Hacker News Reader

Comment by sml156 | Hacker News Reader

I am pretty sure that when iPhone connects to an access point it uses the real mac, I don't know about android but it is probably the same.

Some access points need your real mac to connect because they use that to authorize you, I think schools/universities use this method a lot.

View on HN

Or to be more precise, those access points probably need a consistent mac, not your real one. So it would be nice if you could configure those networks to receive their own mac, but that stays the same over time. This is what the NetworkManager 1.4.1+ "stable" setting does.

I do not understand though. Whitelisting MAC addresses is something you can do, but 99.99% of the wifi spots out there don't have it enabled. Why should my phone leak my MAC address needlessly instead of just generating a new one every 5 minutes or so?

If you connect to any hotspot with a captive portal, you would need to deal with the portal again every 5 minutes.

The MAC could remain unchanged for established connections while changing for new connection offers.

What does that accomplish?

It accomplishes what changing it in the first place is intended to accomplish - anonymity. Changing for established connections offers no benefits.

Hopefully just the process of watching all connections break and seeing the internet go away as the client reassociates with the AP each time they foolishly tumble their MAC on an _active_ connection will be enough to keep this scenario from ever playing out.

Reply on news.ycombinator.com