Conversation

Notices

1. Embed this notice
   Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 20-Oct-2024 18:40:49 JST Ryan Castellucci :nonbinary_flag:

   • GWAA! GWAA!

   @MontgomeryGator It's been widely done in retail for well over a decade, including monitoring "probe requests" that happen when the radio is merely on.

   This is why Google and Apple added MAC address randomization, but it mostly doesn't help when you actually connect, because it'll keep using the same randomized address for the same network.

   • Embed this notice
     John Deters (targetdrone@mastodon.social)'s status on Sunday, 20-Oct-2024 20:41:25 JST John Deters

     in reply to

     • GWAA! GWAA!

     @ryanc @MontgomeryGator iPhones have 3 settings for Private WiFi Address for each AP: off, fixed, or rotating. "Fixed" acts as you describe above, but "rotating" changes every time you connect/auth.

     Uncoincidentally, "rotating" breaks a lot of guest-WiFi portals, so I end up using fixed more often than I'd like.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 20-Oct-2024 20:41:25 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • GWAA! GWAA!
     • John Deters

     @targetdrone @MontgomeryGator Does "rotating" change the DUID and randomize/suppress the hostname?

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Sunday, 20-Oct-2024 20:43:16 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     • GWAA! GWAA!
     • John Deters

     @targetdrone @MontgomeryGator The sweet spot would be rotating after you haven't used a network for 24 hours.