Live data from Hacker News

iOS 8 randomises the MAC address while scanning for WiFi networks

twitter.com

21–30 of 264 posts

Re: iOS 8 randomises the MAC address while scanning for WiFi networks

#21
post #7

Earlier quoted context omitted.

What stops them from switching to tracking via the hardware address of the cellular radio?

You can only get that kind of information (e.g. IMEI) if you use IOKit, and you can't submit to the App Store if your app uses IOKit if you're not a part of the MFi (Made for iOS) program, i.e. a hardware manufacturer. Edit: I'm really getting confused with downvoting on HN. How exactly is this comment poor?

Correct me if I'm wrong, but $tracking_co would just need to get their instore-tracker5000 approved by apple and then they are back to their old ways? I know that may not be cheap/easy for them, but still reasonably within reach.

Re: iOS 8 randomises the MAC address while scanning for WiFi networks

#22
post #6

If this becomes the trend (which in my opinon would be nice) it will become a big problem for companies that specialise in customer tracking e.g. for supermarkets and big department stores. Previously it was quite easy to track a customer, how long he or she spends time in the store, which floors he or she visits, etc. by putting up dummy WiFI-networks that the customers phones find by giving out their MAC-addresses.

Good. It should be a problem for them.

I'm genuinely curious, how does it being a problem for them benefit you? (I'm assuming you're not saying that out of indifferent malice but because you have personal gains, which is normal.)

Can you please elaborate on your point?

Re: iOS 8 randomises the MAC address while scanning for WiFi networks

#23

MAC address ranges are assigned to device manufacturers, I wonder if they'll only randomize inside the Apple device range or if they'll go outside of it. Analytics companies might start seeing people carrying their sparcstations into the grocery store.

Globally administered MAC address ranges are assigned to manufacturers. The slide said "random, "locally* administered" addresses, which aren't assigned that way. There's a bit in the first octet to distinguish them; see https://en.wikipedia.org/wiki/Ethernet_address#Address_detai... .

Re: iOS 8 randomises the MAC address while scanning for WiFi networks

#24

There's a great app for rooted Android devices called Pry-fi that generates random MAC addresses while you're not connected to a network. edit: https://play.google.com/store/apps/details?id=eu.chainfire.p...

OpenBSD's ifconfig has a flag that will cause the NIC to use a random MAC address, assuming your card allows for it.

Re: iOS 8 randomises the MAC address while scanning for WiFi networks

#25
post #21

Earlier quoted context omitted.

You can only get that kind of information (e.g. IMEI) if you use IOKit, and you can't submit to the App Store if your app uses IOKit if you're not a part of the MFi (Made for iOS) program, i.e. a hardware manufacturer. Edit: I'm really getting confused with downvoting on HN. How exactly is this comment poor?

Correct me if I'm wrong, but $tracking_co would just need to get their instore-tracker5000 approved by apple and then they are back to their old ways? I know that may not be cheap/easy for them, but still reasonably within reach.

Wouldn't you also need to install their application? The previous technology used builtin features (wifi scanning).

Re: iOS 8 randomises the MAC address while scanning for WiFi networks

#27

Earlier quoted context omitted.

Good. It should be a problem for them.

I'm genuinely curious, how does it being a problem for them benefit you? (I'm assuming you're not saying that out of indifferent malice but because you have personal gains, which is normal.) Can you please elaborate on your point?

Most people, if it explained to them, would be generally uncomfortable with the idea of their movements in a public place being so specifically logged.

How would you feel if every time you were in a store, an employee followed you around and took notes on your actions?

Re: iOS 8 randomises the MAC address while scanning for WiFi networks

#29
post #6

If this becomes the trend (which in my opinon would be nice) it will become a big problem for companies that specialise in customer tracking e.g. for supermarkets and big department stores. Previously it was quite easy to track a customer, how long he or she spends time in the store, which floors he or she visits, etc. by putting up dummy WiFI-networks that the customers phones find by giving out their MAC-addresses.

Privacy is inversely proportional to utility. It's basically the first rule of privacy.

Re: iOS 8 randomises the MAC address while scanning for WiFi networks

#30
post #25
post #21

Earlier quoted context omitted.

Correct me if I'm wrong, but $tracking_co would just need to get their instore-tracker5000 approved by apple and then they are back to their old ways? I know that may not be cheap/easy for them, but still reasonably within reach.

Wouldn't you also need to install their application? The previous technology used builtin features (wifi scanning).

Yes. And for that use case - intentionally tracking one's location (for maps, proximity alerts, etc.) through an app - there is iBeacon.
Post reply on HN