Only a packet capture will tell, and as Eric pointed out, doesn't seem to
be happening on the Beta. Time will tell "how" this feature is implemented.

I do see this having the following impact:
*Band Steering (Cisco-speak=Band Select) -- If probes are sent from dif.
mac's per radio this will break current implementation of Band Steering.
*Roaming troubleshooting -- Analyzing when a STA begins to 'Probe' for
other AP's (while connected to first AP) will become difficult/impossible.
Will need to rely solely on Auth &Assoc. requests.
*Passive tracking -- Things like 'dwell time' (dots on a map in front of
the bathroom). Will artificially increase those numbers.

All depends on how it's implemented. Different MAC per radio? How often
does it regenerate a random MAC? Once at boot-up? Every probe-cycle? Every
Probe? (that would be 34 dif. mac's in one active-scan @ 1 per channel!).
Just not enough info yet.

Mike Albano


On Tue, Jun 10, 2014 at 6:12 AM, Eric Kenny <eric.ke...@marist.edu> wrote:

> I can confirm that my iPhone 5s with iOS 8 beta does NOT randomize the MAC
> address in probe requests.  This was determined by capturing and analyzing
> the probe request frames.
>
>
>
> Thanks,
>
>
>
> Eric J. Kenny
>
> Network & Security Engineer
>
> Marist College
>
> 3399 North Rd.
>
> Poughkeepsie, NY 12601
>
> 845.575.3820
>
>
>
>
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> [mailto:The EDUCAUSE Wireless Issues
> Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On
> Behalf Of *Frank Sweetser <f...@wpi.edu>
> *Sent:* Tuesday, June 10, 2014 9:03 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] iOS8 and randomized mac addresses
>
>
>
>
> From what I can tell, they're only randomizing the MAC address on probe
> requests. It appears to still use the burned in MAC address for
> association
> and all subsequent traffic.
>
> That said, I'd love for someone with an iOS 8 device and a suitable
> wireless
> sniffer rig to confirm this guess =)
>
> Frank Sweetser fs at wpi.edu | For every problem, there is a solution
> that
> Manager of Network Operations | is simple, elegant, and wrong.
> Worcester Polytechnic Institute | - HL Mencken
>
> On 06/10/2014 08:54 AM, Lee H Badman wrote:
> > ​For historical tracking, could be pretty rough especially when
> individual
> > users have multiple devices.
> >
> >
> > *Lee H. Badman*
> > Network Architect/Wireless TME
> > ITS, Syracuse University
> > 315.443.3003
> >
> ------------------------------------------------------------------------------
>
> > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv
> > on behalf of Eric Kenny
> >
> > *Sent:* Monday, June 9, 2014 2:27 PM
> > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> > *Subject:* Re: [WIRELESS-LAN] iOS8 and randomized mac addresses
> >
> > I h ave the first beta of iOS 8 installed on my iPhone 5s and it does
> not
> > appear to randomize the MAC address, nor are there any visible settings
> to
> > enable/disable that "feature." Since the MAC address remains the same
> while
> > associated to a wireless network it should not pose any issues. The
> original
> > source in the article indicates that iOS 8 will only randomize the MAC
> while
> > scanning for available networks.
> >
> > Thanks,
> >
> > Eric J. Kenny
> >
> > Network & Security Engineer
> >
> > Marist College
> >
> > 3399 North Rd.
> >
> > Poughkeepsie, NY 12601
> >
> > 845.575.3820
> >
> > *From:*The EDUCAUSE Wireless Issues Constituent Group Listserv
> > [mailto:The EDUCAUSE Wireless Issues
> > Constituent Group Listserv ] *On Behalf Of
> > *Rick Coloccia, Jr.
> > *Sent:* Monday, June 9, 2014 11:06 AM
> > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> > *Subject:* [WIRELESS-LAN] iOS8 and randomized mac addresses
> >
> > Just saw this:
> >
> >
> http://www.theverge.com/2014/6/9/5792970/ios-8-strikes-an-unexpected-blow-against-location-tracking
> >
> > It wasn't touted onstage, but a new iOS 8 feature is set to cause havoc
> for
> > location trackers, and score a major win for privacy. As spotted by
> Frederic
> > Jacobs <https://twitter.com/FredericJacobs/status/475601665836744704>,
> the
> > changes have to do with the MAC address used to identify devices wi! th
> in
> > networks. When iOS 8 devices look for a connection, they randomize that
> > address, effectively disguising any trace of the real dev ice until it
> decides
> > to connect to a network.
> >
> >
> > Any guesses as to how this will impact wpa2 auth or location tracking
> with an
> > MSE? (We're a Cisco wireless network with three 5508s in HA config
> running
> > current 7.6 code.)
> >
> > Looking forward to your thoughts...
> >
> > -Rick
> >
> >
> > --
> >
> > Rick Coloccia, Jr.
> >
> > Network Manager
> >
> > State University of NY College at Geneseo
> >
> > 1 College Circle, 119 South Hall
> >
> > Geneseo, NY 14454
> >
> > V: 585-245-5577
> >
> > F: 585-245-5579
> >
> > ********** Participation and subscription information for this EDUCAUSE
> > Constituent Group discussion list can be found at
> > http://www.educause.edu/groups/ <http://%21%20//%20www.educause.e
> du/groups/ <http://%21%20/%20www.educause.edu/groups/>>.
> >
> > ********** Participation and subscription information for this EDUCAUSE
> > Constituent Group discussion list can be found at
> > http://www.educause.edu/groups/. <http://www.educause.edu/groups/>
> >
> > ********** Participation and subscription information for this EDUCAUSE
> > Constituent Group discussion list can be found at
> > http://www.educause.edu/groups/. <http://www.educause.edu/groups/>
> >
>
> **********
> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at http://www.educause.edu/groups/.
> <http://www.educause.edu/groups/>
>
> ********** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at
> http://www.educause.edu/groups/.
>
>

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to