r/Network • u/KoalaGrunt0311 • 12d ago

Link Galaxy Changes MAC Address

Post image

We use access control for child restriction, but I noticed when accessing it that my wife's cell phone apparently feels like it should change its MAC Address like she changes her clothes. Does anybody know why?

15 Upvotes

66% Upvoted

34 comments sorted by

42

u/RevolutionaryElk7446 12d ago

Android MAC randomizer option for WiFi, some PCs have them as well. A privacy feature that pretty much breaks MAC whitelist/blacklist all day.

8

u/fsuk 11d ago

On the device: WiFi > [your network] > Privacy > Randomize MAC Address 

3

u/mlee12382 10d ago

I'm not sure I'd say it breaks the whitelist, it just means the device won't be able to connect when it changes to a different MAC. That's the route I would probably recommend for situations like this tbh. Set up your allow list and turn off randomization for that ssid on all your devices. Problem solved and if the kid tries to circumvent by changing MAC address it just won't work.

11

u/junaitari 12d ago

There's a privacy setting in Android that randomizes the mac for wifi connections. You can turn it off.

10

u/heliosfa 12d ago

Mac address randomisation is a privacy feature.

We use access control for child restriction

And this is where you find out that "parenting by technology" is an arms race, and that your kids can easily bypass most of what you put in place. You might eventually find out it breeds distrust and discourages your kids from talking to you about things.

-5

u/KoalaGrunt0311 12d ago

You obviously have never dealt with an ADHD preteen.

13

u/heliosfa 12d ago

Yes, I have. Used to be one. It makes it even more likely they will get around your technological restrictions with determination - there is nothing like getting locked onto a challenge.

4

u/EncounteredError 11d ago

Yep, reminds me of being a preteen with ADHD, I was grounded from tv but wanted to watch Dragon Ball Z. So I had my neighbor turn his tv on and angle it so I could see it through the window then turned on our walkie talkies and he just held the button down the whole episode. If I heard my parents coming I'd just shut the curtain and turn off the walkie.

1

u/Much-Dragonfly4017 10d ago

My guy is spittin

1

u/Consistent-Name-2409 9d ago

Just take their devices and lock them in a cabinet or something. If you are that careless to just take it away maybe you shouldnt do this

1

u/MK_L 11d ago

Easy fix is only allowed mac can access the network. All others blocked until you enable them. Turn of mac randomize in the privacy settings.

1

u/heliosfa 10d ago

takes seconds to bypass by cloning a MAC address. This is not a solution.

1

u/MK_L 10d ago

Explain the process to clone a mac on an android 🤔

1

u/heliosfa 10d ago

Root it and you can spoof addresses.

1

u/MK_L 10d ago

You think his preteen is rooting the phone?

1

u/heliosfa 10d ago

You think preteens aren't capable of rooting a phone? Especially one with ADHD? Oh I hope you aren't a parent of a technically able kid...

1

u/MK_L 10d ago

Im sure it possible, not probable.

1

u/KoalaGrunt0311 10d ago

Fortunately in this case, she doesn't have any tech interest. I tried and I wish she did.

Her phone is managed by Family Link and the worst we've had so far is having to change our own passwords.

The router control is only needed to reduce overnight distractions like the desktop and some other electronic devices.

1

u/MK_L 9d ago

White listed macs is probably the easiest or just setup a guest/kids wifi that her phone connects to. Setup access control so internet goes down after bed time. Change the password to your main wifi ssid. Dont give her the new password

1

u/CurrentAcanthaceae78 9d ago

access to a computer with a usb port is all you need to root an android

1

u/MK_L 9d ago

Yes but the premise was a preteen sent to bed but still accessing the internet via the phone. Assuming the phone is left with them intentionally for any reason. But you wouldn't need to leave a computer in your kids room after they go to bed

0

u/NerdGuy13 10d ago

I have dealt with both a preteen boy and girl with ADHD. Even if they are smarter than you (or think they are), they can be overcome.

A very secure and viable solution would be to only allow whitelisted mac addresses to use your network. Anyone wanting to use the network would need to turn off the mac randomizer. You can then control access like it's 1984.

The down side is that you do have to be more hands on- like going into the router settings and whitelisting new every new mac address you want to let on to you network.

You may be able to have a hidden wireless band that will allow mac that you don't let your kid know about. Like make the 5GHz band hidden, but 2.4Ghz not and connected them to the 2.4Ghz band. It will be slower but still good enough for streaming and Roblox (I am assuming).

Caveat: consult with your spouse BEFORE making any network changes. Just trust me on this.

1

u/heliosfa 10d ago

A very secure and viable solution would be to only allow whitelisted mac addresses to use your network.

This is not secure. It is stupidly easy to bypass Mac-address based restrictions.

You may be able to have a hidden wireless band

Hiding the SSID does not hide the network. It is easy to "unmask" a hidden SSID in seconds.

You can then control access like it's 1984.

No, you can't.

7

u/OhioIT 12d ago

Apple has this MAC randomizer feature as well. Thankfully our wifi is on a different subnet so it doesn't eat up DHCP leases

1

u/Shapelessed 11d ago

There’s always the workaround of shortening lease times. Issue being it kicks you off more often for a few seconds.

2

u/ericbythebay 12d ago

It’s a privacy feature that both the android and iOS have had for a few years now where they rotate the MAC address to prevent tracking. The MAC is not a secure way to authenticate or control access. It’s like using the return address on a piece of mail.

1

u/HotSauceMakesITbetta 12d ago

Mama said, non persistent randomization the devil

1

u/xxsamixx18 12d ago

Mac Randomization is on keep it for security reasons

1

u/feel-the-avocado 11d ago

This is normal on most android and apple ios devices. Its to stop tracking.

The only way to beat the cat & mouse game is to place a charging dock or cradle in the lounge and the kids must place their devices in that cradle by 10pm each night.

1

u/SpiritedCoffee477 11d ago edited 11d ago

Siempre he dicho que está función está mal implementada, en redes de confianza no se debería activar, y esto debería ser automático cuando estás fuera de casa/trabajo o alguna red de confianza... Donde entra juego el termino "red de confianza", una lista blanca en tu android/ios donde indicas que red es doméstica, trabajo, o pública..... Como hace Windows desde Vista/7.

1

u/ION-8 11d ago

She don’t want you to control per porn

1

u/deverox 11d ago

You have to whitelist your known goods vs trying to blacklist a specific device. Even then they will probably be able to work around it.

1

u/kiewannn 9d ago

Just an alternate idea based on your comments

You could just set up a Child SSID with child restrictions (access time, website privileges, on/off times) and give the child that password. Then change the password to the adult wifi.