Slashdot Mirror


Wireless Hijacker Dealt First UK Punishment

paella_dodger writes "The BBC is reporting on a recent UK court case whereby a man was fined £500, sentenced to 12 months' conditional discharge and had his laptop confiscated for browsing the 'net on his neighbour's wireless Internet conenction. Perhaps I should secure my neighbour's wireless connection for him before Windows automagically connects to it and gets me arrested!"

663 comments

  1. In Perspective... by md81544 · · Score: 3, Insightful

    As has been mentioned on /. on several times before when this particular case came up, this guy didn't accidentally or "automagically" attach to his neighbour's wifi network: he sat outside their house, in his car, and acted very suspiciously when they walked past (e.g. snapping his laptop shut). He'd been doing this over a three month period. To my mind his punishment was more a result of his behaviour than mere connection to some idiot's wide open wireless network.

    1. Re:In Perspective... by Breakfast+Pants · · Score: 3, Informative

      Wrong guy, different case, and hell, different country even.

      --

      --

      WHO ATE MY BREAKFAST PANTS?
    2. Re:In Perspective... by md81544 · · Score: 1

      Since when was Ealing not in the UK? See http://news.bbc.co.uk/1/hi/technology/4721723.stm

    3. Re:In Perspective... by Anonymous Coward · · Score: 0
    4. Re:In Perspective... by bioteq · · Score: 5, Insightful

      Perhaps, but the same logic still applies; this guy was not just stealing it, he was making himself a target to be caught.

      He is obviously not very smart, either, considering he was seen for the past three months in the same locations. That usualy means he was using the same network for the same deeds each time.

      Honestly, I do not blame the UK government for going down on this guy; he deserves it. Especially since he was stupid enough to get caught the way he did. Sure, war driving is one thing, but blatently sitting infront of someone's home, leeching their network is a whole different case.

      Sadly, this is just like what happened to the term "hacker" back in the day - it was idiots, like this guy, that ruined it for the real "hackers" out there; the script kiddies. Now, guys like this, and the other guy that got caught doing it, will give the term "war driving" a bad name. Hell, you mention "war driving" somewhere and people are going to start believing you're a "hacker" who uses "linux" to steal credit cards from them.

      All in all, people should learn to secure their wireless networks. If they are unable to, or know nothing about the processes, they should be wired like the other drones. Or they should simply hire someone to secure it for them -- It's honestly not that difficult these days, especially with a linksys router. You simply type in a few things and click a coulpe check boxes and you're done. But this does prove that the common person, joe sixpack if you will, does not care enough about computer security to do anything until someone takes advantage of them. Then they cry foul.

    5. Re:In Perspective... by cperciva · · Score: 0

      Wrong guy, different case, and hell, different country even.

      RTFA. The grandparent's summary is accurate.

    6. Re:In Perspective... by shellbeach · · Score: 0

      As has been mentioned on /. on several times before when this particular case came up, this guy didn't accidentally or "automagically" attach to his neighbour's wifi network: he sat outside their house, in his car, and acted very suspiciously when they walked past (e.g. snapping his laptop shut). He'd been doing this over a three month period. To my mind his punishment was more a result of his behaviour than mere connection to some idiot's wide open wireless network.

      And as has also been previously mentioned on /. this guy did nothing technically wrong. The wireless network was inviting him to connect to it, and he obliged. Or is it now illegal for me to use the wireless network at my university?? Perhaps I'll get arrested for suspiciously sitting in the library with my laptop open?? It's exactly the same situation: an unsecured access point is actively broadcasting it's presence and letting people know that it's available.

      His behaviour was immoral - obviously, it's fairly unlikely that anyone is purposely sharing their wireless network - but not illegal. The fact that he could be punished for this just goes to prove what a bunch of IT-ignorant people make/apply the laws ...

    7. Re:In Perspective... by rikkards · · Score: 1

      Ealing may be in the UK, but the GGP was talking about a case in Florida (I think either way it was in the US)

    8. Re:In Perspective... by dnoyeb · · Score: 1

      His behaviour was immoral - obviously, it's fairly unlikely that anyone is purposely sharing their wireless network - but not illegal.

      If he were to say 'yes I let him connect' then his ISP could probably sue him for breach of contract. So even if the neighbor didnt mind, he probably can't say so in court...

    9. Re:In Perspective... by md81544 · · Score: 1

      The GGP was quoting directly from the URL in TFA!

