Apple’s Private Relay isn’t always hiding your IP address, researchers say
A flaw in WebKit leaks real IP addresses, and Apple is already looking into it.
A recent study has revealed that Apple's Private Relay feature may not always effectively conceal a user's IP address. This finding comes from security researchers Tommy Mysk and Talal Haj Bakry, who uncovered a bug in WebKit that allows websites to circumvent Apple's iCloud Private Relay and expose users' actual IP addresses during passkey authentication.
The issue arises when a website requests a passkey or even feigns support for one – at this point, the network request is processed outside of Safari's regular web browser stack. Instead, Apple's system-level credential service takes over and handles the request directly. Apple has acknowledged the report and stated that they are currently investigating the matter.
Written by urgent.news from Android Authority's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
