Apple's Private Relay feature could reveal your IP address to websites and services
Security researchers found an issue with Apple's WebKit browser engine that affects Private Relay.
Apple's Private Relay feature, designed to conceal your IP address while browsing on Safari, may inadvertently reveal your IP due to a WebKit issue, according to researchers Talal Haj Bakry and Tommy Mysk. The problem stems from how passkeys, a new secure login method, interact with the private relay when logging into websites or services.
Passkeys trigger authentication requests outside the browser, potentially exposing your IP address. This issue isn't limited to Safari; any iOS browser utilizing WebKit, such as OnionBrowser and the researchers' Psylo browser, could also be vulnerable. Apple has acknowledged the issue and is investigating, but a fix may be delayed as seen with previous iCloud features.
Written by urgent.news from Engadget's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.