• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Private Mac addresses in IOS14

Scheduled Pinned Locked Moved General pfSense Questions
69 Posts 10 Posters 10.3k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • J
    johnpoz LAYER 8 Global Moderator
    last edited by Sep 20, 2020, 10:17 PM

    Yeah not sure who it would cause headache for - other than someone that doesn't under how dhcp reservations work..

    So it turned it on for networks your phone had already been connected too?

    An intelligent man is sometimes forced to be drunk to spend time with his fools
    If you get confused: Listen to the Music Play
    Please don't Chat/PM me for help, unless mod related
    SG-4860 24.11 | Lab VMs 2.8, 24.11

    J V 2 Replies Last reply Sep 21, 2020, 1:55 AM Reply Quote 0
    • J
      JKnott @johnpoz
      last edited by Sep 21, 2020, 1:55 AM

      @johnpoz said in Private Mac addresses in IOS14:

      So it turned it on for networks your phone had already been connected too?

      My understanding is it picks a new random MAC when connecting to a new SSID. It shouldn't change when you connect again.

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      1 Reply Last reply Reply Quote 0
      • V
        Vollans @johnpoz
        last edited by Sep 21, 2020, 2:01 AM

        @johnpoz yes, my pre-existing learnt networks have it switched on automatically. For me, that's not a problem.

        1 Reply Last reply Reply Quote 0
        • D
          Derelict LAYER 8 Netgate
          last edited by Oct 3, 2020, 7:50 PM

          Apple seems to have a pretty good POLA violation on their hands here, IMHO. Considering it uses the same MAC address every time it connects to the same network it shouldn't break things like Captive Portals or DHCP pools. But static mappings, etc will certainly break.

          The user should have at least been asked if they want new MAC addresses for existing networks, while the blank stares at the screen from the majority would be funny to montage.

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 0
          • J
            johnpoz LAYER 8 Global Moderator
            last edited by Oct 3, 2020, 7:57 PM

            @Derelict said in Private Mac addresses in IOS14:

            The user should have at least been asked

            Yeah no shit ;) First thing I had to go and turn off on my 3 apple devices as I updated them to 14 the other day.. Not a peep from the thing that it was doing this..

            Why do these OS makers continue to treat their users like idiots.. The last sort of thing that was pissing me off is windows with its update to 2004.. Just saying your machine is not ready -- well why and the F not?? Clearly you know why its not updating, because your not letting it... But what is the specific reason.. So possible it can be corrected.

            Finally had to just do a freaking clean install.. Works fine..

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            D J 2 Replies Last reply Oct 3, 2020, 7:59 PM Reply Quote 0
            • D
              Derelict LAYER 8 Netgate @johnpoz
              last edited by Oct 3, 2020, 7:59 PM

              @johnpoz said in Private Mac addresses in IOS14:

              Why do these OS makers continue to treat their users like idiots..

              πŸ€”

              Chattanooga, Tennessee, USA
              A comprehensive network diagram is worth 10,000 words and 15 conference calls.
              DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
              Do Not Chat For Help! NO_WAN_EGRESS(TM)

              1 Reply Last reply Reply Quote 1
              • J
                JKnott @johnpoz
                last edited by Oct 4, 2020, 1:25 AM

                @johnpoz said in Private Mac addresses in IOS14:

                Why do these OS makers continue to treat their users like idiots..

                Maybe because they bought iPhones. πŸ˜‰ <ducking>

                With Android, it appears to generate a random MAC when first connected to an SSID and then use it for all future connections.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                N 1 Reply Last reply Oct 4, 2020, 10:20 AM Reply Quote 0
                • N
                  NogBadTheBad @JKnott
                  last edited by NogBadTheBad Oct 4, 2020, 10:21 AM Oct 4, 2020, 10:20 AM

                  @JKnott said in Private Mac addresses in IOS14:

                  @johnpoz said in Private Mac addresses in IOS14:

                  Why do these OS makers continue to treat their users like idiots..

