top | item 34033851

(no title)

utsuro | 3 years ago

Do you have any info on this? AFAIK, MAC is only distributed in datalink layer around local connections.

I tried some quick packet sniffing browsing Google and did not see my MAC transmitted—as I’d expect (bc like you said, ARP not thing at this layer) also research on “MAC included in http metadata” turns up no results…

If you have any more info on this I’d love to learn more—as I’m puzzled to know why this would happen?

discuss

order

md_|3 years ago

I think the poster isn’t talking about the remote server seeing client MACs (because, as you say) but, rather, about the way mobile OSes use nearby wifi access point SSIDs to provide GPS-less geolocation. Samy Kamkar raised my awareness of this way back in 2010 or so, and this article about his DefCon talk provides a good quick explanation: https://www.bbc.com/news/technology-10850875.