iPhone offer privacy? No, never.

[L&LD]

iPhones have been exposing your unique MAC despite Apple’s promises otherwise

“From the get-go, this feature was useless,” researcher says of feature put into iOS 14.

arstechnica.com

More lies from big manufacturers. Yawn.

 

[sfx2000]

Not a lie - it was a bug, and one discovered by someone thinking outside of the box.

The perm MAC addr is burned into the chip, the temp/random MAC addr's are SW generated.

While non-trivial, it is possible to get a web browser to disclose the MAC addr of the device connecting to the server...

The issue here is that the browser returned the real MAC, not the MAC address in use (temp/random if the feature was enabled)

low-level network code is always a challenge to keep straight

 

[Seria17hri11er]

Not a lie - it was a bug, and one discovered by someone thinking outside of the box.

The perm MAC addr is burned into the chip, the temp/random MAC addr's are SW generated.

While non-trivial, it is possible to get a web browser to disclose the MAC addr of the device connecting to the server...

The issue here is that the browser returned the real MAC, not the MAC address in use (temp/random if the feature was enabled)

low-level network code is always a challenge to keep straight

Oof!

 

[L&LD]

The issue isn't that the browser returned the real MAC address. The issue is that it could.

Can't see this as another example of being 'sold' one thing when the truth is the opposite.

Just like commercial/single-ended VPNs keep you secure/private too. Yeah right.

If I build/sell a promise on a lie, and eventually get caught, do I say it is the fault of the person/software that discovered it? Hardly.

While non-trivial to do, I'm sure Apple ran with the chance that it wouldn't be discovered, rather than believe they made an 'honest' mistake.

If millions and billions are at stake, the truth sides with the money. Always.

 

[sfx2000]

The issue isn't that the browser returned the real MAC address. The issue is that it could.

Could and does - like I mentioned - it was a bug on the client side...

You might be more concerned about why this issue is - Apple indicated MAC privacy, that's a given, and a bug was found and fixed...

What about the other devices in the field - Safari is WebKit, just like Chrome...

Exploits like this - they are unfortunately cross-vendor....

 

[Tech9]

Thanks for letting me know.

Sent from my iPhone using Safari.

 

[NXIL]

Sent from my iPhone using Safari.

We know.

And we know where you are, what you're doing, and what you're thinking!