5 ms·

This is a great case for using iCloud “hide my email.” Curiously, I tried using it with “sign in with Apple” on slack and slack rejected it as a “hidden email.”

This is a great case for using iCloud “hide my email.” Curiously, I tried using it with “sign in with Apple” on slack and slack rejected it as a “hidden email.” I was able to circumvent that by using the regular sign in flow with a pre-generated “hide my email” address.

dkdbejwi383 4y ago
> and slack rejected it as a “hidden email.” Wow, that's pretty scummy behaviour! I wonder what the rationale is behind this?
- crote 4y ago
  Spammers and scammers. People are constantly trying to use any service for illicit purposes. A somewhat-easy way to deal with that is to just ban them. Because an email address is used as username and an email address usually maps 1:1 to a person, this means you just got rid of a Bad Person. This breaks if access to new email addresses is trivial. You now have to invest actual effort into validating that a new account isn't someone trying to do bad stuff. Or you can just block all the services providing easy access to email addresses and outsource the issue to big providers like GMail and Apple. It's a lot less effort, and you'll lose near-zero legitimate customers...
  - mthoms 4y ago
    True, but Apple's hidden emails are tied to a real credit card (not free) and can't be generated in bulk (AFAIK). I'm not inclined to give any service the benefit of the doubt here until there is some evidence that Apple emails are indeed being used for this purpose. I haven't seen any such evidence (but I'm open to it).
- eclipticplane 4y ago
  Slack gets used as Command and Control servers for malware and bot networks -- same as Discord. They are commonly installed so their network traffic isn't suspicious. They're also free. Blocking "hidden email" services is an easy first line of defense. You also can't register with mailinator.com email, for example.
  - mthoms 4y ago
    Apple's hidden emails aren't free. They are tied to a credit card and a phone number. It seems to me they are less likely to be abused than gmail.
crossroadsguy 4y ago
I think only those users use Apple’s HideMyEmail who have promised themselves to forever use Apple devices and forever having the paid plan, and never want to start a mail conversation from any of those emails. For others a domain, a mail provider works best with catch-all.
thewebcount 4y ago
How can they tell any iCloud address is a “hide my email” address? They generally use real words plus a number. Something like coffee_bike57@icloud.com. That seems like something a real human could also think up.
- jackson1442 4y ago
  when you do it through Sign in with Apple (not the autofill field on your keyboard) it looks more like oalshjidfa9378rha@privaterelay.apple.com
benhurmarcel 4y ago
For those who don't use iCloud, DuckDuckGo also has the same service with @duck.com emails.

dkdbejwi383 4y ago

> and slack rejected it as a “hidden email.” Wow, that's pretty scummy behaviour! I wonder what the rationale is behind this?

crote 4y ago
Spammers and scammers. People are constantly trying to use any service for illicit purposes. A somewhat-easy way to deal with that is to just ban them. Because an email address is used as username and an email address usually maps 1:1 to a person, this means you just got rid of a Bad Person. This breaks if access to new email addresses is trivial. You now have to invest actual effort into validating that a new account isn't someone trying to do bad stuff. Or you can just block all the services providing easy access to email addresses and outsource the issue to big providers like GMail and Apple. It's a lot less effort, and you'll lose near-zero legitimate customers...
- mthoms 4y ago
  True, but Apple's hidden emails are tied to a real credit card (not free) and can't be generated in bulk (AFAIK). I'm not inclined to give any service the benefit of the doubt here until there is some evidence that Apple emails are indeed being used for this purpose. I haven't seen any such evidence (but I'm open to it).
eclipticplane 4y ago
Slack gets used as Command and Control servers for malware and bot networks -- same as Discord. They are commonly installed so their network traffic isn't suspicious. They're also free. Blocking "hidden email" services is an easy first line of defense. You also can't register with mailinator.com email, for example.
- mthoms 4y ago
  Apple's hidden emails aren't free. They are tied to a credit card and a phone number. It seems to me they are less likely to be abused than gmail.

crossroadsguy 4y ago

I think only those users use Apple’s HideMyEmail who have promised themselves to forever use Apple devices and forever having the paid plan, and never want to start a mail conversation from any of those emails. For others a domain, a mail provider works best with catch-all.

thewebcount 4y ago

How can they tell any iCloud address is a “hide my email” address? They generally use real words plus a number. Something like coffee_bike57@icloud.com. That seems like something a real human could also think up.

jackson1442 4y ago
when you do it through Sign in with Apple (not the autofill field on your keyboard) it looks more like oalshjidfa9378rha@privaterelay.apple.com

benhurmarcel 4y ago

For those who don't use iCloud, DuckDuckGo also has the same service with @duck.com emails.