Exit Zen
1
English type: Plain text
[[!meta title="Call for testing: MAC address spoofing"]]
0/570 · 57
4
English type: Plain text
You can help Tails! The [[MAC address spoofing|contribute/design/MAC_address]] feature is ready for testing. This feature prevents geographical tracking of your network devices (and by extension, you) by randomising their [[!wikipedia MAC addresses]].
0/2510 · 251
5
English type: Plain text
If you have security auditing skills you are more than welcome to review our [[design|contribute/design/MAC_address]] and [[implementation|contribute/design/MAC_address#implementation]].
0/1860 · 186
7
English type: Title #
Background
0/100 · 10
8
English type: Plain text
Every network device (wired, Wi-Fi/wireless, 3G/mobile) has a [[!wikipedia MAC address]], which is a unique identifier used to address them on the local network. Broadcasting a unique identifier in this manner introduce a couple of potential privacy issues for Tails users. Geographical location tracking is the main one: observing a MAC address at a particular location and time ties the corresponding device to the same location and time. If the real identity of the device's owner is known, their movements can be determined. To prevent this one can temporarily change the MAC address to something random at each boot, which is referred to as "MAC address spoofing".
0/6690 · 669
9
English type: Title #
How to download the test image
0/300 · 30
10
English type: Plain text
Download the latest test ISO from [build_Tails_ISO_devel](http://nightly.tails.boum.org/build_Tails_ISO_devel/). **Keep in mind that this is a test image.** Do not use it for anything else than testing this feature.
0/2150 · 215
11
English type: Title #
How to use MAC spoofing in Tails
0/320 · 32
12
English type: Plain text
MAC spoofing is enabled by default in this test ISO. You can change this with a [[startup option|doc/first_steps/welcome_screen]]. The (preliminary) MAC spoofing documentation tries to explain situations where it actually may be a bad idea to keep this option enabled. However, as this is just a test version we of course urge you to not use it for anything serious, and if possible, to test both to enable and disable the option.
0/4300 · 430
13
English type: Title #
What to test
0/120 · 12
14
English type: Plain text
For any MAC spoofing-related issues you experience using this test ISO, please include the output from the following commands when reporting it to us (note: it requires setting an [[doc/first_steps/welcome_screen/administration_password]]):
0/2400 · 240
15
English type: Plain text
sudo grep spoof-mac /var/log/syslog
sudo grep unblock-network /var/log/syslog
0/860 · 86
16
English type: Plain text
In particular, we would like you to pay extra attention to the following things:
0/800 · 80
17
English type: Title ##
Verify that the MAC spoofing setting is enforced
0/480 · 48
18
English type: Plain text
Please verify that the MAC spoofing setting you select actually is enforced by issuing the following commands:
0/1100 · 110
19
English type: Plain text
. /usr/local/lib/tails-shell-library/hardware.sh
for i in $(get_all_ethernet_nics); do
echo "Interface $i"
macchanger $i
done
0/1500 · 150
20
English type: Plain text
For each network device you'll get an entry looking something like this:
0/720 · 72
21
English type: Plain text
Interface eth0
Permanent MAC: 12:34:56:78:90:ab (unknown)
Current MAC: 12:34:56:f4:fb:22 (unknown)
0/1130 · 113
22
English type: Plain text
The "Permanent MAC" is the network device's "real", unique MAC address; the "Current MAC" is whatever it is set to at the moment, spoofed or not. In other words:
0/1610 · 161
23
English type: Bullet: '* '
if they are *different*, then MAC spoofing is *enabled*;
0/560 · 56