Let's say, I sit down in a mall, open my laptop and connect to a secured mobile hotspot. Then I do it again next week after a reboot. What information would a nearby shop or a passive malicious hacker be able to find about my device? Does my device send out identifying information before joining, like a MAC address? Is this persistent, or randomized?

I intentionally haven't specified a distro, so if something only applies to some network managers, give some details.

Bonus points: what about Android phones?

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 4 months ago (2 children)

On iOS and most androids, your Mac address is only scrambled per network. So when you connect to the same network again, your device will use the same Mac address. This generally isn't an issue if you're using a private wifi network, or any network where the password isn't public, but for public wifi it makes it much easier to identify you.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 4 months ago (1 child)

    And track you, Cisco has had the ability to track MAC addresses over their APs on a map for 2 decades now.

    Also track you over multiple networks- most only care about the SSID- so if you've ever connected to "eduroam" you can be tracked across multiple campuses.

  • source
  • parent
  • hideshow 2 child comments