Apple’s iCloud Private Relay isn’t as private as you think

How Does the Leak Occur?

New security research indicates that Apple's i Cloud Private Relay may not fully conceal users' IP addresses. This finding challenges Apple's claims regarding the privacy feature. Users who subscribe to i Cloud+ and depend on Private Relay for anonymity could be affected.

The research was conducted by security experts Tommy Mysk and Talal Haj Bakry. Their work, initially reported by 404 Media, suggests a significant vulnerability. Private Relay is designed to mask a user's IP address when browsing with Safari.

Is My Privacy at Risk?

The vulnerability appears to stem from how Private Relay interacts with certain network conditions. Under specific circumstances, the system can inadvertently expose the user's true IP address. This bypasses the intended privacy protections.

This means that while users believe their online activity is private, their location data might still be accessible. The exact technical mechanism behind the leak is complex. It involves the interplay between the device's network stack and Private Relay's routing.

# What is i Cloud Private Relay?

Yes, if you rely solely on i Cloud Private Relay for anonymity, your privacy could be compromised. The research shows that the feature does not always perform as advertised. Your real IP address, which can reveal your general location, might be exposed.

# How does this leak affect me?

This discovery raises questions about the effectiveness of Apple's privacy safeguards. Users expect robust protection when using such services. The findings suggest a gap between expectation and reality for this particular feature.

i Cloud Private Relay is an Apple service for i Cloud+ subscribers. It aims to protect user privacy by routing internet traffic through two separate relays. This process is designed to hide a user's IP address from websites and network providers.

# What should I do if I'm concerned?

If you use i Cloud Private Relay, your actual IP address might be exposed in certain situations. This means your general location could be revealed to websites or services you visit, despite using the privacy feature.

Users concerned about this vulnerability might consider using alternative privacy tools. These could include reputable VPN services or other browser-based privacy extensions. It is advisable to stay informed about updates from Apple regarding this issue.