Re: [STDS-802-Privacy] Random MAC addresses on Linux
Hi Carlos,
Thanks for reporting this.
Please also note that Jouni added an option for configuring this 24-bit-only randomization in his wpa_supplicant using (mac_addr=2 and preassoc_mac_addr=2).
We can discuss further during the call.
Regards,
Juan Carlos
> -----Original Message-----
> From: Carlos Jesús Bernardos Cano [mailto:cjbc@xxxxxxxxxx]
> Sent: Wednesday, October 01, 2014 7:01 AM
> To: Zuniga, Juan Carlos
> Cc: STDS-802-PRIVACY@xxxxxxxxxxxxxxxxx
> Subject: Re: [STDS-802-Privacy] Random MAC addresses on Linux
>
> Hi Juan Carlos, all,
>
> I'm doing some testing with macchanger and network-manager in Debian,
> based on [1].
>
> I've found that the tool does not seem to allow keeping the vendor part of
> the MAC address and randomize the last 24 bits, so I'd probably implement a
> small script that does that and then I'll try perform additional testing.
>
> I hope I'll be able to provide more details on the experiments' outcome soon.
>
> Thanks,
>
> Carlos
>
>
> [1] https://we.riseup.net/riseuphelp+en/auto-random-macs
>
> On Sun, 2014-09-28 at 21:49 +0000, Zuniga, Juan Carlos wrote:
> > Thanks Jouni, this is excellent!
> >
> > It would be good if people can report their experiences with the different
> client tools that we have so far and report it on the call on Wednesday.
> >
> > Regards,
> >
> > Juan Carlos
> >
> >
> >
> > Sent with Good (www.good.com)
> >
> > ________________________________
> > From: Jouni Malinen
> > Sent: Saturday, September 27, 2014 1:28:09 PM
> > To: STDS-802-PRIVACY@xxxxxxxxxxxxxxxxx
> > Subject: [STDS-802-Privacy] Random MAC addresses on Linux
> >
> > The current snapshot of the wpa_supplicant development branch includes
> > experimental support for randomizing the local MAC address for both
> > pre-association (active scan and GAS/ANQP while not connected) and
> > connected cases. This behavior can be configured separately for each.
> >
> > The configuration parameters are described in the main commit:
> >
> >
> http://w1.fi/cgit/hostap/commit/?id=c267753ba2cc006907c57cf11b06d658f7
> > 83682f
> >
> > Please note that this requires a driver that supports MAC address
> > changes (e.g., ath9k). While number of Linux drivers do have that
> > functionality, some don't support it at all or just claim to have
> > changed the address while not really having changed anything for the
> > actual over-the-air frames.. Anyway, I hope this can provide
> > relatively convenient tool for experimentation.
> >
> > - Jouni
>