Hacker News Reader

So, someone can just spoof that mac address and have their activity logged as yours? What could possibly go wrong?

Yep! Last I checked (which admittedly was a while ago), 00:00:00:00:00:01 was valid for xfinitywifi

I feel like it could also have bad legal consequences to have your MAC associated with an xfinity account. What if somebody spoofs your MAC and does sketchy illegal things? Similar to anecdotal stories I heard about people running TOR relays and subsequently hearing from law enforcement.

Thinking about this again, there's a bit of difference: most people running a Tor exit node probably made a conscious decision to take this risk.

Reply on news.ycombinator.com