Apple Maildrop lets you rewrite the filename, size, and icon on any icloud.com attachment link — no signature, no validation — reported July 2023, still live
New public disclosure: MAILDROP-01 Apple's Maildrop attachment service generates icloud.com URLs with three unsigned, client-controlled parameters: - f= — filename shown on the landing page, AND interpolated as ${f} in t
📄
This source provides headlines only. Use the button below to read the complete article on the original site.
📰 Read the original article on r/netsec
Originally published by r/netsec. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.