Apple Maildrop lets you rewrite the filename, size, and icon on any icloud.com attachment link — no signature, no validation — reported July 2023, still live
Source: Reddit
Published:
<p>NOT SO CALL BRAINDEAD QUOTERS OF AI SLOP - LOL. New public disclosure: MAILDROP-01 Apple's Maildrop attachment service generates icloud.com URLs with three unsigned, client-controlled parameters: - f= — filename shown on the landing page, AND interpolated as ${f} in the CDN download path - sz= —