Re: How to look up the GPS location of your MAC address or car on the Internet

From	Horace Algier <horatio@horatio.net>
Newsgroups	comp.mobile.android, alt.internet.wireless, alt.os.linux
Subject	Re: How to look up the GPS location of your MAC address or car on the Internet
Date	2016-09-18 03:49 +0000
Organization	Aioe.org NNTP Server
Message-ID	<nrl2sg$16lc$1@gioia.aioe.org> (permalink)
References	(5 earlier) <00jptb5vk3e9e1mcgn0kdu0stpi9b6v2mn@4ax.com> <nrin63$1k0u$1@gioia.aioe.org> <nrio22$1l6c$1@gioia.aioe.org> <170920161008205042%nospam@nospam.invalid> <nrl2gu$168c$1@gioia.aioe.org>

Cross-posted to 3 groups.

Show all headers | View raw

On Sun, 18 Sep 2016 03:43:26 +0000 (UTC), Horace Algier wrote:

> This is an interesting paper...
> http://papers.mathyvanhoef.com/asiaccs2016.pdf
> 
> Why MAC Address Randomization is not Enough: An Analysis of Wi-Fi Network
> Discovery Mechanisms
> 
> "We present two attacks that reveal the real MAC address of a device, even
> if MAC address randomization is used.

It's interesting that all the operating systems implement the MAC address
reandomization differently ... as outlined in that paper ... 

2.1.1 iOS
Apple added MAC address randomization to its devices
starting from iOS 8 [42]. In iOS 8, randomized addresses are
only used while unassociated and in sleep mode [18]. iOS 9
was extended to also use randomization in what Apples calls
location and auto-join scans [42]. Based on our own experiments,
this means that randomization is now also used when
the device is active, i.e., when the screen is turned on.

2.1.2 Android
Android 6.0 uses randomization for background scans if
the driver and hardware support it [2]. Unfortunately, we
did not have a device to test and verify this in practice.
Although Android versions before 6.0 do not support randomization,
several applications supporting this feature have
been released [9, 3]. Common features of those applications
are a periodical update of the MAC address to a random
value, but also the manual modication of this address by
the user. Note that those applications require root privilege
to operate, which reduce their impact for the average user.

2.1.4 Linux
Linux added support forMAC address randomization during
network scans in kernel version 3.18. The address should
be randomized for each scan iteration [24]. Drivers must be
updated to support this feature. The mvm module of the
iwlwifi driver supports randomization since kernel 3.18.
The brcmfmac driver added support for this in kernel 4.5.
The privacy-oriented Linux distribution Tails [1] does not
support MAC address randomization during network scans.
Instead, it generates a (new) random MAC address at boot.
This random address keeps the rst 3 bytes of the original
address, the Organization Unique Identier (OUI), and
only randomizes the last three bytes. While not as optimal
as periodical address changes, it does prevent tracking over
extended periods of time.

2.1.3 Windows
Microsoft supports randomization since Windows 10 [45].
Enabling randomization is possible if the hardware and driver
support it. Interestingly, not only does Windows use random
addresses for probe requests, it also uses a random address
when connecting to a network. To assure the client always
uses the same address when connecting to a particular network,
a per-network address is calculated as follows [27, 28]:
addr = SHA-256(SSID; macaddr; connId; secret)[:6] (1)
Here SSID is the name of the network, macaddr the original
MAC address, and connId a parameter that changes
if the user removes (and re-adds) the network to its preferred
network list. The secret parameter is a 256-bits cryptographic
random number generated during system initialization,
unique per interface, and kept the same across reboots
[28]. Bits in the most signicant byte of addr are set
so it becomes a locally administered, unicast address. This
hash construction is similar to the generation of IPv6 interface
identiers as proposed in RFC 7217 [21]. It assures that
systems relying on xed MAC addresses continue to work as
expected, e.g., when authentication is performed based on
the MAC address. Users can also manually instruct the OS
to daily update the per-network address randomly.

