this post was submitted on 01 Jul 2026
145 points (99.3% liked)

Technology

86219 readers
3088 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 3 years ago
MODERATORS
 

A newly disclosed privacy vulnerability in Apple's Hide My Email feature can reportedly allow an attacker to uncover the real email address behind a generated alias. According to the researcher who found the bug, it was responsibly disclosed to Apple more than a year ago but remains unpatched, and independent testing has verified the issue.

top 10 comments
sorted by: hot top controversial new old
[–] somebody_to_love@lemmy.today 16 points 1 week ago

This is a good write up. Thanks for sharing. I use “hide my email” sometimes and it’s important to know that it’s possible to find the real address behind it.

[–] kayazere@feddit.nl 7 points 1 week ago* (last edited 1 week ago) (1 children)

I use DuckDuckGo’s email hiding service. I have had sites reject signing up with a @duck.com email address. So services will definitely move to block Apple’s new subdomain only for aliased email addresses.

[–] UnLocoPoco@lemmy.world 1 points 1 week ago

Same. Duck.com is blocked for a lot of sites. Many block it

[–] Anivia@feddit.org 2 points 1 week ago (1 children)

Just get a cheap domain and configure a catch-all redirect. Obviously not a solution viable for normies, but should be easy for many Lemmy users.

Almost every website will accept a custom email domain

[–] muusemuuse@sh.itjust.works 3 points 1 week ago (1 children)

It depends on the domain. I intentionally have a bizarre .party domain I use as a shibboleth to see if a company is worth using. If they don’t have a way to use my .party email, I assume they are lazily run and based their decisions either on outdated nonsense or are a gross data mining operation I should avoid anyway.

[–] Anivia@feddit.org 2 points 1 week ago (1 children)

At least my .club domain worked for everything except deepseek so far

[–] muusemuuse@sh.itjust.works 1 points 1 week ago

Penguin.club.xxx.net.bing

[–] Kissaki@feddit.org 1 points 1 week ago (1 children)

addy.io offers a free tier if you're looking for an alias provider/alternative.

[–] skoell13@lemmy.zip 1 points 1 week ago (1 children)

Wanted to use it but couldn't sign up bc it didnt know my domain. They sent an automatic email to which I should reply to, but I never got a confirmation. Yes, I replied with the same address I've signed up with. That was, however, months ago so I should give it another try.

[–] Kissaki@feddit.org 2 points 1 week ago

I don't use if with my own domain so I can't speak for success with that. I've used them for a long time for my occasional alias needs, before they renamed from anonaddy iirc.