{"id":8969,"date":"2014-06-13T13:47:08","date_gmt":"2014-06-13T17:47:08","guid":{"rendered":"http:\/\/mjtsai.com\/blog\/?p=8969"},"modified":"2014-06-13T13:47:08","modified_gmt":"2014-06-13T17:47:08","slug":"ios-8-mac-address-randomization","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2014\/06\/13\/ios-8-mac-address-randomization\/","title":{"rendered":"iOS 8 MAC Address Randomization"},"content":{"rendered":"

Frederic Jacobs<\/a>, regarding an announcement in WWDC 2014 session 715, User Privacy on iOS and OS X<\/a> (PDF):<\/p>\n

iOS 8 randomises the MAC address while scanning for WiFi networks. Hoping that this becomes an industry standard.<\/p><\/blockquote>\n

Leo Mirani<\/a>:<\/p>\n

Whenever you walk around a major Western city with your phone’s Wi-Fi turned on, you are broadcasting your location to government agencies, marketing companies and location analytics firms.<\/p>\n

In shopping malls, for instance, a firm called Euclid Analytics collects, in its own words, “the presence of the device, its signal strength, its manufacturer (Apple, Samsung, etc.), and a unique identifier known as its Media Access Control (MAC) address.” In London last year, one start-up installed a dozen recycling bins that sniffed MAC addresses from passers-by, effectively tracking people through the area via their phones. Such companies go to great lengths to explain that such information in not personally identifiable—except that repeated studies have shown that this data can indeed be used to infer a great deal about your life.<\/p><\/blockquote>\n

Lee Hutchinson<\/a>:<\/p>\n

In adding MAC address randomization during Wi-Fi probing, Apple manages to both eliminate a potential privacy leak and drive companies interested in location-based advertising toward a solution it prefers. iOS users who would prefer to opt out of iBeacon can first ensure they have no iBeacon-aware apps installed (like the official Apple Store app), or they can disable Bluetooth. Until iOS 8 arrives, iOS 7 users who would prefer not to have their MAC addresses tracked in public can disable Wi-Fi when they’re out and about.<\/p><\/blockquote>\n

Sam Oliver<\/a>:<\/p>\n

The new MAC randomization system is the latest in a line of privacy-focused moves from Apple that have come to light as developers digest the wealth of material offered at last week’s Worldwide Developers Conference.<\/p>\n

Most visible among those change is iOS 8’s new “While Using”<\/a> location privacy option. The new setting allows users to restrict apps from determining their location unless the app is in active use, preventing apps from collecting location data in the background unless explicitly authorized to do so.<\/p><\/blockquote>\n

I think this is a good idea, but I’m skeptical that it will do as much for privacy as people are saying. Julian Bhardwaj<\/a>:<\/p>\n

Most devices use both passive and active discovery in an attempt to connect to known\/preferred networks. So it’s very likely that your smartphone is broadcasting the names (SSIDs) of your favourite networks for anyone to see.<\/p>\n

[…]<\/p>\n

The unfortunate news is there doesn’t appear to be an easy way to disable active wireless scanning on smartphones like Androids and iPhones.<\/p>\n

However, you can at least tell your phone to ‘forget’ networks you no longer use to minimise the amount of data leakage.<\/p><\/blockquote>\n

In other words, with MAC address randomization, the names of your favorite networks become an identifier for you. Secondly, snoopers can use a common network name<\/a> that your phone will try to auto-connect to, at which point they’ll get your real MAC address.<\/p>","protected":false},"excerpt":{"rendered":"

Frederic Jacobs, regarding an announcement in WWDC 2014 session 715, User Privacy on iOS and OS X (PDF): iOS 8 randomises the MAC address while scanning for WiFi networks. Hoping that this becomes an industry standard. Leo Mirani: Whenever you walk around a major Western city with your phone’s Wi-Fi turned on, you are broadcasting […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"apple_news_api_created_at":"","apple_news_api_id":"","apple_news_api_modified_at":"","apple_news_api_revision":"","apple_news_api_share_url":"","apple_news_coverimage":0,"apple_news_coverimage_caption":"","apple_news_is_hidden":false,"apple_news_is_paid":false,"apple_news_is_preview":false,"apple_news_is_sponsored":false,"apple_news_maturity_rating":"","apple_news_metadata":"\"\"","apple_news_pullquote":"","apple_news_pullquote_position":"","apple_news_slug":"","apple_news_sections":"\"\"","apple_news_suppress_video_url":false,"apple_news_use_image_component":false,"footnotes":""},"categories":[2],"tags":[31,904,355,187],"class_list":["post-8969","post","type-post","status-publish","format-standard","hentry","category-technology","tag-ios","tag-ios-8","tag-privacy","tag-wifi"],"apple_news_notices":[],"_links":{"self":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/8969","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/comments?post=8969"}],"version-history":[{"count":0,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/posts\/8969\/revisions"}],"wp:attachment":[{"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/media?parent=8969"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/categories?post=8969"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mjtsai.com\/blog\/wp-json\/wp\/v2\/tags?post=8969"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}