Thread

How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-13 06:00 +0000
  Re: How to look up the GPS location of your MAC address or car on the Internet "Carlos E.R." <robin_listas@invalid.es> - 2016-09-13 15:34 +0200
    Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-13 16:06 +0000
      Re: How to look up the GPS location of your MAC address or car on the Internet "Carlos E. R." <robin_listas@invalid.es> - 2016-09-14 00:20 +0200
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-14 04:41 +0000
      Re: How to look up the GPS location of your MAC address or car on the Internet William Unruh <unruh@invalid.ca> - 2016-09-14 00:27 +0000
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-14 04:41 +0000
          Re: How to look up the GPS location of your MAC address or car on the Internet Andy Burns <usenet@andyburns.uk> - 2016-09-14 07:35 +0100
          Re: How to look up the GPS location of your MAC address or car on the Internet Frank Slootweg <this@ddress.is.invalid> - 2016-09-14 07:54 +0000
            Re: How to look up the GPS location of your MAC address or car on the Internet "Kerr Mudd-John" <admin@127.0.0.1> - 2016-09-15 11:53 +0100
          Re: How to look up the GPS location of your MAC address or car on the Internet pamela <invalid@nospam.com> - 2016-09-17 14:28 +0100
            Re: How to look up the GPS location of your MAC address or car on the Internet "Kerr Mudd-John" <admin@127.0.0.1> - 2016-09-17 21:30 +0100
        Re: How to look up the GPS location of your MAC address or car on the Internet Jeff Liebermann <jeffl@cruzio.com> - 2016-09-15 08:45 -0700
          Re: How to look up the GPS location of your MAC address or car on the Internet Jeff Liebermann <jeffl@cruzio.com> - 2016-09-15 08:51 -0700
            Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-16 19:30 +0000
          Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-16 18:43 +0000
            Re: How to look up the GPS location of your MAC address or car on the Internet Andy Burns <usenet@andyburns.uk> - 2016-09-16 20:08 +0100
              Re: How to look up the GPS location of your MAC address or car on the Internet Andy Burns <usenet@andyburns.uk> - 2016-09-17 09:17 +0100
                Re: How to look up the GPS location of your MAC address or car on the Internet Frank Slootweg <this@ddress.is.invalid> - 2016-09-17 17:27 +0000
                Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-18 02:12 +0000
                Re: How to look up the GPS location of your MAC address or car on the Internet Frank Slootweg <this@ddress.is.invalid> - 2016-09-19 15:42 +0000
                Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-19 16:33 +0000
                Re: How to look up the GPS location of your MAC address or car on the Internet Frank Slootweg <this@ddress.is.invalid> - 2016-09-19 17:42 +0000
                Re: How to look up the GPS location of your MAC address or car on the Internet Andy Burns <usenet@andyburns.uk> - 2016-09-19 18:41 +0100
                Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-20 03:21 +0000
            Re: How to look up the GPS location of your MAC address or car on the Internet Jeff Liebermann <jeffl@cruzio.com> - 2016-09-16 13:04 -0700
              Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-17 20:23 +0000
      Re: How to look up the GPS location of your MAC address or car on the Internet Jeff Liebermann <jeffl@cruzio.com> - 2016-09-15 08:31 -0700
        Re: How to look up the GPS location of your MAC address or car on the Internet AL <noemail@none.invalid.com> - 2016-09-15 09:49 -0700
          Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-16 19:33 +0000
            Re: How to look up the GPS location of your MAC address or car on the Internet "Carlos E.R." <robin_listas@invalid.es> - 2016-09-19 19:22 +0200
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-16 19:30 +0000
          Re: How to look up the GPS location of your MAC address or car on the Internet Jeff Liebermann <jeffl@cruzio.com> - 2016-09-16 13:16 -0700
            Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-17 04:52 +0000
  Re: How to look up the GPS location of your MAC address or car on the Internet William Unruh <unruh@invalid.ca> - 2016-09-14 00:24 +0000
    Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-14 04:40 +0000
      Re: How to look up the GPS location of your MAC address or car on the Internet bruce <bruce@invalid.dyndns.tv.invalid> - 2016-09-14 18:41 -0400
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-16 19:56 +0000
          Re: How to look up the GPS location of your MAC address or car on the Internet bruce <bruce@invalid.dyndns.tv.invalid> - 2016-09-17 16:12 -0400
            Re: How to look up the GPS location of your MAC address or car on the Internet Winston <wbe@UBEBLOCK.psr.com.invalid> - 2016-09-17 19:04 -0400
              Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-18 03:43 +0000
            Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-18 02:30 +0000
              Re: How to look up the GPS location of your MAC address or car on the Internet nospam <nospam@nospam.invalid> - 2016-09-17 22:54 -0400
            Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-18 03:43 +0000
      Re: How to look up the GPS location of your MAC address or car on the Internet Winston <wbe@UBEBLOCK.psr.com.invalid> - 2016-09-15 01:04 -0400
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-16 23:17 +0000
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-16 23:36 +0000
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-17 01:59 +0000
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-17 01:59 +0000
          Re: How to look up the GPS location of your MAC address or car on the Internet Jeff Liebermann <jeffl@cruzio.com> - 2016-09-16 22:22 -0700
            Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-17 06:17 +0000
              Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-17 06:32 +0000
                Re: How to look up the GPS location of your MAC address or car on the Internet nospam <nospam@nospam.invalid> - 2016-09-17 10:08 -0400
                Re: How to look up the GPS location of your MAC address or car on the Internet Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-09-17 16:13 +0200
                Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-18 03:43 +0000
                Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-18 03:49 +0000
                Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-18 04:00 +0000
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-17 01:59 +0000
        Re: How to look up the GPS location of your MAC address or car on the Internet Horace Algier <horatio@horatio.net> - 2016-09-17 02:00 +0000

csiph-web