Comment by SXX

15 days ago

Yep, but I still generated some for myself just in case and fellow hackers can do the same if they want to.

iCloud+ was the best $1 / month custom domain email and email alias service with 100GB of E2EE cloud drive.

Obviously it will be sad to see it enshittified for seemingly no reason.

10 comments

SXX

Reply
sneak  15 days ago

It's E2EE (only if you turn it on, which you can't do in the UK) but it saves (non-encrypted) the hashes of the plaintext of the files to Apple (presumably for dedup).

This allows Apple to see which sets of users share unique Winnie the Pooh memes. They know who had them first, who they sent them to, and when.

The E2EE is useless with such unencrypted metadata leaks.

https://www.youtube.com/watch?v=tL8_caB35Pg

  • SXX  15 days ago

    > only if you turn it on, which you can't do in the UK

    Fortunately changing Apple account country is as easy as buying US gift card on Amazon and unlike Google they dont mess with account location.

    As about encryption I totally agree its pretty meh, but again it's not why I paid my $1.

reaperducer  15 days ago

[flagged]

  • SXX  15 days ago

    You could've at least checked my profile...

    Problem is that using of own domain is creating huge privacy and cybersecurity risk since you can track all the person profiles across all the databases ever leaked.

    Its nice as vanity item, but it's better not to use same domain across banks, online forums and porn sites. ;-)

    • chucksmash  15 days ago

      1. Create a domain like myquickanonemailaccount.com.

      2. Use the domain exclusively for hosting your own mail, but create a fake account creation page that just temporarily doesn't work.

      3. As an added bonus, should you one day get a subpoena for information about one of your site user's online activities, you've got like a 24 hour head start on fleeing the country.

  • applfanboysbgon  15 days ago

    Yeah, real hackers use a uniquely identifying domain that lets everyone in the world trivially trace all of said hacker's online activity to the same person.