Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs
Summary
Apple has fixed a bug in its Hide My Email service that exposed users' real email addresses in Mail logs. The vulnerability, disclosed to Apple over a year ago, undermined the privacy features of the service.
IFF Assessment
FOE
This vulnerability undermined a privacy-enhancing feature, which is bad news for users relying on it for anonymity.
Defender Context
This incident highlights the importance of thoroughly testing privacy features to ensure they function as intended. Defenders should be aware of how seemingly minor bugs can have significant privacy implications and should advocate for robust security testing throughout the development lifecycle.