Apple's Private Relay: Privacy So Good It Leaks Your IP Three Different Ways

Security researchers at Mysk discovered three separate leaks in Apple's Private Relay and all other WebKit-based browser proxies (including Tor browsers on iOS) that expose users' real IP addresses to any website. The leaks occur through DNS prefetching, WebAuthn Related Origin Requests, and WebTransport — all of which bypass the proxy to connect directly from the device. VPNs are unaffected since they operate device-wide. The researchers published the findings immediately without reporting to Apple, citing the company's history of taking over a year to address similar privacy bugs.