                  Maybe because they bought iPhones. πŸ˜‰ <ducking>

                  With Android, it appears to generate a random MAC when first connected to an SSID and then use it for all future connections.

                  LOL no ****, it’s in the interest of Google to be able to track you by MAC address when ever you join a Wi-Fi network if the MAC stays consistent per SSID they are sorted.

                  Andy

                  1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                  1 Reply Last reply Reply Quote 0
                  • S
                    stephenw10 Netgate Administrator
                    last edited by Oct 4, 2020, 11:19 AM

                    Both Android and iOS appear to do the same for new networks; use a random MAC but that keep using that for re-connections to that same network.
                    The only thing that seems unclear is their behaviour when connecting to already known networks.
                    It seems iOS is using a random MAC there too potentially breaking stuff.
                    Android seems to retain the real MAC for existing networks as reported above.

                    Steve

                    J 1 Reply Last reply Oct 4, 2020, 12:48 PM Reply Quote 0
                    • J
                      JKnott @stephenw10
                      last edited by Oct 4, 2020, 12:48 PM

                      @stephenw10

                      Yes, when I got my Pixel 2 and synced it to my previous phone, it also received my WiFi connections. They use the hardware MAC. A connection I set up a couple of weeks ago uses the random number.

                      PfSense running on Qotom mini PC
                      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                      UniFi AC-Lite access point

                      I haven't lost my mind. It's around here...somewhere...

                      1 Reply Last reply Reply Quote 0
                      • A
                        AKEGEC
                        last edited by Oct 4, 2020, 4:25 PM

                        It is so funny to see some Netgate forum members always bring up TIN FOIL HAT every time someone asks or says about privacy & security.

                        @bcruze, Mac Private address is just a layer of security. The same as T2 chip and read-only system volume in Catalina. Apple is aware that their previous devices were easy target for hacking. Not to mention the leaking on intel chip issue.

                        1 Reply Last reply Reply Quote 0
                        • ?
                          A Former User
                          last edited by Oct 4, 2020, 5:06 PM

                          Security and Privacy are not the same thing. Just saying...

                          A 1 Reply Last reply Oct 5, 2020, 12:25 PM Reply Quote 1
                          • A
                            AKEGEC @A Former User
                            last edited by Oct 5, 2020, 12:25 PM

                            @jwj said in Private Mac addresses in IOS14:

                            Security and Privacy are not the same thing. Just saying...

                            Let me explain the differences between them;

                            Security = Protection of a person, building, organization, or country against threats such as crime or attacks.

                            Privacy = Someone's right to keep their personal matters and relationships secret.

                            Everyone has the right for security and privacy.

                            ? 1 Reply Last reply Oct 5, 2020, 1:26 PM Reply Quote 0
                            • ?
                              A Former User @AKEGEC
                              last edited by A Former User Oct 5, 2020, 2:31 PM Oct 5, 2020, 1:26 PM

                              @AKEGEC

                              Interested in your thoughts about things like:

                              Random MAC addresses may prevent you being identified across public WIFI networks (at the mall or airport, in whole foods) but that is small comfort when your cell service provider is handing over location data in bulk, with little or no legal process, to any interested party.

                              Targeted exploits are rare. The bad actors don't care about you unless you are a celebrity or other notable individual. It's much more likely, however, that you will get caught up in an exploit of some widely used service or device. It's not personal ;)

                              Risk vs Benefit. It shouldn't be as hard as it is to work that analysis through. It's understandable that a lot of people spend at least some amount of time in tin foil hat territory.

                              I've been intentionally vague to facilitate conversation. Of course I would prefer to not have Amazon forcing preventing me from using my cell providers network while in Whole Foods AND my cell provider to not be coughing up my location data.

                              I'm certain that I do regularly suffer from cognitive distortions and well informed conversation is the best way to mitigate that.

                              1 Reply Last reply Reply Quote 0
                              • D
                                Derelict LAYER 8 Netgate
                                last edited by Oct 5, 2020, 2:01 PM

                                @jwj said in Private Mac addresses in IOS14:

                                Of course I would prefer to not have Amazon forcing me onto their network in Whole Foods

                                Forcing?

