News for hackers. Stuff that matters.

A comment on Apple 'Hide My Email' Vulnerability Reveals Peoples' Real Email Addresses. Parent comment

Re:Apple 'Hide My Email' Vulnerability Reveals Peoples' Real... by fckapple on Thursday July 02, 2026 @04:52AM (#48758444)
Received: from smtpclient.apple (ptr. [ip]) by smtp.gmail.com with ESMTPSA id ... for <...> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Thu, 02 Jul 2026 ..:..:.. -0700 (PDT)

Using Mail: Version 16.0 (3864.600.51.1.1).

Sent from a Google Apps mail.

[ Parent | on HN ]
Re:Apple 'Hide My Email' Vulnerability Reveals Peoples' Real... by jijijijij on Thursday July 02, 2026 @06:46AM (#48759352)
For me that IP belongs to apple, when using the iOS mail client. I presume Apple forces third party apps to use their API and then stuff like this happens. Guess that's also on google, not mitigating that issue, tho.

Have you tried a VPN? I wonder, if Apple manages to expose IP despite a VPN. They had issues with stuff like that before.

[ Parent | on HN ]
Re:Apple 'Hide My Email' Vulnerability Reveals Peoples' Real... by js2 on Thursday July 02, 2026 @09:25AM (#48761239)
That Received header is inserted by smtp.gmail.com (Google), not Apple.
[ Parent | on HN ]