Conversation

Notices

1. Embed this notice
   DarkMahesvara (darkmahesvara@varishangout.net)'s status on Saturday, 28-Oct-2023 10:05:39 JST DarkMahesvara
   "Three years ago, Apple introduced a privacy-enhancing feature that hid the Wi-Fi address of iPhones and iPads when they joined a network. [...]
   Apple devices have continued to display the real one, which in turn got broadcast to every other connected device on the network.
   [...]
   To the casual observer, the feature appeared to work as advertised. The “source” listed in the request was the private Wi-Fi address. Digging a little further, however, it became clear that the real permanent MAC was still broadcast to all other connected devices, just in a different field of the request."
   
   https://web.archive.org/web/20231027215008/https://arstechnica.com/security/2023/10/iphone-privacy-feature-hiding-wi-fi-macs-has-failed-to-work-for-3-years/
   
   went unnoticed for over 3 years. on android this most likely would have been caught early or even before deployment thanks to the code being open source and forks like GrapheneOS that actually take privacy seriously outside of PR....this is such an amateurish mistake i almost wanna believe its a backdoor lol
   • Embed this notice
     翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Saturday, 28-Oct-2023 10:05:38 JST 翠星石

     in reply to
     @DarkMahesvara It wasn't a backdoor as that didn't allow anyone access to the devices, but that was clearly intentional so appel could claim that they were giving the used privacy, while allowing their spying friends to see the permanent MAC address.
     
     Android is extremely proprietary even if some parts are released under licenses that qualify as "open source" ones and typically the peripheral software that handles Wi-Fi signalling is proprietary, but people know that gulag spies, so people to look at wireshark logs of bluetooth to see how, so I don't think gulag tried it.
   • Embed this notice
     翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Saturday, 28-Oct-2023 20:40:11 JST 翠星石

     in reply to
     @DarkMahesvara >with almost any OS that supports newer devices that aren't two decades old
     Even recent AMD64 computers usually work fine without extra proprietary malware needing to be installed - the main obstacles to OS freedom on modern computers are crappy Wi-Fi cards and GPUs that don't work unless proprietary peripheral software is loaded - but even then, Trisquel GNU/Linux-libre usually works fine.
     
     As for free software down to the BIOS level, the last usable thinkpads were made in 2008 and it hasn't been 20 years as it's not 2028.
     
     Also, the KGPE-D16 was released in 2010 and faster CPUs were released for the G34 socket in 2011 and 2012 and it isn't 2032 yet.
   • Embed this notice
     DarkMahesvara (darkmahesvara@varishangout.net)'s status on Saturday, 28-Oct-2023 20:40:12 JST DarkMahesvara

     in reply to

     • 翠星石
     @Suiseiseki its a backdoor to information they claim to hide. you can also call it a bypass. also see "almost"
     
     AOSP is open source but ofc there are proprietary blobs like with almost any OS that supports newer devices that aren't two decades old