3 ms·

Yep, but I still generated some for myself just in case and fellow hackers can do the same if they want to. iCloud+ was the best $1 / month custom domain email

by SXX 4mo ago

Yep, but I still generated some for myself just in case and fellow hackers can do the same if they want to. iCloud+ was the best $1 / month custom domain email and email alias service with 100GB of E2EE cloud drive. Obviously it will be sad to see it enshittified for seemingly no reason.

reaperducer 4mo ago
[flagged]
- SXX 4mo ago
  You could've at least checked my profile... Problem is that using of own domain is creating huge privacy and cybersecurity risk since you can track all the person profiles across all the databases ever leaked. Its nice as vanity item, but it's better not to use same domain across banks, online forums and porn sites. ;-)
  - chucksmash 4mo ago
    1. Create a domain like myquickanonemailaccount.com. 2. Use the domain exclusively for hosting your own mail, but create a fake account creation page that just temporarily doesn't work. 3. As an added bonus, should you one day get a subpoena for information about one of your site user's online activities, you've got like a 24 hour head start on fleeing the country.
- choilive 4mo ago
  There are no true scotsman
- dang 4mo ago
  Personal attacks aren't acceptable and you've been doing this repeatedly again recently (e.g. https://news.ycombinator.com/item?id=48522089 https://news.ycombinator.com/item?id=48522089) We've had to ask you many times to stop breaking the site guidelines. If you keep doing it, we'll end up having to ban you. I don't want to ban you, so please fix this. It shouldn't be hard to make your substantive points without being an asshole. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- applfanboysbgon 4mo ago
  Yeah, real hackers use a uniquely identifying domain that lets everyone in the world trivially trace all of said hacker's online activity to the same person.
sneak 4mo ago
It's E2EE (only if you turn it on, which you can't do in the UK) but it saves (non-encrypted) the hashes of the plaintext of the files to Apple (presumably for dedup). This allows Apple to see which sets of users share unique Winnie the Pooh memes. They know who had them first, who they sent them to, and when. The E2EE is useless with such unencrypted metadata leaks. https://www.youtube.com/watch?v=tL8_caB35Pg https://www.youtube.com/watch?v=tL8_caB35Pg
- SXX 4mo ago
  > only if you turn it on, which you can't do in the UK Fortunately changing Apple account country is as easy as buying US gift card on Amazon and unlike Google they dont mess with account location. As about encryption I totally agree its pretty meh, but again it's not why I paid my $1.
  - sneak 4mo ago
    It’s not based on Apple account country, and even if it were, it’s not nearly that simple to switch it.
    - SXX 4mo ago
      Did you checked it? I did. I do have Apple devices in UK that have E2EE enabled and it works just fine. Switching account country is super straightforward: cancel subscriptiona, change address to US, top up with apple gift card from amazon us. No US payment details needed.

by SXX 4mo ago

reaperducer 4mo ago

[flagged]

SXX 4mo ago
You could've at least checked my profile... Problem is that using of own domain is creating huge privacy and cybersecurity risk since you can track all the person profiles across all the databases ever leaked. Its nice as vanity item, but it's better not to use same domain across banks, online forums and porn sites. ;-)
- chucksmash 4mo ago
  1. Create a domain like myquickanonemailaccount.com. 2. Use the domain exclusively for hosting your own mail, but create a fake account creation page that just temporarily doesn't work. 3. As an added bonus, should you one day get a subpoena for information about one of your site user's online activities, you've got like a 24 hour head start on fleeing the country.
choilive 4mo ago
There are no true scotsman
dang 4mo ago
Personal attacks aren't acceptable and you've been doing this repeatedly again recently (e.g. https://news.ycombinator.com/item?id=48522089 https://news.ycombinator.com/item?id=48522089) We've had to ask you many times to stop breaking the site guidelines. If you keep doing it, we'll end up having to ban you. I don't want to ban you, so please fix this. It shouldn't be hard to make your substantive points without being an asshole. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
applfanboysbgon 4mo ago
Yeah, real hackers use a uniquely identifying domain that lets everyone in the world trivially trace all of said hacker's online activity to the same person.

sneak 4mo ago

It's E2EE (only if you turn it on, which you can't do in the UK) but it saves (non-encrypted) the hashes of the plaintext of the files to Apple (presumably for dedup). This allows Apple to see which sets of users share unique Winnie the Pooh memes. They know who had them first, who they sent them to, and when. The E2EE is useless with such unencrypted metadata leaks. https://www.youtube.com/watch?v=tL8_caB35Pg https://www.youtube.com/watch?v=tL8_caB35Pg

SXX 4mo ago
> only if you turn it on, which you can't do in the UK Fortunately changing Apple account country is as easy as buying US gift card on Amazon and unlike Google they dont mess with account location. As about encryption I totally agree its pretty meh, but again it's not why I paid my $1.
- sneak 4mo ago
  It’s not based on Apple account country, and even if it were, it’s not nearly that simple to switch it.
  - SXX 4mo ago
    Did you checked it? I did. I do have Apple devices in UK that have E2EE enabled and it works just fine. Switching account country is super straightforward: cancel subscriptiona, change address to US, top up with apple gift card from amazon us. No US payment details needed.