Because Only Terrorists Use 802.11
skinnyd writes "Consultants working for the Department of Homeland Security have announced that the Feds view open WiFi as a means of abetting terrorists, and say that they will compel the open wireless operators will have to close off their nets. 'Homeland Security is putting people in place who will be in a position to say, "If you're going to get broken into ... we're going to start regulating."'
It would seem that anyone who could get internet access could potentially affect networks. Should they regulate AOL distributing CD's with a thousand free hours? I mean, the terrorists could easily use a stolen credit card (oh, I'm sure they'd have qualms about doing that...)to get initial access....
Okay, so they wouldn't be moving as fast as they would going through a corporate network.
But if a LAN Admin is stupid enough to leave his access points open (with access to the outside world), then the company gets what it deserves for hiring an MSCE to do its network design.
Yes, I run an open AP at home (and there's nothing really interesting to look at, I assure you), but I'm not to the point where I think it's a good idea to put one on the network at work. It's been discussed before, and it'd just be more difficult than it's worth.
But I wanted it to be read more widely than was happening with it on my own little homepage so I posted a copy at Kuro5hin. An advantage of the K5 version is that it enabled followup discussion.
Here's the intro:
Thank you for your attention.-- Could you use my software consulting serv
Our department of "Homeland Security" is creating the situation where all users of the net must be tracable....for the purpose of spying on them and controlling our ability to peacefully associate on the net. Our right to assemble for the purpose of communication is gauranteed in the bill of rights, but is under assult.
As with the "Great Firewall of China" articles that I've been seeing here lately, governments are fearfull of any tool that would allow people to communicate freely. Annonymous communication over the net allows disent to grow without the heavy hand of big brother picking out the "ringleaders."
I notice in this article that there is no discussion at all about why this is necessary for security. I don't believe at all that one guy with a laptop on an open AP could "bring the net down"...
We must force our government to explain WHY this and all of the other USA Patriot act bullshit is necessary....making Bush, Poindexter, Ashcroft and the others explain their position to everyone is the act of a real patriot.....don't believe the hype.....
That's not what the article says. It points out that wireless insecurities, particularly on corporate networks, pose a security threat -- no surprise there.
Because of all the hoopla about homeland security, people are pointing out that *any* insecurity that allows people to access networks in unauthorized ways can be a vector for Bad People who want to do Bad Things.
The same could be said about critical security problems in networked computers that may be exploited to attack critical networks. I'm sure that federal cybersecurity czar Richard Clarke would say that any insecurity that enables unauthorized network access *may* be a national security threat.
It doesn't say that you can't have a home or office wifi network. It doesn't even say that freely available wifi is a tool of the terrorists. It says, that systems should be secured, and that responsibility lies at many levels (manufacturers, corporate users, etc).
This isn't to say that the government doesn't engage in FUD or that civil rights aren't under attack. But it makes mare sense to fight the real threats to individual liberties.
Ignoring the arguments about whether it's "terrorism", this does touch on a very important issue. Does making your computer deliberately insecure count as negligence if it is used to commit a crime? Are you liable if you accidentally leave your car unlocked and it is used to commit a crime? What if you did so deliberately? What if you put a sign in the window saying "Anyone is free to use this car so long as you return it"? Where do you draw the line between generosity and irresponsibility?
I just opened my Wireless router wide open. Anyone with an 802.11b network card should have no problem immediately getting an IP address from my router and should have completely open and unrestricted access to the internet from anywhere within about 800ft of my house. I encourage every single one of the 250,000 daily slashdot readers who has a wireless access point or a wireless router to do the same thing. Secure your computers, open your wireless.
To hell with the Dept of Homeland insecurity and their ridiculous ranting. They can take their Gibsonesque FUD elsewhere.
-- "Government is the great fiction through which everybody endeavors to live at the expense of everybody else."
One of the referring pages I found listed in my log is I've held it in too long: I am no longer Proud to be an American. wherein the poster says:
and so on.Look at the bottom of the guy's post where he gives a link with the text "This is what inspired me to finally say something".
I've worried about the potential for backlash by saying what I did in such a public way, and further to be making such an effort to get people to read it.
But if I was able to get even one person to speak out as this fellow said I did, well that makes it all worthwhile.
There's lots of people who posted to the K5 discussion who don't agree with what I said, but that doesn't bother me so much. I'm very pleased to have opened up so much debate. People are talking about these issues that might not have otherwise.
People need to talk about this stuff, or we will end up in a great deal more trouble than we are already in.
And there were some fairly intelligent points raised at K5 that seem to poke holes in my argument. That's OK too, because I have answers to their objections, and will be able to make some small revisions to my original piece that should ultimately make it stronger and more convincing. So in the end those who found fault with my essay have done me a favor.
Finally, in the little while between posting the above and being just about to post this, my copy of the essay has received 102 page views referred from this slashdot discussion.
I'm very glad of that - prior to posting at K5, the essay was getting about 300 page views a month. So far this month (just a few days into the month) my copy has got 594 page views, and I imagine the K5 post got many times that.
-- Could you use my software consulting serv
These people need to take action and clean up before the govt gets more motivated to regulate them.
Should it be illegal for businesses to have poor security for their buildings?
Breaking and entering (in the physical and electronic world) is already a crime. Only a police state regulates the actions of potential victims of crimes to "protect" them.
"...always new atoms but always doing the same dance, remembering what the dance was yesterday." -Richard Feynman
You are absolutely correct. However, politicians may steal as much as they can, but it's the people that still elect them. Only when the masses wake up will things change. And unfortunately, throughout history, this has rarely happened until after the point of no return.
What you list above is an admirable way to protect the 'homeland' but it still misses the main problem. Check out Usama's letter on what his reasoning is. We were founded on the premise of religious tolerance. However, there are elements linked to the government through the current administration that are now just as bad as Usama himself. Extremist conservtives drunk with intolerance of any religion other than Christianity and set on enforcing their view of morality on the rest of the world - just like Usama. Only difference is that they have the worlds largest military and corporations to back it up.
When and if we correct this problem, will there be no or little reason to monitor our borders and ports - except maybe to keep others away from prosperity (which sounds odd if you think about it). But for now, I fear you're correct and we are already starting to see ridiculous examples of democracy gone awry.
If they're running IE (or a browser built on the IE engine), all you need is some useful binaries squirreled away on a webserver to do whatever you want with their computer. Security settings are almost always such that you can run untrusted EXEs. At Comdex, I ran PuTTY off of my home webserver so I could check my mail. There's no reason I couldn't have stashed some malware ahead of time and run that.
(Mozilla, OTOH, won't let you do that. It'll prompt you to save the file someplace. If "Run...", "Command Prompt", and IE are removed from the Start menu and Windows-R is trapped (it's a keyboard shortcut for Start|Run...), good luck getting your downloaded file to run...assuming that you can find a directory that'll let you save your file. (One college lab had "Run..." and "Command Prompt" removed from its machines, but opening IE and giving c:\winnt\system32\cmd.exe as the URL gave me a command prompt.))
20 January 2017: the End of an Error.