Home WiFi is now fully set up. Wired APs, minimum transmit power, fast transition, band steering, etc.

[ryanc@infosec.exchange]

@aris They're currently like $40 refurbished on eBay, but might not continue to be available much longer.

[montgomerygator@fouroclockfarms.club]

@ryanc They already do this, Target is known for doing this. They also track your phone's Bluetooth polling requests as well as the camera system being able to track you.

They can also track your eyes and have behavior monitoring, so they know when you notice a display or if you're about to steal something. They also own one of the largest crime labs.

[ryanc@infosec.exchange]

@aris and my admin user -> ssh with root shell exploit for the vendor firmware is on github.

It probably works on some of the other devices from EnGenius.

[ryanc@infosec.exchange]

@MontgomeryGator It's been widely done in retail for well over a decade, including monitoring "probe requests" that happen when the radio is merely on.

This is why Google and Apple added MAC address randomization, but it mostly doesn't help when you actually connect, because it'll keep using the same randomized address for the same network.

[targetdrone@mastodon.social]

@ryanc @MontgomeryGator iPhones have 3 settings for Private WiFi Address for each AP: off, fixed, or rotating. "Fixed" acts as you describe above, but "rotating" changes every time you connect/auth.

Uncoincidentally, "rotating" breaks a lot of guest-WiFi portals, so I end up using fixed more often than I'd like.

[ryanc@infosec.exchange]

@targetdrone @MontgomeryGator Does "rotating" change the DUID and randomize/suppress the hostname?

[ryanc@infosec.exchange]

@targetdrone @MontgomeryGator The sweet spot would be rotating after you haven't used a network for 24 hours.

[zugschlus@zug.network]

@ryanc What Vendor did you chose?

[ryanc@infosec.exchange]

@Zugschlus I'm using second hand EnGenius EAP1300/EAP1300EXT acces points.

I guess I ought to do a blog post about my home network setup?

[zugschlus@zug.network]

@ryanc I would be the first reader.

[ryanc@infosec.exchange]

@Zugschlus These were just about the only option for smoke detector style ceiling mount that can run mainline OpenWRT.

[ryanc@infosec.exchange]

@Zugschlus Did you see the MDF photos I posted a few weeks ago?