Should you use MAC addresses instead of UDIDs to identify the device?

Posted by jimbrock on Friday October 28, 2011 @06:58PM
from the blog.privacychoice.org dept.

http://blog.privacychoice.org/2011/10/28/developer-alert-should-you-use-mac-addresses-instead-of-udids/

Are we in a game of whack-a-mole with Apple?

( 2 comments | 3 points | on HN )

Re:Should you use MAC addresses instead of UDIDs to identify... by jarin on Friday October 28, 2011 @07:49PM (#3170554)

The MAC address is certainly easier to spoof, as you are only essentially dealing with 3 bytes of uniqueness (assuming iOS devices all have known manufacturer IDs). By comparison, the UDID is 20 bytes long.

[ Parent | on HN ]

Re:Should you use MAC addresses instead of UDIDs to identify... by cpeterso on Friday October 28, 2011 @09:08PM (#3170738)

Here is a link to the original TechCrunch article:

http://techcrunch.com/2011/10/28/w3i-suggests-ios-developers...

Also, W3i is not recommending developers collect MAC addresses instead of UDIDs. W3i is recommending that developers collect users' MAC addresses and associated UDID. With two "primary" keys for each user, developers do not lose their old tracking data when Apple prevents apps from reading UDID.

[ Parent | on HN ]