Apple says it fixed a vulnerability that could expose real addresses behind Hide My Email on or around July 3, but we reproduced the flaw two weeks after the company's claimed repair date. Our test found that a sender who possessed a specific Hide My Email alias could reveal the real address behind it with much technical knowledge. Users can provide a different alias to each website or service instead of sharing a permanent email address. AppleInsider reproduced the flaw on July 17AppleInsider tested the flaw on July 17 and confirmed that the process could reveal the real address behind a Hide My Email alias. The vulnerability was real, but its practical risk was limitedThe flaw undermined the core promise of Hide My Email.