this post was submitted on 01 Jul 2026
145 points (99.3% liked)

Technology

87417 readers
3852 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
 

A newly disclosed privacy vulnerability in Apple's Hide My Email feature can reportedly allow an attacker to uncover the real email address behind a generated alias. According to the researcher who found the bug, it was responsibly disclosed to Apple more than a year ago but remains unpatched, and independent testing has verified the issue.

top 10 comments
sorted by: hot top controversial new old
[–] somebody_to_love@lemmy.today 16 points 1 month ago

This is a good write up. Thanks for sharing. I use “hide my email” sometimes and it’s important to know that it’s possible to find the real address behind it.

[–] kayazere@feddit.nl 7 points 1 month ago* (last edited 1 month ago) (1 children)

I use DuckDuckGo’s email hiding service. I have had sites reject signing up with a @duck.com email address. So services will definitely move to block Apple’s new subdomain only for aliased email addresses.

[–] UnLocoPoco@lemmy.world 1 points 1 month ago

Same. Duck.com is blocked for a lot of sites. Many block it

[–] Anivia@feddit.org 2 points 1 month ago (1 children)

Just get a cheap domain and configure a catch-all redirect. Obviously not a solution viable for normies, but should be easy for many Lemmy users.

Almost every website will accept a custom email domain

[–] muusemuuse@sh.itjust.works 3 points 1 month ago (1 children)

It depends on the domain. I intentionally have a bizarre .party domain I use as a shibboleth to see if a company is worth using. If they don’t have a way to use my .party email, I assume they are lazily run and based their decisions either on outdated nonsense or are a gross data mining operation I should avoid anyway.

[–] Anivia@feddit.org 2 points 1 month ago (1 children)

At least my .club domain worked for everything except deepseek so far

[–] muusemuuse@sh.itjust.works 1 points 1 month ago

Penguin.club.xxx.net.bing

[–] Kissaki@feddit.org 1 points 1 month ago (1 children)

addy.io offers a free tier if you're looking for an alias provider/alternative.

[–] skoell13@lemmy.zip 1 points 1 month ago (1 children)

Wanted to use it but couldn't sign up bc it didnt know my domain. They sent an automatic email to which I should reply to, but I never got a confirmation. Yes, I replied with the same address I've signed up with. That was, however, months ago so I should give it another try.

[–] Kissaki@feddit.org 2 points 1 month ago

I don't use if with my own domain so I can't speak for success with that. I've used them for a long time for my occasional alias needs, before they renamed from anonaddy iirc.