this post was submitted on 01 Jul 2026
121 points (99.2% liked)

Technology

85870 readers
4311 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
 

A newly disclosed privacy vulnerability in Apple's Hide My Email feature can reportedly allow an attacker to uncover the real email address behind a generated alias. According to the researcher who found the bug, it was responsibly disclosed to Apple more than a year ago but remains unpatched, and independent testing has verified the issue.

top 6 comments
sorted by: hot top controversial new old
[–] Kissaki@feddit.org 1 points 5 hours ago (1 children)

addy.io offers a free tier if you're looking for an alias provider/alternative.

[–] skoell13@lemmy.zip 1 points 4 hours ago

Wanted to use it but couldn't sign up bc it didnt know my domain. They sent an automatic email to which I should reply to, but I never got a confirmation. Yes, I replied with the same address I've signed up with. That was, however, months ago so I should give it another try.

[–] kayazere@feddit.nl 5 points 9 hours ago* (last edited 9 hours ago)

I use DuckDuckGo’s email hiding service. I have had sites reject signing up with a @duck.com email address. So services will definitely move to block Apple’s new subdomain only for aliased email addresses.

[–] somebody_to_love@lemmy.today 13 points 20 hours ago

This is a good write up. Thanks for sharing. I use “hide my email” sometimes and it’s important to know that it’s possible to find the real address behind it.

[–] Anivia@feddit.org 0 points 9 hours ago (1 children)

Just get a cheap domain and configure a catch-all redirect. Obviously not a solution viable for normies, but should be easy for many Lemmy users.

Almost every website will accept a custom email domain

[–] muusemuuse@sh.itjust.works 2 points 5 hours ago

It depends on the domain. I intentionally have a bizarre .party domain I use as a shibboleth to see if a company is worth using. If they don’t have a way to use my .party email, I assume they are lazily run and based their decisions either on outdated nonsense or are a gross data mining operation I should avoid anyway.