\n<\/p>\n
Apple\u2019s Hide My Email feature<\/a> is a convenient privacy tool that uses disposable addresses to hide a user\u2019s true email for the sake of online anonymity. Unfortunately, new research appears to show that a bug in the feature allows users\u2019 real email addresses to be unmasked.<\/p>\n The bug was reported by 404 Media<\/a>, which says that it has tested and verified that the vulnerability exists. Tyler Murphy, the researcher who found the bug, said that he warned Apple about the problem over a year ago and that it was unclear why the company had yet to remedy the problem. All of the attempts to exploit the bug have been successful, Murphy added.<\/p>\n \u201cWe don\u2019t know the full scope of the issue, but in our limited tests with volunteers, 100% of Hide My Email addresses were exploitable,\u201d Murphy told the outlet. Details of the vulnerability haven\u2019t been publicly disclosed, for fear that it will be exploited. <\/p>\n Murphy is the co-founder of EasyOptOuts, which offers a paid data-removal service that takes your information off of data broker sites. He told 404 Media that \u201cpublicly accessible people-search sites make it easy to link an email address to other personal details, so people relying on Hide My Email for safety may be at risk.\u201d<\/p>\n TechCrunch reached out to Apple for more information and will update this story if it responds. <\/p>\n When it comes to the tech world, privacy tools are hard to come by and, unfortunately, even when they do exist, they don\u2019t always work. Apple has been accused of this sort of thing before. <\/p>\n Case in point: The company was sued in 2022 after it was reported<\/a> that iPhone apps continued to send analytics data to Apple even when the iPhone Analytics privacy setting was turned on.<\/p>\n Similarly, in 2023, researchers found another one of Apple\u2019s privacy features to be\u00a0effectively \u201cuseless.\u201d<\/a> The research claimed that a tool that was supposed to anonymize mobile users\u2019 Wi-Fi connections by providing randomized MAC addresses (an easily trackable identifier) was simply exposing the user\u2019s real MAC address.<\/p>\n Apple has built a large part of its reputation and branding on user privacy, so hopefully it manages to address the apparent Hide My Email bug with some expedience. If it can learn to better stand behind its privacy promises, that wouldn\u2019t be the worst thing in the world either. <\/p>\n<\/div>\n When you purchase through links in our articles, we may earn a small commission<\/a>. This doesn\u2019t affect our editorial independence.<\/em><\/p>\n