We’re rewarding the question askers & reputations are being recalculated! Read more.
18

MAC addresses are link-local only. Most attacks don't (have to) come from the same subnet, so most rely on higher-layer addressing. Changing your mac address does little to hide you. There are a variety of problems with changing your MAC address often. One, off the top of my head, would be that DHCP reservations wouldn't work. It could be marginally less ...


15

MAC addresses are supposed to be unique worldwide, so that no two devices use the same MAC address. This matters when several devices are on the same link: if two devices have the same MAC address, things do not work well at all, in a hard-to-diagnose way. It is possible to force that by changing your MAC address, but then you did it on purpose; with a ...


14

The easiest way would be to just spoof your MAC adress. Just listen to the network, watch which MAC adresses are able to connect and then give your own device the same MAC adress.


14

The question in the original title of your post ("Can a website still detect my real MAC address even if I use different virtual machine each time I visit the website?") is different than the question in the body of your post. To the question in the original title: No, a website should never be able to "detect" your MAC address, under any circumstances. ...


7

There is no effective way to prevent a dedicated attacker from creating multiple accounts. No matter what you do, the attacker will still be able to create multiple "sock puppet" accounts. The best you can do is raise the cost of creating additional accounts. One approach is to require the user to provide a mobile phone number, authenticate the user's ...


7

MAC addresses are not usually available outside of your local network so that won't be an issue. If you use a different VM it could be possible to fingerprint you if you're just cloning the same base machine repeatedly (e.g. panopticlick), however if you use different base machines, then the only likely way to identify you (assuming you don't authenticate ...


7

Whilst at the moment (as mentioned in other answers) MAC addresses are generally link local (although there are some protocols which leak that information to remote networks), it's interesting to note that when IPv6 becomes more prevalent MAC addresses are likely to be more important. A common way of constructing an IPv6 host address is to include the MAC ...


6

It has a downside in enterprise environments - switches optimise traffic flow by various methods, including remembering which port traffic from a particular MAC address comes in - so that traffic back to that MAC is only sent out that port. MAC tables are updated in switches as new data comes in, but changing MAC addresses all the time would add overhead......


5

I see one good defensive value of routinely changing the MAC address for your wireless card when using laptop. Even when using encryption, your client mac address is leaked out in the air whenever your laptop is turned on. When it probes for known access points, or sending traffic to associated access-points. An attacker can track a victim by setting up ...


5

I suppose it depends on what problem you are trying to solve. If you are trying to maximize your anonymity then yes, I could see MAC address randomization as a part of a larger solution focused on remaining anonymous. I could imagine a scenario where a vulnerability existed in a given vendor's NIC firmware and by targeting a vendor's NICs by their MAC ...


5

I am not sure of any commercial implementation, but I saw an interesting idea that you can track physical proximity using signal strength, which AP, etc and determine that if the location suddenly is very different, that is likely a spoofer. I also found an interesting paper on spoofing detection using a fingerprinting technique. The captive portal will be ...


5

In wireless networks, the signals travel through the air; anybody can listen to them and capture the source MAC address. Therefore, it's easy for an attacker to find out the white-listed MAC addresses and impersonate them. Think of it this way: A group of friends talking to each others, and they only talk to people they know. When one of them says something,...


5

MAC filtering doesn't provide an high security. An attacker can simply see which devices (and their relative MACs) are connected to your network, and spoof one of theese MACs. When he changes it to his machine, he can connects to your network without any problem. In conclusion, MAC address filtering doesn't increase your security.


5

Short answer: Does MAC filtering in WLAN protect against MAC spoofing? No, in no way. he manages to spoof one of the user's MAC address, You make it sound like that's a hard thing. The MAC address used by your network card is a setting in the network manager – trivial to change. MAC addresses of other users can be observed in plain text on the air, ...


4

As other pointed, you first need to snoop existing mac addresses (using wireshark) and spoof them. Except that : You probably will not get significant packets if you plug your device behind a switch (due to the way switches function). You probably will not get any packets at all if the MAC filtering function is provided by a switch that filters by MAC and ...


4

To sumpplement D.W.'s excellent answer... You can't read the MAC address of a client across a router. A MAC adress can easily be changed (so easy it doesn't even dserve the 'spoofed' epiphet). A browser user agent is not unique and again trivial to change. The only 'Computer name' you'll see at server end is the DNS PTR record for the IP address - hence ...


