they exhibited "Fraudulent patterns". What evidence are you expecting them to provide here when the service provider is so tight-lipped?
Re:Apple stole $100s from me, Customer Service says there's ... by ezfe on Wednesday August 02, 2023 @11:36PM (#36981055)
No, I mean is there any evidence they did more than disable the account's iTunes / App Store access?
Re:Apple stole $100s from me, Customer Service says there's ... by throwaway290 on Wednesday August 02, 2023 @04:36PM (#36977003)
> Notice that with the Apple case, a problem in something completely unrelated to email can cause this

Uhm, conjecture? The Reddit poster complained about app/media store lock, if they lost something more important like iCloud with photos and email that'd be a totally different story instead of "I lost some movies".

Re:Apple stole $100s from me, Customer Service says there's ... by tolmasky on Wednesday August 02, 2023 @04:43PM (#36977105)
If you read the rest of the thread, its clear the entire account was locked. That's why they were told to get a new account. The expectation is not that he use one account for email and another for... new movies?
Re:Apple stole $100s from me, Customer Service says there's ... by ezfe on Wednesday August 02, 2023 @11:40PM (#36981076)
They said the issue manifested when trying to update an app. If the account was disabled, they'd get system errors saying iCloud couldn't be reached/account errors.

Second, they only ever said they asked the rep about their purchase content. Nowhere in the thread do they imply they lost anything else.

Re:Apple stole $100s from me, Customer Service says there's ... by throwaway290 on Thursday August 03, 2023 @12:18AM (#36981312)
Uhm, then the rest of this subthread is conjecture? Typical HN sensationalizing/piling on. Losing bought content is bad but not like having all personal stuff locked. and nowhere the poster complained about the second.
Re:Apple stole $100s from me, Customer Service says there's ... by ozim on Wednesday August 02, 2023 @03:28PM (#36975903)
That is why I don't use webmail I rather use Thunderbird.

Second reason I use Thunderbird (or whoever wants whatever else) is that I have 10 or 20 mail boxes like separate for shopping separate for more important stuff separate for stupid stuff.

You don't have to have a single mailbox with a single provider.

Re:Apple stole $100s from me, Customer Service says there's ... by brewdad on Wednesday August 02, 2023 @05:06PM (#36977447)
Another advantage of Thunderbird is that I already have a downloaded copy of my past emails. If I ever get locked out, I can change my MX records and start over elsewhere with minimal disruption or data loss.