    10. Re:In Perspective... by squiggleslash · · Score: 4, Insightful
      The wireless network was not "inviting" him to connect. The wireless network is not a sentient entity, still less one with the legal power to do so. At best, it might have been broadcasting a message saying "My owner welcomes complete strangers to this network", but as of yet there is no protocol within 802.11* for doing this.

      Some geeks have attempted to hijack "There's no encryption on this node" or "My SSID is public and is..." to mean this, but given most WAPs are configured by default to have no encryption and to publically broadcast a SSID, and given both can be explained by many other reasons, this is simply legally non-sustainable as an argument.

      Hiding a SSID in some ways is anti-social as it makes it more difficult for your neighbours to find your network if it interferes with their's. The lack of encryption is also a bad choice, I've come across wireless equipment that works "out of the box" but requires connection to a PC to configure any encryption features - adapters to put X-Boxes and PS2s on a wireless network generally work this way. Owners of such devices are very likely to want to use unsecured WAPs.

      The wireless network would have been advertising its presense. This is a useful feature. But it wasn't "inviting anyone" any more than a door knob does.

      Geeks need to get out of the habit of assuming that a default configuration amounts to "permission to use". It doesn't. Only permission to use is permission to use. The only surefire way to know if you have permission or not to use a network is to look for a publically posted notice, or to get written or oral permission from the network's owner. One day, 802.11* might have something added to make it easier to make it possible for a user to unambigiously give other's permission to use their networks (and that would be a useful feature anyway), but until then, look for notices, or talk to the operator. Don't assume.

      --
      You are not alone. This is not normal. None of this is normal.
    11. Re:In Perspective... by Feanturi · · Score: 1

      this guy did nothing technically wrong

      So if I go down your street walking up to everyone's front door, including yours, trying to turn each doorknob to see if it's locked, you'll be fine with that? I won't go in if it's locked, but if it's unlocked, maybe I'll step in and help myself to a drink of water. Still ok with that? If the door's not locked you must be inviting me in, right?

      The open wireless router letting unintended people in is more analogous to me being blind and accidentally trying to go into somebody's house because I truly didn't realize I had the wrong house. This guy was going down the street trying every knob till he found one that would turn. There's nothing technically right here.

    12. Re:In Perspective... by op00to · · Score: 4, Funny

      Honestly, I do not blame the UK government for going down on this guy...
       
      Hmm, UK justice is very different from US justice...

    13. Re:In Perspective... by op00to · · Score: 2, Insightful

      Not.
      The.
      Same.
      Thing.

      Maybe, just MAYBE, if folks in your town payed a flat fee for water, and you walked down the street checking everyone's outdoor water nozzles, and took a drink where they were turned on for use, MAYBE that analogy might relate to the story. But the unlocked door analogy, especially in this situation, is NOT THE FUCKING SAME THING.

    14. Re:In Perspective... by Anonymous Coward · · Score: 0

      His behaviour was immoral - obviously, it's fairly unlikely that anyone is purposely sharing their wireless network - but not illegal.

      Well there you go then, we can dispense with the Courts and have shellbeach dispense judgment in his Slashdot posts.

    15. Re:In Perspective... by override11 · · Score: 4, Interesting

      Some geeks have attempted to hijack
      Bullshit, there is no hijacking involved! Frikin walk up to the curb, open laptop, and use it. Do you need permission to turn on the TV and watch open air TV shows? How about 'permission to view' the flowers in front of my house? If people are too ignorent to use a piece of hardware, they shouldnt purchase it. Read the frikin big printed poster that shows you how to secure your access point. Otherwise, you deserve what you get.

      --
      No I didnt spell check this post...
    16. Re:In Perspective... by gowen · · Score: 2, Interesting
      Do you need permission to turn on the TV and watch open air TV shows?
      Not if you want to watch them on my TV by standing on the street and peering in through the living room windows.
      --
      Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
    17. Re:In Perspective... by u.hertlein · · Score: 1

      ruined it for the real "hackers" out there; the script kiddies.

      Somebody please mod this guy 'funny'. Either that or 'you can't possibly be fscking serious'.

      --
      Geek by Nature - Linux by Choice.
    18. Re:In Perspective... by Anonymous Coward · · Score: 0

      The default configuration of my web server allows anyone to request and be served my web site as well. Before visiting my web site, I require you to obtain permission in writing or over the phone. No, I haven't implemented any access control mechanisms because the law says I don't have to. Thieves who point their browsers at www.mysite.com without permission will be prosecuted.

