{"action":"created","issue":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2361","repository_url":"https://api.github.com/repos/QubesOS/qubes-issues","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2361/labels{/name}","comments_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2361/comments","events_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2361/events","html_url":"https://github.com/QubesOS/qubes-issues/issues/2361","id":180878196,"number":2361,"title":"Explore local network privacy solutions beyond MAC address randomization","user":{"login":"andrewdavidwong","id":10417133,"avatar_url":"https://avatars.githubusercontent.com/u/10417133?v=3","gravatar_id":"","url":"https://api.github.com/users/andrewdavidwong","html_url":"https://github.com/andrewdavidwong","followers_url":"https://api.github.com/users/andrewdavidwong/followers","following_url":"https://api.github.com/users/andrewdavidwong/following{/other_user}","gists_url":"https://api.github.com/users/andrewdavidwong/gists{/gist_id}","starred_url":"https://api.github.com/users/andrewdavidwong/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andrewdavidwong/subscriptions","organizations_url":"https://api.github.com/users/andrewdavidwong/orgs","repos_url":"https://api.github.com/users/andrewdavidwong/repos","events_url":"https://api.github.com/users/andrewdavidwong/events{/privacy}","received_events_url":"https://api.github.com/users/andrewdavidwong/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/C:%20other","name":"C: other","color":"cccccc"},{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/help%20wanted","name":"help wanted","color":"fad8c7"},{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/privacy","name":"privacy","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/milestones/19","html_url":"https://github.com/QubesOS/qubes-issues/milestones/Far%20in%20the%20future","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/milestones/19/labels","id":1284545,"number":19,"title":"Far in the future","description":"AKA when we'll have a lot of time, probably never.\r\nFeel free to pick up any issues here and implement it.","creator":{"login":"marmarek","id":726704,"avatar_url":"https://avatars.githubusercontent.com/u/726704?v=3","gravatar_id":"","url":"https://api.github.com/users/marmarek","html_url":"https://github.com/marmarek","followers_url":"https://api.github.com/users/marmarek/followers","following_url":"https://api.github.com/users/marmarek/following{/other_user}","gists_url":"https://api.github.com/users/marmarek/gists{/gist_id}","starred_url":"https://api.github.com/users/marmarek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marmarek/subscriptions","organizations_url":"https://api.github.com/users/marmarek/orgs","repos_url":"https://api.github.com/users/marmarek/repos","events_url":"https://api.github.com/users/marmarek/events{/privacy}","received_events_url":"https://api.github.com/users/marmarek/received_events","type":"User","site_admin":false},"open_issues":76,"closed_issues":10,"state":"open","created_at":"2015-09-01T17:44:33Z","updated_at":"2016-10-05T12:55:37Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2016-10-04T12:23:09Z","updated_at":"2016-10-07T04:22:05Z","closed_at":null,"body":"In our issue on MAC randomization (#938), @adrelanos [shared](https://github.com/QubesOS/qubes-issues/issues/938#issuecomment-231118785) a recent research paper by Vanhoef et al., [\"Why MAC Address Randomization is not Enough: An Analysis of Wi-Fi Network Discovery Mechanisms.\"](http://papers.mathyvanhoef.com/asiaccs2016.pdf)\r\n\r\n@tasket then [recommended](https://github.com/QubesOS/qubes-issues/issues/938#issuecomment-251198637) that a new issue be created for the problem raised by this research.\r\n\r\nAbstract: \r\n> We present several novel techniques to track (unassociated)\r\n> mobile devices by abusing features of the Wi-Fi standard. This shows\r\n> that using random MAC addresses, on its own, does not guarantee privacy.\r\n> First, we show that information elements in probe requests can be used\r\n> to fingerprint devices. We then combine these fingerprints with\r\n> incremental sequence numbers, to create a tracking algorithm that does\r\n> not rely on unique identifiers such as MAC addresses. Based on\r\n> real-world datasets, we demonstrate that our algorithm can correctly\r\n> track as much as 50% of devices for at least 20 minutes. We also show\r\n> that commodity Wi-Fi devices use predictable scrambler seeds. These can\r\n> be used to improve the performance of our tracking algorithm. Finally,\r\n> we present two attacks that reveal the real MAC address of a device,\r\n> even if MAC address randomization is used. In the first one, we create\r\n> fake hotspots to induce clients to connect using their real MAC address.\r\n> The second technique relies on the new 802.11u standard, commonly\r\n> referred to as Hotspot 2.0, where we show that Linux and Windows send\r\n> Access Network Query Protocol (ANQP) requests using their real MAC address.\r\n"},"comment":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/comments/252149873","html_url":"https://github.com/QubesOS/qubes-issues/issues/2361#issuecomment-252149873","issue_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2361","id":252149873,"user":{"login":"tasket","id":14337937,"avatar_url":"https://avatars.githubusercontent.com/u/14337937?v=3","gravatar_id":"","url":"https://api.github.com/users/tasket","html_url":"https://github.com/tasket","followers_url":"https://api.github.com/users/tasket/followers","following_url":"https://api.github.com/users/tasket/following{/other_user}","gists_url":"https://api.github.com/users/tasket/gists{/gist_id}","starred_url":"https://api.github.com/users/tasket/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tasket/subscriptions","organizations_url":"https://api.github.com/users/tasket/orgs","repos_url":"https://api.github.com/users/tasket/repos","events_url":"https://api.github.com/users/tasket/events{/privacy}","received_events_url":"https://api.github.com/users/tasket/received_events","type":"User","site_admin":false},"created_at":"2016-10-07T04:22:05Z","updated_at":"2016-10-07T04:22:05Z","body":"@desmond-decker : Probably NetworkManager will be supplying MAC randomization since they have been working on it for months and now their 1.4.2 release can handle it as just another feature of running the NICs. The scripted approach was always rather spotty and the hardware address would keep returning with some NICs.\r\n\r\nIf you would like to have randomization working correctly now, I'd suggest reading this:\r\nhttps://groups.google.com/d/msgid/qubes-users/0300e698-0120-e9bb-65d4-b4bd0a3d54f1%40openmailbox.org"}}
{"actor":{"display_login":"tasket"}}