4

According to my research on the subject, and running tests there are no quick fixes for tracking the source individual perpetrating this type of attack because of the nature of it. Meaning tracking, but not filtering/blocking. The attack method itself is basically easy to do compared to the scale of other types of attacks out there due to fundamental flaws ...


4

It is really that simple, if the AP has a MAC filter, any device which attempts to authenticate that doesn't have a MAC address on the list will just be denied. However the problem from a security perspective (which is why this should not be used as a security function) is that it is trivial to spoof a valid MAC address (by sniffing them wirelessly and ...


4

In Windows vista and above, the OS allows change to specific MAC addresses only, which are, the addresses starting with 2A. However, as far as I know, there is no such limitation in Linux. I suggest you try to spoof your MAC again in windows, this time choose an address starting with 2A and see if it works this time. EDIT: It doesn't have to be exactly 2A. ...


4

I see your solution as security through obscurity, it is really not that important to change your mac address after each bootup. But I can see it from your perspective, people mapping the networks and such, will have a "huge list" of computers suddenly, from all sorts of vendors (Depends on how often you reboot your pc). And thus, will make it harder for him ...


4

So it appears that this service is vulnerable to MAC spoofing. I'm not sure that I see a direct security concern threat here. You've demonstrated that you can bypass their licensing to access the service for free. That's not necessarily a security problem. But as @AndréBorie has pointed out, activity performed by the MAC spoofer will appear to come from you....


4

I've read that the way wifi works is that your computer sends out requests looking for any wifi it recognizes. That depends on the configuration of both the access point (AP) and your device. Most APs periodically emit beacon frames, where they broadcast their presence along with the wifi's name (SSID), capabilities and other information. Your device can ...


4

I have no idea where you got your information, but let's start at the very beginning citing reputable sources as we go. This youtube video shows the process for enrolling a new device in WhatsApp. Since WhatsApp is built on the same cryptography as the Signal app -- called the Signal Protocol (source), let's assume they do the same stuff inside (Signal is ...


3

Can an attacker eavesdrop on Ethernet data, if they can connect to it? Yes. An attacker who is physically connected to your Ethernet network can probably eavesdrop upon all of the packets sent upon that local-area network. You might think that switched Ethernet would prevent that, but in fact on many/most Ethernet switches, it does not. An attacker can ...


3

Partially, yes. Windows OS (eg. using ipconfig command) sees the spoofed MAC address as the permanent MAC address. However you can NOT say all of the applications running on Windows will see the spoofed one as the permanent one. Applications might be using some ways to acquire the permanent (burned-in) MAC address of the adapter. (For instance they might be ...


3

The MAC address of the network card can only be seen inside the local network. I think you cannot be really anonymous inside a local network anyway. But apart from that most network cards can be set to a different MAC address using software. There are various ways to change your mac address with different NICs, but I would trust hardware more if it was ...


3

When using a phone while logged in to your accounts, you're visible. I remember reading an article that a determined owner can track you between APs and thus know your location and routine. Now I found out that one can randomize one's MAC address, so I was wondering if that can prevent my identification and consequent tracking. Spoofing your MAC address ...


3

The MAC address only identifies your network interface. That is all. It does nothing to change, alter, spoof or hide your device ID's such as OS and OS versions, services running on open ports, what websites you connect to, the IP address you are using, etc. All of these things are still visible. There is a reason cybersecurity professionals advocate many ...


3

MAC Whitelisting as well as Blacklisting are pretty much useless for security. Your strong WPA/2 passphrase however is great (if WPS isn't enabled). As kub0x said, the Layer 2 info isn't encrypted. MAC addresses are fully visible: If you have a laptop or a wifi card, install or VM a linux distro and fire up the aircrack suite. With Airodump-ng, you can see ...


3

Neither method requires WEP nor WPA authorized access to the network, just proximity. In Windows I use Nirsoft WiFi Channel Monitor to expose the MAC's on a particular AP. It's a single file/no installation truly portable app. http://www.nirsoft.net/utils/wifi_channel_monitor.html It requires MS Netmon drivers but they're free and ready to use without a ...


Only top voted, non community-wiki answers of a minimum length are eligible