[winstonwinston]

> Is this a theory or did you test this yourself?

This is just a pointer for exercise you could do if you are interested. I can’t tell what is the actual HME vulnerability they claim to exist.

[js2]

Why don't you give it a try and report back.

[winstonwinston]

I did but where is fun in that. When I got involved in infosec community decades ago, veterans told me then, I should always investigate for myself, not just reading someones reports, they were right. That’s why I suggested it, because you seemed interested.

[js2]

Were you able to unmask an HME address via SMTP or not? If so, was the real address an iCloud.com address?