Apple’s Privacy Features Face Scrutiny Amid Bugs

Apple has long positioned itself as a champion of user privacy and security. Former CEO Tim Cook even described privacy as a “fundamental human right.” However, recently, the company’s reputation for a secure environment has come under fire due to a surge in software bugs and ineffective security features. A new report now suggests that Apple’s iCloud Private Relay, designed like a VPN service, may not actually conceal users’ IP addresses as intended.

Diving into this, Apple initially showcased several privacy-enhancing features for iCloud+ users during the WWDC 2021 event. One standout was Hide My Email, a service created to keep users’ emails hidden from websites and marketers. Unfortunately, as highlighted by one case involving threats made against the girlfriend of FBI Director Kash Patel, Hide My Email falls short. Apple retains access to the original sender’s email, which can be disclosed to government entities if requested. To make matters worse, a bug discovered later revealed that this feature doesn’t genuinely obscure email addresses from anyone, despite previous assertions. So much for robust privacy.

Apple’s lapses continue to accumulate, suggesting that a significant reset might be necessary.

Another feature unveiled during that same presentation, iCloud Private Relay, is also under scrutiny. This service was intended to act as a lightweight VPN for users of Safari by keeping their IP addresses hidden from websites. However, while it was supposed to block site access to the IP address, it seems that it doesn’t prevent apps from seeing it.

A recent report suggests that iCloud Private Relay may not effectively shield IP addresses due to a bug in Apple’s web browser engine, WebKit. This glitch reportedly allows the user’s true IP address to be revealed when a site verifies a passkey linked to the user’s account. Alarmingly, this flaw appears to affect other browsers utilizing WebKit across iOS, iPadOS, and macOS, meaning this could impact a broader array of Apple’s services.

Steps to Safeguard Your IP Address Against iCloud Private Relay Issues

Fortunately, there are some steps you can take to protect yourself. First, since this problem relates to passkeys, accounts using a traditional username and password method should not trigger IP address exposure. If you are concerned about your privacy, it’s advisable to remove any passkeys from your device and switch to conventional logins until an official fix is implemented.

Secondly, using third-party VPN services remains a safe option since they aren’t affected by this bug. If you use a reputable VPN provider like Proton VPN or ExpressVPN, ensure it is correctly set up so you can still keep your IP address private.

Is There a Path Forward for Apple?

Apple is actively investigating this issue, but this hasn’t halted legal action against the company. Recently, a class-action lawsuit was filed, alleging false advertising and fraud, echoing complaints similar to those related to delays in Apple Intelligence features. In a prior incident, Apple agreed to a $250 million settlement to resolve disputes.

Apple’s ongoing challenges clearly indicate a pressing need for substantial change. Fortunately, change is on the horizon. This fall, Tim Cook will step down as CEO, passing the leadership baton to John Ternus, the current senior vice president of hardware engineering and a longstanding member of the Apple team since 2001. While it’s uncertain how Ternus will navigate his new role, the tech community harbors hope that a “product-focused” approach might revitalize the company, contrasting with Cook’s operational emphasis.

This year also marks a significant period for Apple’s software development teams, with upcoming major versions of iOS, iPadOS, macOS, and watchOS aimed at improving user experience by fixing bugs and enhancing performance. Early feedback from beta testers suggests that these updates are promising, but the true test will come when users adopt them more broadly. Let’s hope there are accompanying privacy and security enhancements to reverse the current trend for Apple.