macOS 13.1 ignore wifi Auto-Join flag when FileVault is enabled

Question

Level 1

4 points

macOS 13.1 ignore wifi Auto-Join flag when FileVault is enabled

Macbook Pro M1 Max

macOS 13.1

FileVault: Enabled

Connect to a wifi network and remove the Auto-Join flag, the macOS will still connect to it before login screen and then disconnect after the login.

The same happen if I disconnect to the wifi network before shutdown/restart.

The macOS will reconnect to the last used wifi network before login screen.

This is not the case if filevault is disabled.

How to reproduce:

1. Enable filevault

2. Connect to wifi network: SSID_A, remove the flag Auto-Join

3. Reboot -> wifi network to SSID_A is connected

4. Login -> wifi network is disconnected

5. Connect to wifi SSID_B, remove the flag Auto-Join and disconnect to the wifi

6. Rebbot -> wifi network to SSID_B is connected

7. Login -> wifi network is disconnected

Expected behavior:

1. Disable filevault

2. Connect to wifi network, remove the flag Auto-Join

3. Reboot -> wifi network is not connected

4. Login -> wifi network is not connected

I tried to disable filevault -> forget the network -> reboot -> reconnect to the network with no auto-join flag -> enable filevault. Same behavior it really seems filevault just ignore the auto-join flag.

Any idea?

MacBook Pro 14″

Posted on Jan 22, 2023 12:22 AM

Reply

Answer 1

Barney-15E

Level 10

124,984 points

Jan 22, 2023 12:56 AM in response to cyb3rw0lf

With FileVault enabled, it will connect to networks so it can be found if lost or stolen.

Reply

Answer 2

Barney-15E

Level 10

124,984 points

Jan 22, 2023 10:21 AM in response to cyb3rw0lf

Again, none of the user Wi-Fi settings are available at the FileVault login screen. Almost nothing is available.

I also think this issue started after upgrade to Ventura but I'm not 100% sure.

It probably did. I vaguely remember some Airport changes early on after Ventura was released.

For example I want to connect to a network with a spoofed mac-address and the "auto connection" at login screen will leak my real mac-address. This is monitored by arpwatch that will also spam the chatbot with ARP flipping messages.

Then don't do that with a Ventura Mac with FileVault turned on.

Reply

Answer 3

Barney-15E

Level 10

124,984 points

Jan 22, 2023 8:45 AM in response to cyb3rw0lf

Doesn't make any sense, it will connect only at your last saved network, so you must lose the device in the same building.

It will connect to any network it can identify. When lost or stolen, and the person tries to use Guest access, it will allow connecting to any network. There is nothing in the OS booted on the FileVault login screen. It is a rudimentary login service to decrypt and enable boot. No user wi-fi settings are known. The only thing it has are known networks and authentication for them.

Also why without filevault the device wouldn't need to be found?

What makes you think that will prevent it from being found?

I really have no idea why you think this is a problem, but if you want Apple to know about it, call AppleCare or send Feedback to Apple.

Feedback - macOS - Apple

Reply

Answer 4

cyb3rw0lf Author

Level 1

4 points

Jan 22, 2023 9:27 AM in response to Barney-15E

What makes you think that will prevent it from being found?

Because with filevault disabled it doesn't automatically connect before login. So why the "feature" to be found should only work when filevault is enabled?

I really have no idea why you think this is a problem

For example I want to connect to a network with a spoofed mac-address and the "auto connection" at login screen will leak my real mac-address. This is monitored by arpwatch that will also spam the chatbot with ARP flipping messages.

Mostly it doesn't make sense to allow a user to not auto connect to a network and then ignore it, so I think it's a bug. I'm not sure if it's some software that I have installed which might cause this issue or it's working like that also on a clean installation.

I also think this issue started after upgrade to Ventura but I'm not 100% sure.

Reply

Answer 5

cyb3rw0lf Author

Level 1

4 points

Jan 22, 2023 1:10 AM in response to Barney-15E

Doesn't make any sense, it will connect only at your last saved network, so you must lose the device in the same building.

Also why without filevault the device wouldn't need to be found?

Reply

macOS 13.1 ignore wifi Auto-Join flag when FileVault is enabled

Similar questions