Now I'm pretty sure I know the answer to this question, but I am just curious to see what the security experts of the world think of this.
First a little back story:
I was a former member of a website (I won't be saying any names) and they got mad at me because I was able to successfully exploit their site (after being asked to). I got banned and the rest is history. Turns out they threatened me (personally), and said they are capable of getting my MAC address.
So here's where I started asking questions, I was accessing their site one of three ways; Tor/TAILS, a VPN, or random proxies in random countries. The administrator of the website told me:
"I am able to get your IPv6 and then your MAC address from that no matter how you enter the site, via my firewall."
If I am not mistaken, there are multiple issues with this statement:
- You can turn IPv6 off on any system, and it is off by default
- Getting a IPv6 address from a unfriendly proxy server would be extremely difficult
- Getting an IPv6 from Tor/TAILS would be extremely difficult unless you had access to their exit nodes.
- That networking just does not make sense in a security aspect
So my question being, would it be even remotely possible to get my IPv6/MAC from a firewall accessing a website via Tor/TAILS, proxies, or a VPN? And if so, how could this be done?