Apple Faces Lawsuit Over iCloud Private Relay Vulnerability
The revelation that Apple’s iCloud Private Relay feature hasn’t been as secure as Apple says has spawned a lawsuit against the iPhone maker.
Last week, a blog post by Talal Haj Bakry and Tommy Mysk exposed a vulnerability in how iCloud Private Relay, in some circumstances, doesn’t shield a customer’s IP address, which is the entire purpose of the feature. Even when it’s enabled, their information can be exposed when using a passkey to sign in or when a website uses two methods (DNS prefetching and WebTransport) to load data faster.
In a complaint filed by Clarkson Law Firm on Aug. 6, plaintiff Edward Rickman says he subscribed to iCloud Plus believing that iCloud Private Relay would hide his IP address and Safari browsing activity.
“Instead, Apple delivered a system that recreates through its own credential service the precise harm Apple told the world it had made impossible,” reads the...
Copyright of this story solely belongs to cnet.com. To see the full text click HERE