                                Chattanooga, Tennessee, USA
                                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                ? 1 Reply Last reply Oct 5, 2020, 2:04 PM Reply Quote 0
                                • ?
                                  A Former User @Derelict
                                  last edited by A Former User Oct 5, 2020, 2:11 PM Oct 5, 2020, 2:04 PM

                                  @Derelict said in Private Mac addresses in IOS14:

                                  @jwj said in Private Mac addresses in IOS14:

                                  Of course I would prefer to not have Amazon forcing me onto their network in Whole Foods

                                  Forcing?

                                  Yup. They block cell signals. I've never been able to get a cell signal inside a Whole Foods. If you want to use your prime account you have no choice but to use their wifi network. So, point taken, I could just pay full price and not access their network.

                                  I'm not a RF engineer but it appears to be passive blocking (faraday cage). Step outside the building and I get a full strength signal.

                                  D J 2 Replies Last reply Oct 5, 2020, 2:18 PM Reply Quote 0
                                  • J
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by johnpoz Oct 5, 2020, 2:16 PM Oct 5, 2020, 2:13 PM

                                    I don't really recall noticing this last time I was in a whole foods.. Last time was before covid.. Quite often stop at their in store taverns.. Tuesday's is 2$ bottle and can day at their instore bars.. And they normally have a decent selection..

                                    So stop there after work many a tuesday for couple of cold ones ;)

                                    But sure it behooves stores like this to control your internet access while your in the store, can prevent you from doing price compares, etc. Or atleast make it way more difficult - since hey odd how you can't get to store xyz site while on the whole foods wifi ;)

                                    Problem could also be cell coverage in the middle of a HUGE store might just be spotty? But do believe amazon a few years back had a patent on such thing as controlling people in their stores internet access..

                                    But force prob not the right word, more like direct you to their connection ;) Nothing saying you can't just leave your phone at home or in the car, or just turn it off, or put in airplane mode, etc.

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    ? 1 Reply Last reply Oct 5, 2020, 2:16 PM Reply Quote 0
                                    • ?
                                      A Former User @johnpoz
                                      last edited by Oct 5, 2020, 2:16 PM

                                      @johnpoz said in Private Mac addresses in IOS14:

                                      I don't really recall noticing this last time I was in a whole foods.. Last time was before covid.. Quite often stop at their in store taverns.. Tuesday's is 2$ bottle and can day at their instore bars.. And they normally have a decent selection..

                                      So stop there after work many a tuesday for couple of cold ones ;)

                                      But sure it behooves stores like this to control your internet access while your in the store, can prevent you from doing price compares, etc. Or atleast make it way more difficult - since hey odd how you can't get to store xyz site while on the whole foods wifi ;)

                                      Problem could also be cell coverage in the middle of a HUGE store might just be spotty? But do believe amazon a few years back had a patent on such thing as controlling people in their stores internet access..

                                      As I remember Best Buy was doing that at some point in time. Blocking access to mitigate using Best Buy stores as an Amazon showroom. Haven't been in a Best Buy in a dogs age so I can't comment on the current situation.

                                      1 Reply Last reply Reply Quote 0
                                      • J
                                        johnpoz LAYER 8 Global Moderator
                                        last edited by Oct 5, 2020, 2:18 PM

                                        @jwj said in Private Mac addresses in IOS14:

                                        using Best Buy stores as an Amazon showroom

                                        hehehe - yeah this true.. Oh lets go see how the picture looks on tv xyz - then just order it on amazon for X $ cheaper ;)

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        1 Reply Last reply Reply Quote 0
                                        • D
                                          Derelict LAYER 8 Netgate @A Former User
                                          last edited by Oct 5, 2020, 2:18 PM

                                          @jwj Force is still a strong word. If you don't like their policies don't shop there.

                                          Chattanooga, Tennessee, USA
                                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                          ? 1 Reply Last reply Oct 5, 2020, 2:21 PM Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received