Re: [WIRELESS-LAN] iOS8 and randomized mac addresses

2014-09-27 Thread Julian Y Koh
On Mon Jun 09 2014 10:06:27 CDT, Rick Coloccia, Jr. coloc...@geneseo.edu 
wrote: 
 Just saw this:
 
 http://www.theverge.com/2014/6/9/5792970/ios-8-strikes-an-unexpected-blow-against-location-tracking

Here’s more detail.  Apparently you need to have cellular data and location 
services turned off for random MAC addresses to be used.

http://www.powerpage.org/ios-8s-mac-randomization-requires-cellular-data-location-services-to-be-disabled/

http://blog.airtightnetworks.com/ios8-mac-randomization-analyzed/
http://blog.airtightnetworks.com/ios8-mac-randomgate/


-- 
Julian Y. Koh
Acting Associate Director, Telecommunications and Network Services
Northwestern University Information Technology (NUIT)

2001 Sheridan Road #G-166
Evanston, IL 60208
847-467-5780
NUIT Web Site: http://www.it.northwestern.edu/
PGP Public Key:http://bt.ittns.northwestern.edu/julian/pgppubkey.html

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] iOS8 and randomized mac addresses

2014-09-27 Thread Peter P Morrissey
It's probably just so they can sell more iBeacons:
http://time.com/money/3432693/macys-shopkick-ibeacon/

Pete Morrissey

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh
Sent: Saturday, September 27, 2014 4:30 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] iOS8 and randomized mac addresses

On Mon Jun 09 2014 10:06:27 CDT, Rick Coloccia, Jr. coloc...@geneseo.edu 
wrote: 
 Just saw this:
 
 http://www.theverge.com/2014/6/9/5792970/ios-8-strikes-an-unexpected-b
 low-against-location-tracking

Here's more detail.  Apparently you need to have cellular data and location 
services turned off for random MAC addresses to be used.

http://www.powerpage.org/ios-8s-mac-randomization-requires-cellular-data-location-services-to-be-disabled/

http://blog.airtightnetworks.com/ios8-mac-randomization-analyzed/
http://blog.airtightnetworks.com/ios8-mac-randomgate/


--
Julian Y. Koh
Acting Associate Director, Telecommunications and Network Services Northwestern 
University Information Technology (NUIT)

2001 Sheridan Road #G-166
Evanston, IL 60208
847-467-5780
NUIT Web Site: http://www.it.northwestern.edu/ PGP Public 
Key:http://bt.ittns.northwestern.edu/julian/pgppubkey.html

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re: [WIRELESS-LAN] iOS8 and randomized mac addresses

2014-06-12 Thread Frank Sweetser
You mean something that maybe is limited to iOS, and is based off of bluetooth 
rather than wifi, making it unaffected by the MAC address scrambling, while 
all of the vendor agnostic wifi centric solutions are crippled?  Something 
kinda like this?


http://en.wikipedia.org/wiki/IBeacon

Frank Sweetser fs at wpi.edu|  For every problem, there is a solution that
Manager of Network Operations   |  is simple, elegant, and wrong.
Worcester Polytechnic Institute |   - HL Mencken

On 06/12/2014 08:19 AM, Lee H Badman wrote:

Is interesting theory. I'll let my snark shine, and say that I can't imagine Apple doing 
this for any other reason than to somehow further their profits (maybe by making 
something weird happen for location services that is only solved by using one 
of their other products or a partner solution) rather than any sort of Wireless Good 
Neighborism.

-Lee Badman

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Cameron, Damien L.
Sent: Wednesday, June 11, 2014 5:13 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] iOS8 and randomized mac addresses

The reverse engineering side of me wonders why they would do this, if this is 
even (or becomes) the case.

I know we have always criticized Apple for the issues with roaming. Perhaps 
they wanted to implement an algorithm that would continuously collect all the 
AP information and roam to the AP with the best signal strength/quality?

Damien Cameron
Network Engineer
Norfolk State University
Office of Information Technology
Marie v. McDemmond Center for applied Research
Room 401
555 Park Avenue
Norfolk, VA 23504
O: (757) 823-9123


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Eric Kenny
Sent: Tuesday, June 10, 2014 9:11 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] iOS8 and randomized mac addresses

The non-random (burned-in) MAC was used for both broadcast and specific SSIDs.  
If anyone is interested I can send them the .pcap file.

Eric J. Kenny
Network  Security Engineer
Marist College
3399 North Rd.
Poughkeepsie, NY 12601
845.575.3820

-The EDUCAUSE Wireless Issues Constituent Group Listserv 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU wrote: -To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
From: Frank Sweetser
Sent by: The EDUCAUSE Wireless Issues Constituent Group Listserv
Date: 06/10/2014 07:18PM
Subject: Re: [WIRELESS-LAN] iOS8 and randomized mac addresses

Did you see the non-random MAC address in broadcast SSID probe requests, or 
only in SSID specific ones?  My impression is that the randomization would only 
be performed in broadcast probes.

Frank Sweetser fs at wpi.edu|  For every problem, there is a solution that 
Manager of Network Operations   |  is simple, elegant, and wrong.
Worcester Polytechnic Institute |   - HL Mencken

On 6/10/2014 9:12 AM, Eric Kenny wrote:

I can confirm that my iPhone 5s with iOS 8 beta does NOT randomize the
MAC address in probe requests.  This was determined by capturing and
analyzing the probe request frames.

Thanks,

Eric J. Kenny

Network  Security Engineer

Marist College

3399 North Rd.

Poughkeepsie, NY 12601

845.575.3820

*From:*The EDUCAUSE Wireless Issues Constituent Group Listserv
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU [mailto:The EDUCAUSE Wireless
Issues Constituent Group Listserv
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Frank Sweetser
f...@wpi.edu
*Sent:* Tuesday, June 10, 2014 9:03 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] iOS8 and randomized mac addresses


  From what I can tell, they're only randomizing the MAC address on
probe requests. It appears to still use the burned in MAC address for
association and all subsequent traffic.

That said, I'd love for someone with an iOS 8 device and a suitable
wireless sniffer rig to confirm this guess =)

Frank Sweetser fs at wpi.edu | For every problem, there is a solution
that Manager of Network Operations | is simple, elegant, and wrong.
Worcester Polytechnic Institute | - HL Mencken

On 06/10/2014 08:54 AM, Lee H Badman wrote:
   #8203;For historical tracking, could be pretty rough especially
when individual
   users have multiple devices.
  
  
   *Lee H. Badman*
   Network Architect/Wireless TME
   ITS, Syracuse University
   315.443.3003
  
--

   *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv
   on behalf of Eric Kenny
  
   *Sent:* Monday, June 9, 2014 2:27 PM
   *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
   *Subject:* Re: [WIRELESS-LAN] iOS8 and randomized mac addresses
  
   I h ave the first beta of iOS 8 installed on my iPhone 5s and it
does not
   appear to randomize the MAC address, nor are there any visible