Forum

MAC Address Tracking Declassified...
 

This post will answer a lot of questions I've been getting recently.

We're talking about Media Access Control > MAC address - not Mac computers made by Apple. Every device that connects to a network has a MAC address to identify itself on that network, just like you have an IP address that identifies you on the internet. However, sites don't see your MAC address in the same way they see your IP address everytime you connect to their server.

MAC address is found in the Data Link Layer of the TCP/IP model. It's stripped away at every hop. There are ways that a website can find your MAC address using a script or an applet via third party applications - Java, Flash and ActiveX can all be used to make your computer reveal it's MAC address to a web server.

You can visit this site to see it identify your MAC address using an applet in Java and takes 1-15 seconds:
Find MAC Address: My MAC Address Lookup | Get MAC Address Finder

When I click to run the applet on my browser it can't without asking me to enable Java. I have Java disabled because it adds a whole host of other factors sites can use to identify you even without needing the MAC!

That site uses Java to find your MAC address **edit

So now you know how it's done, I won't get into the how to hide your MAC which may take several volumes of books to describe, you need to SPOOF your MAC. You can't change it because it's burned into the device, but you can spoof it which makes it appear different and is good and quick for our purposes.

Up until recently I've always recommended the full version of SMAC, however Technitium has become superior and with more you can use it for. You can get it free here (although the keygen was always free with SMAC;)):
Technitium | Welcome

You will need to spoof all active MACs, this includes NICs such as printers and other wireless devices you may have on the same network, as these can be read in the same way.

Good post MadSam this will help a lot of people out, also would like to add when you create a new vmware account and install a new operating system you will get get a new MAC address, another litte perk of using vmware.

VMWare will do this, but it won't spoof your NICs, or depending on the type of connection you use where you need to change the MAC on how you connect to the internet. So you still need a spoofing tool anyway to check your active adapters.

we actually have been over these Mac's and SMac before. I use 2.0, it works well.
I have not used Technitium as aspkin recomended a few months in the forums. In SMAC 2.0 there is a little box that you can check and uncheck that says: view all Mac connection used/ unused.

click this and look at the list. you will see a list of almost 30 connections of all types.
anything, ANYTHING! with a mac address next to it, weather currently connected or not needs to be spoofed. it will actual say in the list at the right hand side...

Spoofed/Unspoofed. make sure you click to spoof each one individually and click to refresh the connect. that adapter will temp shut down and then enable. when it come back up it will then be spoofed. I usually choose a random manufacture for the NIC as you can change this, and then randomly click and choose for each connection on the list.

my system has on average 18+ connections of all types with mac address that are spoofed. This is key, spoofing everything with a mac address weather connected of not.

Madsam while covered before an informative post.
we spoke about router Mac addresses in another post, do you now know that you can change the router Mac without replacing it? Netgear are great for this.

I am sure i can dig up the keygen for SMAC 2.0 or at least the link to it if you guys are interested. Otherwise if Technitium is good let me know.

While you can change the modem/router MAC from the setup page depending on what internet connection you use, you still need to spoof all of your other active adapters MACs. I mentioned I used to use SMAC but now recommend Technitium because it has gained some advantages in its newest version, however you can still use SMAC and get the latest version SMAC 2.7 Pro here:
SMAC 2.7 Pro

i usually use SMAC 2.0 as the newer version was in beta. Direct download is good. does this include a keygen? I have a keygen for 2.0

I clicked to download SMac 2.7 pro. make sure you have winrar as it is an archive.

choose: WinRAR x86 (32 bit) 3.93 Graphic and command line Trial 1332 KB
WinRAR x64 (64 bit) 3.93

trial works fine:

WinRAR archiver, a powerful tool to process RAR and ZIP files

Nice Work Madsam,,,,,,,,,,,,,,VERY Nice Indeed,,,,,,,,,,,,,

I use smac 2.0 and the same key works for as many times as you want.

^^^^^^^^
Yes it does.
I have used my key 100+ times... LOL

Now - if you will bear with my ignorance - does MAC matter for dial-up connection? Seems - from your explanation - that it would since Java and ActiveX apps are still run when you visit certain...websites.

If you use dial up then you don't have a MAC address to worry about. At least that is the general view, that I support. Some say yes your dial up does have a MAC, some say no. If it does, from my findings at least not one that can be read.

Ok thanks for the reply.

While SMAC is still fine to use, the newer versions of Technitium have become far more advanced. My point was we can all get them both free so there'd no reason to be recommending a free version over paid.

The newest version of Technitium v5 R3 automatically shows you all the MACs you need to be concerned with - it also allows you access to the DHCP and TCP/IP and lets you save system settings so you can return to the configuration you had before for use with different setups. With SMAC my guess is you're either using random MACs or re entering the MACs manually you had used before with different setups.

I use tethering and there's usually at least 1 mac that shows up, best way to tell is to get a copy and see for yourself if you have any macs that need spoofing.

From what i've read the MAC address cannot be changed on a Wireless Broadband Dongle - has anyone used a 3G router to go around this restrictoin - if so how easy/difficult is it to use a software such as SMAC/technitium to spoof the MAC address?

Using Smac/Technitium is child's play. It won't change the MAC on a wireless broadband dongle though, a router would indeed get around this but it would be easier just to get a new dongle as many people on here just get a new NIC if that's what they use to connect.

MadSam, thank you for all the great info presented in such an understandable way. I used to upload my inventory to Amazon with a PDA /scanner but did it through the subscription Neatoscan ( an Amazon database for price checking ). Would I need to change the mac on my Dell PDA too?

[QUOTE=MadSam;187696]
You can visit this site to see it identify your MAC address using an applet in Java and takes 1-15 seconds:
Find MAC Address: My MAC Address Lookup | Get MAC Address Finder

Doesn't work for me - is this only for PCs? (I use a MacBook Pro).

I know this post is a bit old but I have searched this forum many times and still can't connect the two dots. I would love for someone to tell me if I use either one of these mac spoof sites ..does this also change your ip address if i have a router(wireless modem with timewarner cable)? If not how do you change your ip address also along with the mac address on more then one account? I'am tired of dial up service.

Why is it, that the website provided to find your MAC via Java requires the stock installation of Google Chrome to install additional plugins. So, without these plugins the previous website could not pull up your MAC.

But..

Amaz0n still can? I do not believe you need to install additional plugins to use Amaz0n

Just looking for more clarification... Someone really smart needs to come forward with research to prove all this tracking. My guess is that such educated people are not interested in disclosing trade secrets and high technology with the members of this forum. However, a rouge hacker or independent developer could maybe be hired or persuaded to review all traffic with such a site and provide factual data on how ALL tracking is accomplished. within a certain site.. I mean if they are running advanced JS to obtain info about our computers, it should be to hard to decode such a program.

nearly all of us on this forum are becoming experts in our methods via trail and error. I just think at some point a technical approach could be more then helpful.