Can someone post a TLDR? Twitter blocks Tor exit nodes, so the content is unavailable:
> 403 Forbidden: The server understood the request, but is refusing to fulfill it.
Milan Airport WiFi sends your MAC address to advertisers and trackers
41–50 of 64 posts
Re: Milan Airport WiFi sends your MAC address to advertisers and trackers
#42iPhones randomize the MAC address when connecting to hotspots (on a per-ssid basis, I think?). Other platforms do too (Windows 10 now has an option to do that automatically as well, but I can’t recall if it is enabled by default).
The MAC randomization only applies to probes it sends for known networks when not connected. Once you are connected, it uses the real MAC.
iPhone also still sends the device name to the DHCP server when requesting an IP, so if you haven't changed it, it is broadcasting "'s iPhone" to the network.
Re: Milan Airport WiFi sends your MAC address to advertisers and trackers
#43Earlier quoted context omitted.
Since MAC address ranges are allocated to certain manufacturers, it is a simple way to track your device type. Additionally, all MAC addresses are unique so it is the easiest way to match/combine your data from different trackers.
Knowing whether someone has a Qualcomm, Broadcomm, Intel, or Foxconn WiFi card doesn't seem that useful for profiling. Of course, the location tracking based on your device's network discovery packets is a whole bigger issue.
That's how it works for something like a network card, but on smartphones, MAC addresses from the device vendor (Apple, Huawei, Xiamo, Motorola, ..) are used, even if the WiFi chip on all those devices is from the same manufacturer.
Re: Milan Airport WiFi sends your MAC address to advertisers and trackers
#44On my Mac, I leave this running all the time:
Re: Milan Airport WiFi sends your MAC address to advertisers and trackers
#45Based on the screenshots it looks like the mac address is leaking out because its in the referer. I would guess this isn't intentional and shouldn't be hard to fix. I've worked with a number of captive portal systems and they all basically work the same way. The AP/controller intercepts http requests and redirects to the captive portal page with identifying information about the device (ip,mac,ssid,ap_mac,etc.). The…
While the mac address is a particularly egregious note, really they shouldn't be sending any data to ad firms whatsoever without consent, and fixing the referrer alone won't help much.
Aside from the data they're explicitly sending in those requests, they're running the response as JS, thereby exposing a bunch of data about your machine & browser, and the response itself is setting a long-term 3rd party cookie too, so that ads on every other site you ever visit can tie all this (and the fact you've used the wifi in this airport) to a long-term profile.
In Milan airport you can make a reasonable bet that most people are EU citizens, so sharing any of their identifiable user data at all for marketing purposes without consent is a huge and expensive no no.
It's not a good look. Referrer aside, I suspect there's no legal option other than dropping this ad script from their wifi login page entirely.
Re: Milan Airport WiFi sends your MAC address to advertisers and trackers
#46Earlier quoted context omitted.
It is gypsy code and works for me. Use macchanger instead of adopt the script for your purposes.
What is "gypsy code"? I first thought you were referring to a library or some kind of platform, but that doesn't seem to be it. The only definition I find of gypsy is that of the people. Maybe you're saying that it was written by a Gypsy, but I don't know why that'd be of interest.
It meant a quick and dirty fix.
Re: Milan Airport WiFi sends your MAC address to advertisers and trackers
#47iPhones randomize the MAC address when connecting to hotspots (on a per-ssid basis, I think?). Other platforms do too (Windows 10 now has an option to do that automatically as well, but I can’t recall if it is enabled by default).
The MAC randomization only applies to probes it sends for known networks when not connected. Once you are connected, it uses the real MAC. iPhone also still sends the device name to the DHCP server when requesting an IP, so if you haven't changed it, it is broadcasting " 's iPhone" to the network.
> iPhone also still sends the device name to the DHCP server when requesting an IP, so if you haven't changed it, it is broadcasting "'s iPhone" to the network.
Awareness of this is probably going up. Comcast is actually running TV ads that point it out [1].
Re: Milan Airport WiFi sends your MAC address to advertisers and trackers
#48On my Mac, I leave this running all the time: https://github.com/halo/LinkLiar
thanks!
Re: Milan Airport WiFi sends your MAC address to advertisers and trackers
#49Based on the screenshots it looks like the mac address is leaking out because its in the referer. I would guess this isn't intentional and shouldn't be hard to fix. I've worked with a number of captive portal systems and they all basically work the same way. The AP/controller intercepts http requests and redirects to the captive portal page with identifying information about the device (ip,mac,ssid,ap_mac,etc.). The…
While the mac address is a particularly egregious note, really they shouldn't be sending any data to ad firms whatsoever without consent, and fixing the referrer alone won't help much. Aside from the data they're explicitly sending in those requests, they're running the response as JS, thereby exposing a bunch of data about your machine & browser, and the response itself is setting a long-term 3rd party cookie too, s…
Consent is not needed for quite a bit of electronic marketing. It is for setting cookies, which is probably going on here to facilitate the marketing, so your point stands, but it's a breach of the ePrivacy Directive not GDPR so fines are lower. No excuse though.
Re: Milan Airport WiFi sends your MAC address to advertisers and trackers
#50Earlier quoted context omitted.
While the mac address is a particularly egregious note, really they shouldn't be sending any data to ad firms whatsoever without consent, and fixing the referrer alone won't help much. Aside from the data they're explicitly sending in those requests, they're running the response as JS, thereby exposing a bunch of data about your machine & browser, and the response itself is setting a long-term 3rd party cookie too, s…
Consent is not needed for quite a bit of electronic marketing. It is for setting cookies, which is probably going on here to facilitate the marketing, so your point stands, but it's a breach of the ePrivacy Directive not GDPR so fines are lower. No excuse though.
For the marketing itself consent isn't needed, but for collecting/processing personal data for marketing I'm pretty confident it is. Why wouldn't that fall under GDPR?