Nice, thanks! I forgot that 404 Media is paywalled.
Main content is that Apple has been jerking around this security researcher for about a year, and they finally gave up and talked to 404 Media. They didn't disclose the vuln itself but they did demonstrate it with the reporter's account.
Available without signup.
https://www.macrumors.com/2026/07/01/hide-my-email-vulnerabi...
https://cybersecuritynews.com/apple-hide-my-email-vulnerabil...
https://cybernews.com/security/apple-hide-my-email-leaks-ema...
https://gizmodo.com/apples-hide-my-email-feature-may-reveal-...
https://macdailynews.com/2026/07/01/apples-hide-my-email-fea...
Nice, thanks! I forgot that 404 Media is paywalled.
Main content is that Apple has been jerking around this security researcher for about a year, and they finally gave up and talked to 404 Media. They didn't disclose the vuln itself but they did demonstrate it with the reporter's account.
For the time I supervised, I told people to get the basics right before the glitter. Tried to do that myself, mostly successfully.
Again, they're spending on the glitter, and not the BORING basics.