Psylo founders disclose three WebKit proxy leaks affecting iCloud Private Relay

Mysk shipped Psylo 1.3.1 to close the paths, which the researchers say can expose a device's IP address or DNS infrastructure.

By · Published

Primary source: Mysk Blog

Why it matters

A privacy browser can configure its proxy correctly and still lose control when WebKit or an operating-system service opens a separate connection. Psylo's patch protects its users, while the reported behavior also reaches other proxy browsers and Apple's iCloud Private Relay.

Illustration of a network diagram highlighting a hidden leak point that could expose a device IP or DNS in Mysk's Psylo WebKit proxy affecting iCloud Private Relay.

Talal Haj Bakry (@hajbakri) and Tommy Mysk (@tommymysk), the founders behind the Psylo privacy browser, disclosed three WebKit behaviors on August 4th that they say can bypass browser-level proxies and expose a user's real network. The pair also shipped Psylo 1.3.1, which blocks or disables the affected features.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.