News for hackers. Stuff that matters.

A comment on Apple 'Hide My Email' Vulnerability Reveals Peoples' Real Email Addresses. Parent comment

Re:Apple 'Hide My Email' Vulnerability Reveals Peoples' Real... by ChrisMarshallNY on Wednesday July 01, 2026 @04:38PM (#48752789)
Is this from iOS? I just tested from MacOS, and the only IPs were for the transit and auth servers.

I'm not actually doubting it. saagarjha knows his stuff. I just don't see it, so maybe I'm holding it wrong.

[ Parent | on HN ]
Re:Apple 'Hide My Email' Vulnerability Reveals Peoples' Real... by frollogaston on Wednesday July 01, 2026 @05:22PM (#48753304)
Same, I remember it being in the headers long ago but don't see it now. macOS Tahoe, Mail.app client, iCloud email sending to itself or to my Gmail, both set up in default ways, IPv6 disabled
[ Parent | on HN ]
Re:Apple 'Hide My Email' Vulnerability Reveals Peoples' Real... by ChrisMarshallNY on Wednesday July 01, 2026 @09:45PM (#48755425)
From what I see above, it looks like the trick is to send from Mail.app to an account read by a different app (maybe just Gmail?).

I would need to test with my hosting Webmail client, so maybe tomorrow.

[ Parent | on HN ]
Re:Apple 'Hide My Email' Vulnerability Reveals Peoples' Real... by fckapple on Thursday July 02, 2026 @04:54AM (#48758459)
See my comment here: https://news.ycombinator.com/item?id=48758444.
[ Parent | on HN ]
Re:Apple 'Hide My Email' Vulnerability Reveals Peoples' Real... by ChrisMarshallNY on Thursday July 02, 2026 @05:11AM (#48758597)
I saw that, in my headers, but in my case, it was not an IP in any subnet of mine.

I’ll mess around, today, and see what comes up.

[ Parent | on HN ]