4 ms·

My understanding is that apple's MAC randomization tries to give each SSID a different MAC but records the mapping so that the next time you connecct to a known

by gumby 3y ago

My understanding is that apple's MAC randomization tries to give each SSID a different MAC but records the mapping so that the next time you connecct to a known SSID you get the same MAC. I can see why they would choose to do this -- it provides some privacy while not confusing most users (who might have to reauthenticate, or might no longer be in an allow list). I'd prefer to get a new one each time I connected to an SSID but I'm sure I'm in the minority.* I wouldn't be surprised if every one of these devices had the same SSID. Why not? * 99.999% of the population wouldn't know a MAC if it bit them on the nose, and I'm sure prefer it that way. Not an unreasonable position to take, TBH.

gruez 3y ago
> My understanding is that apple's MAC randomization tries to give each SSID a different MAC but records the mapping so that the next time you connecct to a known SSID you get the same MAC. And that's if you actually joined the network (who joins a billboard's wifi network these days? Celluar data is plentiful even for cheap plans). If not, the only MAC that's sent is a random phone that's reset every scan/15 minutes (forgot which one it was).
- jbverschoor 3y ago
  It keeps the max address when connected. Overall the whole this doesn’t work anymore since any 10 years. It’s false information to a certain degree.. It will work for people just passing by. What does work is sending out btle beacon signals, putting a sdr 5G cell. The whole market for this kind of tracking is filled with fake data..
  - gruez 3y ago
    >putting a sdr 5G cell. That sounds super illegal because the spectrum 5G operates on requires a license to use. You can partner with cell carriers to use their licenses, but why would they partner with you? They'll be quite happy to use their existing infrastructure and hoard the data for themselves.
    - jbverschoor 3y ago
      You can get 5g extenders. For example, if your connection is bad, some provider offer indoor 5G stations. Not sure how they deal with the license in that case
SpaghettiCthulu 3y ago
As far as I've been able to tell from testing, Android's does this too. Edit: unless you enable "Wi-Fi non-persistent MAC randomization" in developer options (this should be the default imo, and should be a per-network option like persistent randomization and device mac address)
- gumby 3y ago
  I want this feature on by default, but recognize that all but a tiny number of users will be confused and inconvenienced by this when using a public wifi. Imagine using this in India where they law requires that every public wifi require a phone number to authenticate before use.

by gumby 3y ago

gruez 3y ago

> My understanding is that apple's MAC randomization tries to give each SSID a different MAC but records the mapping so that the next time you connecct to a known SSID you get the same MAC. And that's if you actually joined the network (who joins a billboard's wifi network these days? Celluar data is plentiful even for cheap plans). If not, the only MAC that's sent is a random phone that's reset every scan/15 minutes (forgot which one it was).

jbverschoor 3y ago
It keeps the max address when connected. Overall the whole this doesn’t work anymore since any 10 years. It’s false information to a certain degree.. It will work for people just passing by. What does work is sending out btle beacon signals, putting a sdr 5G cell. The whole market for this kind of tracking is filled with fake data..
- gruez 3y ago
  >putting a sdr 5G cell. That sounds super illegal because the spectrum 5G operates on requires a license to use. You can partner with cell carriers to use their licenses, but why would they partner with you? They'll be quite happy to use their existing infrastructure and hoard the data for themselves.
  - jbverschoor 3y ago
    You can get 5g extenders. For example, if your connection is bad, some provider offer indoor 5G stations. Not sure how they deal with the license in that case

SpaghettiCthulu 3y ago

As far as I've been able to tell from testing, Android's does this too. Edit: unless you enable "Wi-Fi non-persistent MAC randomization" in developer options (this should be the default imo, and should be a per-network option like persistent randomization and device mac address)

gumby 3y ago
I want this feature on by default, but recognize that all but a tiny number of users will be confused and inconvenienced by this when using a public wifi. Imagine using this in India where they law requires that every public wifi require a phone number to authenticate before use.