11 ms·

Why MAC address randomization is not enough (2016) [pdf]

132 points by wglb 9y ago

coolspot 9y ago
Such new, much upvote - https://news.ycombinator.com/item?id=12074401 https://news.ycombinator.com/item?id=12074401
sillysaurus3 9y ago
"The three golden rules to ensure computer security are: do not own a computer; do not power it on; and do not use it" https://en.wikipedia.org/wiki/Robert_Morris_(cryptographer) https://en.wikipedia.org/wiki/Robert_Morris_(cryptographer)
- ploxiln 9y ago
  Without being facetious, that strategy does work for this particular problem: turn off your wifi if you are walking around, traveling, or not in range of a network you intend to connect to. I also have Bluetooth and NFC off most of the time since I rarely use them. (But then there's the cellular connection of my phone ...)
  - coin 9y ago
    I wish the mobile OS could do that automatically based on the location. Under iOS' settings it does hint at this as Wifi is one of the system services that uses locations services.
    - mortehu 9y ago
      WiFi is used to speed up geolocation, sometimes a lot if you're in a dense city with poor satellite reception. https://en.m.wikipedia.org/wiki/Wi-Fi_positioning_system https://en.m.wikipedia.org/wiki/Wi-Fi_positioning_system
    - AlphaWeaver 9y ago
      With apps like Tasker on Android, you can do this sort of stuff if you're up for a little drag and drop programming...
  - cakemuncher 9y ago
    I'm not sure about iOS, but on Android this is possible with many apps in the app store. Some manufacturers also have "smart settings" in settings of Android that also gives this capability out of the box.
- deleted 9y ago
  [deleted]
p4bl0 9y ago
By some of the same people, also interesting on the same subject: "Defeating MAC Address Randomization Through Timing Attacks" http://papers.mathyvanhoef.com/wisec2016.pdf http://papers.mathyvanhoef.com/wisec2016.pdf
- jwilk 9y ago
  https://news.ycombinator.com/item?id=14782777 https://news.ycombinator.com/item?id=14782777
voltagex_ 9y ago
Is new hardware required for these "Hotspot 2.0" things?
- nuand 9y ago
  Nope, it's all in the MAC and additional usermode services that help phones identify to the network using, in most cases, its SIM.
Bit32 9y ago
N bhh a MN you MNvook y auni Vikn a mnm I MN mmm hu xvBeng Night j mk a. Masu m Ah I . HV mnm

132 points by wglb 9y ago

Such new, much upvote - https://news.ycombinator.com/item?id=12074401 https://news.ycombinator.com/item?id=12074401

"The three golden rules to ensure computer security are: do not own a computer; do not power it on; and do not use it" https://en.wikipedia.org/wiki/Robert_Morris_(cryptographer) https://en.wikipedia.org/wiki/Robert_Morris_(cryptographer)

ploxiln 9y ago
Without being facetious, that strategy does work for this particular problem: turn off your wifi if you are walking around, traveling, or not in range of a network you intend to connect to. I also have Bluetooth and NFC off most of the time since I rarely use them. (But then there's the cellular connection of my phone ...)
- coin 9y ago
  I wish the mobile OS could do that automatically based on the location. Under iOS' settings it does hint at this as Wifi is one of the system services that uses locations services.
  - mortehu 9y ago
    WiFi is used to speed up geolocation, sometimes a lot if you're in a dense city with poor satellite reception. https://en.m.wikipedia.org/wiki/Wi-Fi_positioning_system https://en.m.wikipedia.org/wiki/Wi-Fi_positioning_system
  - AlphaWeaver 9y ago
    With apps like Tasker on Android, you can do this sort of stuff if you're up for a little drag and drop programming...
- cakemuncher 9y ago
  I'm not sure about iOS, but on Android this is possible with many apps in the app store. Some manufacturers also have "smart settings" in settings of Android that also gives this capability out of the box.
deleted 9y ago
[deleted]

p4bl0 9y ago

By some of the same people, also interesting on the same subject: "Defeating MAC Address Randomization Through Timing Attacks" http://papers.mathyvanhoef.com/wisec2016.pdf http://papers.mathyvanhoef.com/wisec2016.pdf

jwilk 9y ago
https://news.ycombinator.com/item?id=14782777 https://news.ycombinator.com/item?id=14782777

voltagex_ 9y ago

Is new hardware required for these "Hotspot 2.0" things?

nuand 9y ago
Nope, it's all in the MAC and additional usermode services that help phones identify to the network using, in most cases, its SIM.

Bit32 9y ago

N bhh a MN you MNvook y auni Vikn a mnm I MN mmm hu xvBeng Night j mk a. Masu m Ah I . HV mnm