TLDR InfoSec · ATTACKS & VULNERABILITIES
IPHONES HAVE BEEN EXPOSING YOUR UNIQUE MAC
Summary from the TLDR InfoSec newsletter
Apple introduced a feature in iOS 14 that claimed to display a unique, private MAC address for each SSID an iPhone connected to. Two security researchers discovered that this feature doesn’t work on iOS 17.1. They then tested all versions of the feature since it was released and learned that it had never worked. The researchers discovered that the iPhone would send the private MAC address in the source field in multicast messages upon joining a network but the real MAC address would still be sent in a different field.