I can confirm that my iPhone 5s with iOS 8 beta does NOT randomize the MAC address in probe requests. This was determined by capturing and analyzing the probe request frames.
Thanks, Eric J. Kenny Network & Security Engineer Marist College 3399 North Rd. Poughkeepsie, NY 12601 845.575.3820 From: The EDUCAUSE Wireless Issues Constituent Group Listserv <[email protected]> [mailto:The EDUCAUSE Wireless Issues Constituent Group Listserv <[email protected]>] On Behalf Of Frank Sweetser <[email protected]> Sent: Tuesday, June 10, 2014 9:03 AM To: [email protected] Subject: Re: [WIRELESS-LAN] iOS8 and randomized mac addresses >From what I can tell, they're only randomizing the MAC address on probe requests. It appears to still use the burned in MAC address for association and all subsequent traffic. That said, I'd love for someone with an iOS 8 device and a suitable wireless sniffer rig to confirm this guess =) Frank Sweetser fs at wpi.edu | For every problem, there is a solution that Manager of Network Operations | is simple, elegant, and wrong. Worcester Polytechnic Institute | - HL Mencken On 06/10/2014 08:54 AM, Lee H Badman wrote: > ?For historical tracking, could be pretty rough especially when individual > users have multiple devices. > > > *Lee H. Badman* > Network Architect/Wireless TME > ITS, Syracuse University > 315.443.3003 > ------------------------------------------------------------------------ ------ > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv > on behalf of Eric Kenny > > *Sent:* Monday, June 9, 2014 2:27 PM > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] iOS8 and randomized mac addresses > > I have the first beta of iOS 8 installed on my iPhone 5s and it does not > appear to randomize the MAC address, nor are there any visible settings to > enable/disable that "feature." Since the MAC address remains the same while > associated to a wireless network it should not pose any issues. The original > source in the article indicates that iOS 8 will only randomize the MAC while > scanning for available networks. > > Thanks, > > Eric J. Kenny > > Network & Security Engineer > > Marist College > > 3399 North Rd. > > Poughkeepsie, NY 12601 > > 845.575.3820 > > *From:*The EDUCAUSE Wireless Issues Constituent Group Listserv > [mailto:The EDUCAUSE Wireless Issues > Constituent Group Listserv ] *On Behalf Of > *Rick Coloccia, Jr. > *Sent:* Monday, June 9, 2014 11:06 AM > *To:* [email protected] > *Subject:* [WIRELESS-LAN] iOS8 and randomized mac addresses > > Just saw this: > > http://www.theverge.com/2014/6/9/5792970/ios-8-strikes-an-unexpected-blo w-against-location-tracking > > It wasn't touted onstage, but a new iOS 8 feature is set to cause havoc for > location trackers, and score a major win for privacy. As spotted by Frederic > Jacobs <https://twitter.com/FredericJacobs/status/475601665836744704>, the > changes have to do with the MAC address used to identify devices wi! th in > networks. When iOS 8 devices look for a connection, they randomize that > address, effectively disguising any trace of the real device until it decides > to connect to a network. > > > Any guesses as to how this will impact wpa2 auth or location tracking with an > MSE? (We're a Cisco wireless network with three 5508s in HA config running > current 7.6 code.) > > Looking forward to your thoughts... > > -Rick > > > -- > > Rick Coloccia, Jr. > > Network Manager > > State University of NY College at Geneseo > > 1 College Circle, 119 South Hall > > Geneseo, NY 14454 > > V: 585-245-5577 > > F: 585-245-5579 > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/ <http://%21%20//%20www.educause.edu/groups/ <http://%21%20/%20www.educause.edu/groups/> >. > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. <http://www.educause.edu/groups/> > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. <http://www.educause.edu/groups/> > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. <http://www.educause.edu/groups/> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
