Comment Re:Protip: Wired Equivalent Privacy isn't. (Score 1) 52
This is how I interpreted it as well. MAC-spoofed a corporate user device's MAC address, presumably to help evade security measures to deny unrecognized device MACs. And, unless the wifi was open, they also would've required a PSK or credentials for RADIUS authentication if setup for .1X.
VERY difficult to spot spoofed MACs if operating in the same RF air-space though. Finding that the same MAC was in use by the employee in some non-related area made this much easier. Otherwise, if both devices were in the same area, it would have been extremely difficult to ID that this was happening.