      Don't assume you can visit any unprotected web site without permission. Always contact the hosting provider (check whois) before following any links on the web!

    19. Re:In Perspective... by shellbeach · · Score: 3, Insightful

      Hiding a SSID in some ways is anti-social as it makes it more difficult for your neighbours to find your network if it interferes with their's.

      What?!? All it does is remove the SSID information - you can still see that there's a network on a particular channel if you do a scan! You just can't connect to it ...

      If you can't rely on SSID broadcasts, then how can anyone know when a network is public and when it's private? Perhaps, as you say, there needs to be a more unambiguous code for this ...

      Geeks need to get out of the habit of assuming that a default configuration amounts to "permission to use". It doesn't. Only permission to use is permission to use.

      Except that SSID broadcast without encryption has been assumed to be permission to use, by hardware manufacturers and even by certain OS software companies! Perhaps that's unfortunate, and perhaps it shouldn't be like that. I take your point, though, that there's no formal definition that a broadcast SSID equates to an open network, and that it's wrong to assume that that's so.

    20. Re:In Perspective... by murdocj · · Score: 1
      The wireless network was inviting him to connect to it, and he obliged.

      I live in (what used to be) a small town. Some folks leave their keys in the car and the car unlocked. Friend of mine had a stranger climb into his car and take it. Guess what... the guy was guilty of car theft. Just because the theft wasn't hard didn't mean it wasn't a crime.

    21. Re:In Perspective... by Anonymous Coward · · Score: 0
      Do you need permission to turn on the TV and watch open air TV shows?

      In the UK, yes. A licence costing £120 or so a year. Don't know the exact current amount, as I haven't had one for three years now (No TV) . If you don't have a licence, you get monthly threats sent by the tv licensing scum, and they send "inspectors" round to see if you have a TV and trick you into signing a confesssion so you cna be fined in court. When my inspector came round I told him to fuck off. And photographed him, which he didn't like... More about the TV licence here

    22. Re:In Perspective... by oz1cz · · Score: 1
      But the unlocked door analogy, especially in this situation, is NOT THE FUCKING SAME THING.

      I beg to differ. Access to my garden is completely open. I have no gate, no lock, nothing. Even so, this does not mean that everybody is allowed to walk into my garden and sit down. They are not even stealing any resources from me, but they're still trespassing.

      The open access to my garden is not an invitation to walk right in.

    23. Re:In Perspective... by cgenman · · Score: 5, Interesting

      Geeks need to get out of the habit of assuming that a default configuration amounts to "permission to use". It doesn't. Only permission to use is permission to use. The only surefire way to know if you have permission or not to use a network is to look for a publically posted notice, or to get written or oral permission from the network's owner. One day, 802.11* might have something added to make it easier to make it possible for a user to unambigiously give other's permission to use their networks (and that would be a useful feature anyway), but until then, look for notices, or talk to the operator. Don't assume.

      That wireless routers ship unsecured in their default configuration is a problem with the vendors (and it wasn't always like this). Vendors do this to make it easier for people to setup their first wireless network... in fact it's basically automatic. Any Windows machine with a wireless card will automatically connect to any unsecured wireless access point. Period. Allow me to repeat this. Any Windows machine with a wireless card will automatically connect to any unsecured wireless access point. But people really do need to log in and change the default configuration, both for security purposes (it's trivially easy to find default passwords online), and functionality reasons. But the biggest reason is that the way to say something is available for use in the online world is to allow people to use it without authentication.

      The standard way of saying something is open and available on the 'net is to not require a password. If you put your pictures up on your http site even if you don't publish the link anywhere you're giving your consent for people to connect and look at your pictures. Not just your consent... your hardware, which is your stand-in online, is actively doing it. The moment you put a password on your http site, you're showing that the site is private, and attempts to enter can be considered hacking. If you have an FTP site with no password, you're giving people permission to use it. Open chat servers, bulletin boards, p2p nodes... The universally accepted convention about networking protocols is "open unless locked." I don't need to call you and get your explicit permission to connect to your website if it isn't locked... by not having a password on something you are showing that it is available for all to use. This post bounced through 20 or so routers at various locations throughout the world, but I didn't need to get explicit permission to use any of them. I didn't have to: I had implicit permission built into the hardware's choice of protocol.

      Likewise, if you have networking hardware that has no password or protection whatsoever, you're giving people permission to route through it. In fact, hardware you own is more than facilitating it... it's broadcasting its SSID, it's responding to my card's MAC address, it's responding to my session handshake, and it's not asking for authentication. That's no less than four steps along the line when it could have simply and trivially stopped anyone whom the owner didn't want on the network. The hardware actively engaged in the process. This isn't like checking everyone's door to see which is unlocked, this is like walking past a building downtown and having the glass door automatically open for you.

