MAC randomization

Balokzx

What does MAC randomization enable under GrapheneOS and iOS 18.2 by default when using an Ethernet cable ? I know GrapheneOS and iOS 18.2 support MAC randomization for Wi-Fi connection but I don't know about Ethernet connection. I noticed that there is no Ethernet option under GrapheneOS unlike Wi-Fi. And under iOS 18.2, there is no "Private Address" (MAC randomization) option for Ethernet connection, only "Limit IP Address Tracking", "Configure IP", "Configure DNS" and "Configure Proxy"

My recent devices are up to date

de0u

Balokzx I think the idea with MAC randomization for Wi-Fi is to avoid a mobile device that may frequently move among Wi-Fi networks from being tracked across them.

In the other direction, it is somewhat customary for DHCP servers on wired Ethernet networks to issue a single permanent IP address to each device as a function of its (presumed stable) MAC address. And it is not considered very common for a single device to join multiple wired Ethernets in typical usage. In fact, some corporate wired networks do not allow unknown devices to connect: each switch port has a list of allowed MAC addresses.

So I think the reason why GrapheneOS may not have MAC address randomization for wired Ethernet is that a clear need hasn't yet been identified.

IcyScroll

de0u So I think the reason why GrapheneOS may not have MAC address randomization for wired Ethernet is that a clear need hasn't yet been identified.

I believe wired Ethernet connections should have a setting at least for choosing between hardware MAC address and a random one (similar to already existing per-network randomization). This would be helpful for niche use cases, such as wanting to connect to a network (which has very poor coverage or no WiFi AP at all) without revealing too much information about the device.

I don't know if Pixels with GOS use their hardware MAC address when they connect to Ethernet. If they do, they reveal a non-resettable hardware identifier that might be used to track them accross different Ethernet networks.

de0u

IcyScroll I don't know if Pixels with GOS use their hardware MAC address when they connect to Ethernet. If they do, they reveal a non-resettable hardware identifier that might be used to track them accross different Ethernet networks.

Each Ethernet dongle has its own MAC address. They're pretty cheap! So that is a potential workaround.

I haven't used wired Ethernet on GrapheneOS. I don't know that it doesn't have a MAC-address randomization feature. If somebody tries and observes that it doesn't and plans to use multiple wired Ethernets and dongle switching is insufficient, it would be possible to file an issue in the issue tracker. But personally I wouldn't expect it to be seen as an urgent matter compared to others.

Please note that I don't speak for the GrapheneOS project.

Balokzx

de0u

I see. So I don't have to worry. Thanks for the information