4 ms·
Not sure if it's a thing of the past, but not too long ago you could use monitor mode to pickup iphones within range and see their AP connection history includi
by throwaway743 5y ago
Not sure if it's a thing of the past, but not too long ago you could use monitor mode to pickup iphones within range and see their AP connection history including, iirc, mac addresses. You could then use wigle to map out paths. Creepy shit.
It's also used for indoor positioning software and pretty sure it's enabled (or at least possible according to vendor patents) on MTA's subway routers/aps. Which again is very creepy if they're using it to track devices with wifi on but not connected.
- ArchOversight 5y agoIt's not just iPhones, it's any wireless device that is actively scanning for a previously associated access point. These days iPhones will change the MAC address while doing wifi scans to a random one so you can't track individual iPhones anymore.
- iszomer 5y agoSome Android phones allow you to toggle this feature though it wrecks with MAC filtering at home and elsewhere if required.
- MayeulC 5y agoUsually devices will randomize their MAC when scanning, and pick a MAC associated with the SSID: https://android.stackexchange.com/questions/225839/android-10-and-11-get-new-random-mac-for-same-ssid-without-factory-reset https://android.stackexchange.com/questions/225839/android-1...
- fullstop 5y agoI found this by accident once, and promptly deleted all of my unused connections. I had stuff from hotels, airports, Disney World, and other locations.
- blitzar 5y agoIt was also a pretty good way to do Man-in-the-middle attacks, if the phone is looking for starbucks wifi or other known open wifi you could jump right in there.
- fullstop 5y agoYes, I joked that I could create one called attwifi and hang out next to Home Depot. If you made faked bank websites or PayPal you could likely capture some credentials.
- thrashh 5y agoMany cities track wireless device broadcasts to measure traffic flow.