4 ms·

I get the idea from reading this paper that the authors don't have much networking experience. Having lots of MAC addresses randomly changing in your network is

I get the idea from reading this paper that the authors don't have much networking experience. Having lots of MAC addresses randomly changing in your network is more than a potential headache. It can really cause stuff to break and the authors don't even address that. At the very least, I expected a discussion of arp for IPv4 and ICMPv6/NDP/RA/SLAAC/DHCPv6 for IPv6. But beyond that, I really need to see some discussion on the effect of randomization on L2 security mechanisms like limiting MAC learning on ports. A smart thing to do if you're a network admin concerned about security is to limit the number of MACs that can be learned on a given port/vlan. So randomizing MACs on devices would cause some devices to just drop connection occasionally. The authors don't address this. It's almost like they don't even realize that MAC addresses are used for things in networks besides invading people's privacy. There might be very good reasons why manufacturers of mobiles do things the way they do them. However, it doesn't look like the author's reached out vendors at all to ask.

hamsandwiched 10y ago
You're missing a key point - MAC addresses don't randomize while connected to a network, they only change while in a disassociated state. They need to use their true, assigned MAC while associated to a network. The authors aren't proposing the use of randomization while associated to a network. Instead they're showing how current implementations aren't achieving their intent.
- sidebars 10y ago
  Its almost as if he didn't read the paper or understand WiFi.
- AndyMcConachie 10y ago
  I missed that small but important tidbit in section 2.2, now I see it. But then in section 4 they mention mDNS. Which confuses me, because L2 switches will definitely learn MACs on mDNS traffic. It also brings up another question I have which is what about roaming? And what about setups where there are L2 switches between radios and the devices that handle the 802.11 authentication? How does randomization affect learning in those environments? In general I would have appreciated more discussion on on how randomization affects L2 switches and the protocols I mentioned. Either that, or ask someone at Google why Android behaves the way it does.
bob_cryptopants 10y ago
Wow Andy, go back to school. Once for English Comprehension (so you can read the paper and not just the news headline), and again for basic 802.11 theory. You are an idiot. First off, you missed the part about the MAC addresses being randomized when they are unassociated. Key word there is unassociated. It means "not connected to any network". ARP and everything else are only present when clients are associated (meaning they are part of the network; joined). The paper talks about tracking devices that are NOT connected to any network as they move about an 802.11 rich environment. Bonus for you when you DO go through a class on WiFi, pay attention to what devices do when they aren't associated and re-read the paper. It will make a lot more sense to you then. Think first, type later bro.

hamsandwiched 10y ago

You're missing a key point - MAC addresses don't randomize while connected to a network, they only change while in a disassociated state. They need to use their true, assigned MAC while associated to a network. The authors aren't proposing the use of randomization while associated to a network. Instead they're showing how current implementations aren't achieving their intent.

sidebars 10y ago
Its almost as if he didn't read the paper or understand WiFi.
AndyMcConachie 10y ago
I missed that small but important tidbit in section 2.2, now I see it. But then in section 4 they mention mDNS. Which confuses me, because L2 switches will definitely learn MACs on mDNS traffic. It also brings up another question I have which is what about roaming? And what about setups where there are L2 switches between radios and the devices that handle the 802.11 authentication? How does randomization affect learning in those environments? In general I would have appreciated more discussion on on how randomization affects L2 switches and the protocols I mentioned. Either that, or ask someone at Google why Android behaves the way it does.

bob_cryptopants 10y ago

Wow Andy, go back to school. Once for English Comprehension (so you can read the paper and not just the news headline), and again for basic 802.11 theory. You are an idiot. First off, you missed the part about the MAC addresses being randomized when they are unassociated. Key word there is unassociated. It means "not connected to any network". ARP and everything else are only present when clients are associated (meaning they are part of the network; joined). The paper talks about tracking devices that are NOT connected to any network as they move about an 802.11 rich environment. Bonus for you when you DO go through a class on WiFi, pay attention to what devices do when they aren't associated and re-read the paper. It will make a lot more sense to you then. Think first, type later bro.