      I should also say that lots of people do intentionally share their wireless networks, out of a sense of social support. There are several 802.11b networks permeating my apartment right now, several of which have altered SSID's and configurations but which are unlocked all the same, showing that the owners knew enough to change the configuration of their routers but still chose to leave them unlocked. This turned out to be good for me, as I had been unintentionally connecting to a neighbor's wireless network for about 1/2 of a year... My wireless card had a faulty WEP driver, and for half a year I didn't notice that it would fail to connect to my network and automatically went out and found another

    24. Re:In Perspective... by Anonymous Coward · · Score: 0

      OMFG! ROTFL...LOL

    25. Re:In Perspective... by Anonymous Coward · · Score: 0

      Sounds like a great place to live... High taxes, no privacy, and no way to rebel against your government when they start sending "revenue collectors." I'd rather live in Iraq....

    26. Re:In Perspective... by Anonymous+Custard · · Score: 1

      "The wireless network would have been advertising its presense. This is a useful feature. But it wasn't "inviting anyone" any more than a door knob does."

      Actually, it was more like a plate of cookies outside a neighbor's house on the public sidewalk, with a sign saying "Free cookies". Your doorknob example means they have to trespass on their property, open their door, and presumably enter their home.

      I know what this guy did was creepy and dumb, but making what he did illegal makes lots of much much lesser actions illegal, too. The law should have something about knowingly, repeatedly, or whatever to distinguish between this guy's type of infraction and someone walking by using a wireless PDA and accidentily connecting.

    27. Re:In Perspective... by bioteq · · Score: 1

      Heh. I'm glad you caught that.

      It would seem I wrote that a bit backwards. It should read something along these lines:

      "The term hacker was ruined for the real "hackers" by script kiddies."

      Thanks for catching that.

    28. Re:In Perspective... by neoform · · Score: 1

      If you are going to be broadcasting radio waves (on public channels) in all directions from your house, you had better be ready for someone to pick them up and use them. Ignorance of your own technology is not a reason to get mad at people who can hear what your router is saying..

      if i leave my blinds open and watch tv (that's visible from the street) can i get pissed off if someone stands on the street looking in and watching the show as well?

      --
      MABASPLOOM!
    29. Re:In Perspective... by Eivind+Eklund · · Score: 1
      His behaviour was immoral - obviously, it's fairly unlikely that anyone is purposely sharing their wireless network - but not illegal.

      Eh?

      My impression is that techies in fairly often set their wireless networks open, specifically to allow random people to get access. They prefer to do bandwidth shaping to restrict abusers, if it becomes a problem. That's based on reading discussions all over the place.

      At the moment, there's only two tech people that I know and know to have home wireless networks - both of them have left it open on purpose. One of them actually only has the wireless router on to allow his neighbours to connect to the net in a pinch (it's a router he got for free, I think.)

      Not that I have a large sample available - "How is your home network configured?" is sort of "The Bore" among conversation starters...

      Eivind.

      --
      Doubting the existence of evolution is like doubting the existence of China: It just shows that you're uninformed.
    30. Re:In Perspective... by Icicle509 · · Score: 1

      Im sorry guys, cant hang with you on this one. What the guy did was wrong, and he shouldnt have.... .........BUT........... Your anaologies about garden gates and unlocked house doors is nowhere near the same thing, were talking about Radio Signals, which in the united states arent proprietary last I checked..... a house is a physical posession, I cant see the analogy making sense, and cordially disagree.... For christ sakes...secure your networks and this wouldnt even be a topic we are discussing, perhaps we should discuss whether or not people as stupid as this should even be allowed to use this technology.... People are truly amazing....

    31. Re:In Perspective... by rosewood · · Score: 1

      Sorry chief but 802.11b and subsequent g was designed to have open access by default. Wi-fi was designed to be a shared open network resource. From there you can simply turn on WEP. WEP says "you are not invited unless you have an invitation, namely a WEP key."

      No wep says "I am an Open Access point. Open means I am Open strangely enough. So, connect to me."

      Its really fucking simple. Lets go over this again.

