full-disclosure - client

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <42235353.8040904@csuohio.edu>
From: michael.holstein at csuohio.edu (Michael Holstein)
Subject: client - server

> Are you all sure they cannot know my MAC address? I think they know it when I
> connect to the server (i remember something of TCP/IP stack and
> encapsulation/decapsulation)....

Only if some 3rd party application (like the game) is sending it (this 
is how xbox modchip users get nicked .. also using a similar trick 
involving the HDD serial number).

If you're banned with this game (but nothing else) .. perhaps it's 
something involving the game's serial number? Accounts on Doom servers 
(and the like) have been banned in the past for a variety of reasons.

If this is plane-jane HTTP, try using an anonymous proxy server to hide 
your address (get one from www.multiproxy.org).

MAC addresses don't make it past any layer2 device (dslam is basically a 
fancy switch) unless you're doing something like DLSW (which being a 
residential DSL subscriber, you're not).

~Mike.