Apple Still Hasn't Fixed Vulnerability Exposing Your Email Address

You encounter an ad for a 80 euro dresser on a peer-to-peer resale site. The site requires an email address to finalize the purchase. You activate Apple's feature, which generates a disposable alias: two words joined by a number, followed by @icloud.com. This feature redirects all emails to your main inbox without the seller knowing your real email address.

However, this system, designed to protect your privacy, has a flaw. It has been observed that certain platforms are able to deduce your actual email address from this alias. This means that even when you think your primary email is hidden, it can still be revealed to the seller.

This vulnerability has been known for some time, yet Apple has not yet implemented a fix. This leaves users' personal information exposed in situations where privacy is paramount, such as online transactions with unknown individuals.