Apple's Private Relay Vulnerability Exposes User IP Addresses

Apple's Private Relay feature, intended to conceal user IP addresses while browsing Safari, has been found to have significant vulnerabilities. Researchers disclosed that flaws in Apple's web browser engine allow attackers to reveal users' real IP addresses. A testing website was created to demonstrate these leaks, confirming the issue's validity. The researchers opted not to report the vulnerabilities to Apple due to previous negative experiences with the company's response. The vulnerabilities affect users of Apple's iCloud Private Relay, potentially exposing their identities while browsing. Apple has not yet responded to requests for comments on the matter. The issue was first reported by 404 Media, and the researchers have developed a private browser called Psylo that mitigates these leaks.

Key Points: • Apple's Private Relay feature is leaking users' real IP addresses due to browser engine flaws. • Researchers created a website to demonstrate the IP address leaks, confirming the vulnerabilities. • The vulnerabilities affect users of Apple's iCloud Private Relay and have not been reported to Apple.