Security researcher finds flaw in Apple's Hide My Email that exposes actual addresses
A researcher reported that a vulnerability in Apple's Hide My Email feature can reveal the real email addresses of users, and tests indicate the issue remains unpatched.
A security researcher has identified a flaw in Apple’s Hide My Email service that allows the underlying email address to be uncovered. The researcher, citing independent testing by 404 Media, confirmed that the vulnerability is still exploitable as of early Monday, when the team was able to retrieve the real address linked to one of its own hidden aliases.
Apple has not released a fix for the issue, which was first reported more than a year ago. The researcher warned that users of the feature should be aware of the potential exposure.
"Hide My Email users deserve to know that it may be possible for attackers to discover their hidden email addresses," the researcher said.
The report does not disclose technical details of the exploit, citing ongoing security concerns.
