Apple added a new feature to iOS 8 that makes it harder for retailers to track your location by snooping info broadcast over WiFi, but after digging into the MAC randomization feature, a security researcher has found some bad news: it only works if you’ve got cellular data turned off.
The Mac randomization feature which debuted at WWDC, promises to limit retailers’ abilities to track your iPhone when you go to the mall, by sending a random MAC address, instead of the code can be used to grab your iPhone’s unique device ID and location, but users will have to turn off their cellular data connection to start broadcasting random MAC addresses.
“Something hit me and it is even more ridiculous (damning) than the earlier finding that location services should be OFF for random MAC addresses to show up… Basically, if the phone’s cellular data connection is ON, there is no MAC randomization!”
Bhupinder Misra, a Principal Systems Engineer at Airtight, discovered last week that the randomization only happens when an iPhone is in sleep mode, but as soon as you pull out your phone to check a text, you’re basically launching a signal flare to all the iBeacons and other networks in the area, unless you have GPS and location-data turned off.
Misra’s first tests were conducted without a SIM card in the iPhone 5s, but once he popped one in he discovered the even worse news that you need to switch of data altogether.He also discovered MAC randomization isn’t present on the iPhone 5 or iPad Mini, but hasn’t tested the iPhone 6 or 6 Plus yet.
We’ve reached out to Apple for comment on the feature but haven’t heard back yet. If Misra’s discoveries aren’t just a bug to be patch, it significantly shrinks the percentage of people who won’t be tracked, maybe even down to zero.
Source: AirTightNetworks
