Researchers find WebKit paths that can expose IP addresses despite Apple Private Relay

Security researchers Talal Haj Bakry and Tommy Mysk disclosed WebKit behaviors involving DNS prefetching, WebAuthn and WebTransport that they say can bypass iCloud Private Relay and expose a user's network or real IP address. 404 Media and TechCrunch reported reproducing real-IP exposure with the researchers' proof of concept; Apple had not publicly documented a fix in the sources reviewed Aug. 6.

How outlets across the spectrum are covering this story. We link out — headlines belong to their publishers; the summary above is ours.

• 404 Media · lean-left · factuality: high
  Apple's ‘Private Relay’ Is Exposing Users’ Real IP Addresses
• TechCrunch · center · factuality: medium-high
  PSA: Apple’s Private Relay can leak your real IP address