3 ms·

I'm not making any judgement on the practice itself, however, for the purposes of tracking, I suspect they use the BSSID The SSID is just the mutable part so y

I'm not making any judgement on the practice itself, however, for the purposes of tracking, I suspect they use the BSSID The SSID is just the mutable part so you can opt-out, the actual identifier used is much more likely to be the BSSID which should be universally unique, and is (generally, or at least practically) immutable for any one piece of hardware.

extra88 5y ago
Right, BSSID (i.e. the MAC address of the router's WiFi interface) of an access point, unlike a client, needs to be remain consistent. But that's irrelevant to the threat model I was replying to.