TLDR InfoSec · ATTACKS & VULNERABILITIES

IPHONES HAVE BEEN EXPOSING YOUR UNIQUE MAC

arstechnica.com3 min read

Summary from the TLDR InfoSec newsletter

Apple introduced a feature in iOS 14 that claimed to display a unique, private MAC address for each SSID an iPhone connected to. Two security researchers discovered that this feature doesn’t work on iOS 17.1. They then tested all versions of the feature since it was released and learned that it had never worked. The researchers discovered that the iPhone would send the private MAC address in the source field in multicast messages upon joining a network but the real MAC address would still be sent in a different field.