4 ms·

I've yet to find one of these types of services that you can't access by spoofing the MAC address of a real customer. A while back, Intel removed MAC address s

I've yet to find one of these types of services that you can't access by spoofing the MAC address of a real customer. A while back, Intel removed MAC address spoofing from some of its wireless cards through a driver update, citing vague "security" concerns. I felt very up in arms about it for a while (why on Earth would you hobble your customer's products so you can make sure they can't violate your moral code!), but eventually decided I couldn't really complain, since the only reason I could think of that I might want such an ability would be to steal internet access.

mindslight 14y ago
When you say they 'removed MAC address spoofing', do you mean that they removed features that allow the card to work having duplicated an active address, or do you mean that they removed the ability for you to set the address at all? The latter has many uses, including simply not being tracked across every network session. To add this kind of antifeature truly is hobbling their customers' devices in pursuit of someone else's security.
- paulgb 14y ago
  In fact, a story about MAC spoofing for privacy is on front page of HN today: http://erratasec.blogspot.com/2013/01/i-conceal-my-identity-same-way-aaron.html http://erratasec.blogspot.com/2013/01/i-conceal-my-identity-...