🔒Apple's Private Relay Leaks Real IP Addresses
Your Private Browsing Isn't So Private Anymore
TL;DR
Apple's Private Relay, designed to hide IP addresses while browsing with Safari, can be bypassed. Researchers found a way to reveal real IPs using WebKit features, impacting iCloud+ subscribers.
Apple's Private Relay feature, meant to anonymize users' IP addresses when browsing the web via Safari, has been exposed as vulnerable. A blog post and accompanying website revealed that three specific features in Apple's WebKit browser engine can be exploited to uncover a user’s real IP address, even while using Private Relay. This is particularly concerning for iCloud+ subscribers who rely on this feature for privacy while browsing. The issue highlights the limitations of Private Relay compared to full system-level protection offered by traditional VPNs.
Key Points
Apple's Private Relay feature is only available for iCloud+ subscribers, costing $1/month on top of the base plan.
A website was set up where anyone can check if their real IP address leaks when using Private Relay in Safari.
The vulnerability lies with three features within Apple’s WebKit browser engine that allow bypassing Private Relay's anonymity.
Researchers chose not to report this issue to Apple due to past experiences of delays and inconsistent communication from the company.
A private browser called Psylo has implemented mitigations to prevent IP address leaks for its users.
Why It Matters
If you're an iCloud+ subscriber using Safari with Private Relay, your browsing privacy is compromised. The vulnerability affects how we perceive browser-level security features and highlights the need for comprehensive protection beyond just web browsers.
Frequently Asked Questions
Why does this matter?
If you're an iCloud+ subscriber using Safari with Private Relay, your browsing privacy is compromised. The vulnerability affects how we perceive browser-level security features and highlights the need for comprehensive protection beyond just web browsers.
What happened?
Apple's Private Relay, designed to hide IP addresses while browsing with Safari, can be bypassed. Researchers found a way to reveal real IPs using WebKit features, impacting iCloud+ subscribers.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 2,646 builders reading daily.