Saw this too... but the student recently bought this Macbook Pro. We are
talking to our contacts at Apple... Let's see what they come up with...



-----Original Message-----
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:[email protected]] On Behalf Of Hao, Justin C
Sent: Sunday, September 26, 2010 12:45 AM
To: [email protected]
Subject: Re: [WIRELESS-LAN] Macbooks with odd Airport MAC addresses

I just found an old apple discussion thread from 2008 where another user
claims he received this Mac straight from the factory

http://discussions.apple.com/thread.jspa?threadID=1775581

This could be some kind of manufacturing defect? Unless by chance your user
has the exact MacBook mentioned in the thread

--- 
Justin Hao

On Sep 24, 2010, at 4:17 PM, "Cortes, Diana" <[email protected]> wrote:

> Thought I'd share some interesting news... The student was able to recover
> the box where her Macbook Pro came in and indeed the Airport ID printed on
> the box is 00:11:22:33:44:55
> 
> Diana Cortes, CISSP, CWNA
> University of Miami
> IT - Telecommunications
> 
> 
> -----Original Message-----
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv
> [mailto:[email protected]] On Behalf Of Greg Williams
> Sent: Monday, September 20, 2010 7:19 PM
> To: [email protected]
> Subject: Re: [WIRELESS-LAN] Macbooks with odd Airport MAC addresses
> 
> Not sure if there is software out there for the mac to change this
> automatically, if you just do an "ifconfig en1 ether xx:xx:xx:xx:xx:xx",
the
> mac address will change, but ONLY stay until you reboot the machine, then
it
> changes back.  You have to put that command into  a script under
> /system/library/starupitems/ and then run 
> sudo chmod 700 script.sh
> sudo defaults write com.apple.loginwindow LoginHook
> /System/Library/StartupItems/script.sh
> 
> to get it to stick permanently.  So it seems to me like people are
probably
> doing this intentionally.   
> 
> Greg Williams
> IT Security Principal
> University of Colorado at Colorado Springs
> [email protected]
> 
> 
> -----Original Message-----
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv
> [mailto:[email protected]] On Behalf Of Hao, Justin C
> Sent: Monday, September 20, 2010 4:34 PM
> To: [email protected]
> Subject: Re: [WIRELESS-LAN] Macbooks with odd Airport MAC addresses
> 
> it does show up occasionally, and as far as i can tell, this is because
> users are following on-line tutorials for cracking WEP passwords (several
of
> them reference changing your mac interface to "00:11:22:33:44:55" manually
> in the instructions to setup traffic sniffing.  If your users are using
> these on a production network you may want to follow up as they may have
> inadvertently changed their mac address and have no realized they need to
> change it back.
> 
> or you could be mischievous and block that mac address completely and let
> them come forwards to have their machine fixed.  I don't believe this is a
> bug, but more user-inflicted.
> 
> -----
> Justin Hao 
> CCNA
> Network Engineer, ITS Networking
> The University of Texas at Austin
> [email protected]
> -----
> 
> On Sep 20, 2010, at 5:21 PM, Cortes, Diana wrote:
> 
>> Has anyone encountered any Macbooks with the following MAC addresses:
> 00:11:22:33:44:55? We believe this may be an Apple bug as we have found 2
on
> our campus already with the exact same MAC address.
>> 
>> Thank you,
>> 
>> Diana Cortes, CISSP, CWNA
>> University of MIami
>> IT-Telecommunications
>> 
>> **********
>> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at http://www.educause.edu/groups/.
> 
> **********
> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at http://www.educause.edu/groups/.
> 
> **********
> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at http://www.educause.edu/groups/.
> 
> **********
> Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.
> 

**********
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to