When I first got to my university I had to provide my MAC address to get access to the internet. What I want to know is what information can they get from having my MAC address linked to my name. I use Private Internet Access as my VPN and have Zenmate for Chrome. When I'm plugged in to their network can they see what I search just by my MAC address?
They're requesting your MAC address because they're using MAC filtering to control access to the WiFi network. That does not in and of itself constitute the ability to see what you're doing when you're on the school's network, and certainly not when you're at home.
If this is the only requirement, and they are not also requiring you to install things (monitoring software, root certificates) then it gives them no ability at all to see what happens when you're at home, or on any network other than theirs, and even on their network, they will only have the ability to see unencrypted traffic.
@Xander is partly right. Documenting your MAC address allows them to do one (or more, or all) of a few things:
- MAC Address Filtering
The school may be using MAC address filtering to (try) to keep unauthorized devices off of the network. While this is easily bypassed, once an attacker knows an authorized address, it does make joining the network a bit more difficult than just hopping on with a shared/stolen password.
- Rogue Device Monitoring
Knowing the addresses for the devices they've approved to be on the network allows them to monitor and recognize when a non-approved device joins.
- Activity Monitoring & Attribution
Knowing which MAC addresses belong to whom allows the school to easily attribute malicious (or otherwise unapproved) activity to a device owner. Given that they probably also have contact information for you, this allows for corrective action to be taken, and/or notifications to be sent, without having to physically track the device down.
Giving them you MAC address alone does not allow them to do any monitoring or control of your device when it is not connected to their network. Unless you've allowed the school to install some software on your computer (or the computer itself is owned and maintained by the school), they will not be able to see what you do with your computer when you're at home or on another network they do not control.
MAC addresses are layer 2 on the OSI model, and as such are only transferred ONE network hop. For instance, it would be impossible for me to collect your MAC address unless you were directly connected to me. MAC addresses are used for direct communication between network device (Routers, switches, etc).
Unless your home network was directly connected to your school's network, it would be impossible for your school to know what your MAC address was at your home network.
Here's a good resource about what your MAC address is and does: http://www.tcpipguide.com/free/t_DataLinkLayerLayer2.htm
It depends. If you are using their DNS server and they are logging which IP is assigned to you (IPs can be assigned based on MAC address by the dhcp server) then they can see what sites you visit even when using a VPN solution. They should however be unable to see what you are searching for as this will be tunnelled.
Best is to use a DNS outside their network which is also tunnelled through your VPN.
If you use VPN you can tunnel all traffic including DNS through the tunnel, and then the university won't see what you're doing online. They can see the tunnel though.
What you search by Google HTTPS should be encrypted, even when not over VPN. The keywords in the URL should appear encrypted in the logs. This is how I understand it, but I haven't tested this so I'm not 100% sure if that is actually the case.
However... organisations can act as MITM (man in the middle) for SSL certificates. To get this working they need to install their own root certificate on your computer. They can require you to do this. This means they can see your logins to Facebook and Gmail if they want to, and see that the query in that Google HTTPS URL. If you have some trust in your university, they won't do this in general. If you are a country where human rights are not high on the agenda, they (or the secret service over there) might do this.
But if you use VPN, that won't work with setting up the connection and the traffic through that tunnel - so I think that is safe.
Assume there is a TCP packet sniffer that capture all the TCP packets in the campus network (mostly likely for research purposes, or security operation needs), people who have access to this packets trace and the database that maintains the mapping between the MAC address and your real-life identity, will be able to at least know what IP addresses you (it's actually your MAC address) have visited.
There is a notion that you should use HTTPS as much as possible. By doing that, at least other people have no way to know what content (search text, tweets) have been exchanged between you and the remote websites.