Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #227975 > unrolled thread

WiFi adapter MAC address spoofing

Started byXianwen Chen (陈贤文) <xianwen.chen@gmail.com>
First post2020-10-19 15:30 +0200
Last post2020-10-19 21:20 +0200
Articles 3 — 2 participants

Back to article view | Back to linux.debian.user


Contents

  WiFi adapter MAC address spoofing Xianwen Chen (陈贤文)  <xianwen.chen@gmail.com> - 2020-10-19 15:30 +0200
    Re: WiFi adapter MAC address spoofing Charles Curley <charlescurley@charlescurley.com> - 2020-10-19 16:20 +0200
      Re: WiFi adapter MAC address spoofing Xianwen Chen (陈贤文)  <xianwen.chen@gmail.com> - 2020-10-19 21:20 +0200

#227975 — WiFi adapter MAC address spoofing

FromXianwen Chen (陈贤文) <xianwen.chen@gmail.com>
Date2020-10-19 15:30 +0200
SubjectWiFi adapter MAC address spoofing
Message-ID<B1DoB-4n5-1@gated-at.bofh.it>

[Multipart message — attachments visible in raw view] — view raw

Hi, 

I would like to set a permanent MAC address spoofing for both the
Ethernet and the Wife adapters. 

I set the following in /etc/network/interfaces: 

################################################# 

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5). 

source /etc/network/interfaces.d/* 

# The loopback network interface
auto lo
iface lo inet loopback 

# Change the ethernet's MAC address
auto enp0s31f6
iface enp0s31f6 inet manual
hwaddress ether 0a:eb:71:c8:c8:2b 

# Change the wifie adapter's MAC address
allow-hotplug wlp2s0
iface wlp2s0 inet manual
hwaddress ether 53:c0:43:08:2b:cc 

################################################# 

After rebooting, I run "ip addr" to check MAC addresses. The Ethernet's
MAC address is changed, but not the WiFi adapter. 

I also tried to set "allow-hotplug wlp2s0" to "auto wlp2s0". But then
systemd (?) reported a problem with bring up networking. 

Yours sincerely, 

Xianwen

[toc] | [next] | [standalone]


#227977

FromCharles Curley <charlescurley@charlescurley.com>
Date2020-10-19 16:20 +0200
Message-ID<B1EaZ-4SD-3@gated-at.bofh.it>
In reply to#227975
On Mon, 19 Oct 2020 13:18:52 +0000
Xianwen Chen (陈贤文) <xianwen.chen@gmail.com> wrote:

> I would like to set a permanent MAC address spoofing for both the
> Ethernet and the Wife adapters. 

...

> After rebooting, I run "ip addr" to check MAC addresses. The
> Ethernet's MAC address is changed, but not the WiFi adapter.

Not all Ethernet or WiFi adapters are capable of changing MAC addresses.
Back in the early days, all MAC addresses were hard coded because that
was simpler for manufacturers. It also meant that all MAC addresses were
unique, so some manufacturers used the MAC address as a serial number
for their cards. It also meant that you would never have a collision,
two cards using the same MAC address on the same subnet.

Now many of them can change MAC addresses. I notice that my iPhone
under iOS 14 does so routinely (unless told not to) as an anti-tracking
ruse. A down side of this capability is that a malicious actor could
use the capability to spoof another device.


-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]


#227987

FromXianwen Chen (陈贤文) <xianwen.chen@gmail.com>
Date2020-10-19 21:20 +0200
Message-ID<B1IRk-7GT-11@gated-at.bofh.it>
In reply to#227977

[Multipart message — attachments visible in raw view] — view raw

Thank you. 

On 2020-10-19 13:54, Charles Curley wrote:

> Not all Ethernet or WiFi adapters are capable of changing MAC addresses.
> Back in the early days, all MAC addresses were hard coded because that
> was simpler for manufacturers. It also meant that all MAC addresses were
> unique, so some manufacturers used the MAC address as a serial number
> for their cards. It also meant that you would never have a collision,
> two cards using the same MAC address on the same subnet.
> 
> Now many of them can change MAC addresses. I notice that my iPhone
> under iOS 14 does so routinely (unless told not to) as an anti-tracking
> ruse. A down side of this capability is that a malicious actor could
> use the capability to spoof another device

Well, the strange part is that I am able to spoof the MAC address of the
WiFi adapter by manually running the following line, before bringing up
the adapter: 

ip link set wlp2s0 address 02:01:02:03:04:08

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web