Apple's iCloud Private Relay feature is leaking users' real IP addresses
Serving tech enthusiasts for over 25 years.
TechSpot means tech analysis and advice you can trust.
Facepalm: Apple's iCloud Private Relay, the company's privacy-protecting service for Safari that comes with any paid iCloud+ plan, doesn't appear to be as private as Cupertino claims. A new report has revealed how attackers can learn a Private Relay user's real IP address, and many websites may already have collected the information. The same issue also affects the Onion Browser iOS app.
The discovery comes from security researchers Talal Haj Bakry and Tommy Mysk, who found three WebKit features that bypass application-level proxy settings: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. WebKit underpins Safari and, in most countries, every other browser available on iOS.
Private Relay isn't the same as a traditional VPN. When Safari traffic leaves the device, it is encrypted and sent through two relays, separating the user's IP address...
Copyright of this story solely belongs to techspot.com. To see the full text click HERE
