FWIW, I almost completely gave up before I ran into the NM bugzilla describing how some drivers break with rand-mac.
I even went and bought a USB dongle to try and get Debian (or anything) running on wifi, but that didn't work either because the driver suffers the same problem than wl. I have edited my /usr/lib/NetworkManager/conf.d/no-mac-addr-change.conf to also have the following three driver: matches. [device-mac-addr-change-wifi] match-device=(...),driver:wl,driver:rtl8192eu,driver:rtl8xxxu I would propose adding this change to that file because otherwise it's impossible to get Debian working on those cards unless you know a lot about the desktop stack, or you are extremely good with googling. For context: * the 'wl' driver is broadcom-sta, and is used by many MacBook Pro Retina (mine is MacBookPro11,1). * rtl8192eu[1] is a maintenance fork that works slightly better than rtl8xxxu on the USB dongle I got, and rtl8xxxu seems to be an ever popular driver for cheap USB dongles. USB dongle (works with rtl8xxxu and rtl8192eu): Bus 001 Device 008: ID 2357:0109 TP-Link TL WN823N RTL8192EU MacBookPro wifi (works with wl): 03:00.0 Network controller [0280]: Broadcom Limited BCM4360 802.11ac Wireless Network Adapter [14e4:43a0] (rev 03) 1 - rtl8192eu fork: https://github.com/Mange/rtl8192eu-linux-driver