Re: [perpass] privacy implications of UUIDs for IoT devices

In fairness, the vast majority of people have no such need "at home". I
would wager that 99.9% of people who use networked devices on a daily
basis have no idea what a MAC address is, would be at least somewhat
concerned that that sort of consistent data was leaking from them
constantly, and have no need to take an inventory of devices on a
network, nor any idea how they would do that even if they wanted to.

That "feature" is one that only a small portion of people (consisting of
many people on this list, granted) find important and IMO is outweighed
by the privacy and security implications.

-Ross Schulman

On Fri, Oct 14, 2016, at 11:18 AM, Christian Huitema wrote:
> The MAC address issue is situational. When a device is moving, you want
> it not tracked, and you want the MAC random. At home, you don't care
> about the device privacy, and you want an easy way to do an inventory of
> what is on the network.
> 
> -- Christian Huitema 
> 
> > On Oct 14, 2016, at 8:07 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:
> > 
> > 
> > 
> >> On 14/10/16 15:55, Paul Kyzivat wrote:
> >> 
> >> When looking at devices seen on WiFi the vendor ID is often displayed
> >> and used to figure out which device is which, to correlate problem
> >> symptoms with likely causes, and many other reasons.
> > 
> > How often? Compared to how often those are uselessly sent?
> > (With the privacy downsides applying in all cases.)
> > 
> > I'm not saying that the "I need to debug stuff" arguments
> > for access to information are baseless, but I do think we
> > (techies) to better consider the privacy implications of
> > things like that.
> > 
> > S.
> > 
> > _______________________________________________
> > perpass mailing list
> > perpass@ietf.org
> > https://www.ietf.org/mailman/listinfo/perpass
> 
> _______________________________________________
> perpass mailing list
> perpass@ietf.org
> https://www.ietf.org/mailman/listinfo/perpass