      Open = Open
      Wep = Closed

      (At least, when stupid laws don't say otherwise)

    32. Re:In Perspective... by Anonymous Coward · · Score: 0

      You just connected to a computer system without having prior authorization to do so. Did you talk to CmdrTaco before you made that comment or did you just assume that you're allowed to connect to the Slashdot webserver because it (not a sentient entity) gave you an account ID on a previous unauthorized connection?

      802.11* does have several ways of telling unauthorized users to fuck off. Just because some (not all) manufacturers choose to ignore them doesn't mean they're not there. If you add a "YES, I want this to be a public, repeat PUBLIC, open hotspot" flag, then sure as hell some manufacturers will set this to yes by default, because otherwise the computers of their idiot customers won't connect instantly.

    33. Re:In Perspective... by raventh1 · · Score: 1

      What you are saying would be the equivilant of me watching you surf the internet on your computer by standing on the street and peering in through the living room windows.

      However, when people broadcast such information through my house like radio-waves (TV), why shouldn't I be able to use it? I'm bombarded with radiation unless I've got my tin hat and body suit ready. Who is to say that because they are the broadcasters they 'own' the radiation that is in my airspace?

      Time to start building faraday cages.

    34. Re:In Perspective... by trewornan · · Score: 1

      If I walked into your garden and sat down that would be trespass but - TRESSPASS IS NOT A CRIME. You could sue me if you could prove damages (unlikely), but I can't be prosecuted.

    35. Re:In Perspective... by nmg196 · · Score: 1, Redundant

      > Bullshit, there is no hijacking involved!

      Of course there is. He did not merely "look" at wireless network. He connected to it and was using it. That's hijacking.

      This is more like getting into an unlocked car and driving it around just because the owner left the keys in the ignition. Hardly fair or legal.

      > How about 'permission to view' the flowers in front of my house?

      No but if you haven't secured them, then I reserve the right to pick them all and give them to my girlfriend. This guy was not just *looking*! Have you not even read the article?! He CONNECTED to the network concerned and used it to access to the Internet. "Looking" doesn't come into it - if he'd simply seen it in a list of available wireless networks then I doubt he would be prosecuted.

      > Do you need permission to turn on the TV and watch open air TV shows?

      How is that related? A wireless network that hasn't been secured is not a public service. Anyway - this is a UK case and in the UK we require a TV license to watch open air TV shows, so yes, we do need permission. You picked a bad analogy...

      > If people are too ignorent to use a piece of hardware
      > they shouldnt purchase it

      People leave their cars/houses unlocked. This doesn't mean it's perfectly acceptable to steal/rob them!

    36. Re:In Perspective... by gowen · · Score: 1
      However, when people broadcast such information through my house like radio-waves (TV), why shouldn't I be able to use it?
      If your neighbours forget to close the curtains, do you have a right to use read their credit card bills on their desk, using a high powered telescope? Do you then have a right to use the CC numbers? After all, all you've done is look at is rogue radiation floating through your airspace.
      --
      Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
    37. Re:In Perspective... by lobsterGun · · Score: 1

      Are you saying that if someone leaves their house unlocked I can just walk inside and they can't complain?

    38. Re:In Perspective... by rikkus-x · · Score: 2, Interesting
      Of course there is. He did not merely "look" at wireless network. He connected to it and was using it. That's hijacking.


      Wouldn't hijacking also have to involve locking out the owner and changing the router's password?



      Rik

    39. Re:In Perspective... by FireFury03 · · Score: 1

      Honestly, I do not blame the UK government for going down on this guy; he deserves it. Especially since he was stupid enough to get caught the way he did. Sure, war driving is one thing, but blatently sitting infront of someone's home, leeching their network is a whole different case.

      What constitutes unauthorised use?

      If I connect to a BT OpenZone hotspot and I've paid then presumably that's authorised, right?

      What happens if I connect to a public hotspot that's free? I guess that's authorised too since it's been set up as a service.

      So, if I turn on my laptop, and it associates with an open network, gets handed a DHCP lease and a default route, how is that unauthorised? As far as I can tell, running an open network that broadcasts it's presence and hands out a IP address and route through DHCP to anyone who asks is _advertising_ itself as a free public hotspot.

      I really can't see the difference between a free public hotspot and a unsecured private network - it's not really possible to tell the difference between the 2 from a technological perspective.

    40. Re:In Perspective... by drsquare · · Score: 1

      Except Internet is rarely flat rate. And if you walked into someone's house every day for three months and drank from their tap, you can bet you'd be done for that as well.

      I think you hackers should just learn some respect for the law and other people's property. You're not 12 years old anymore, and just because you do something with a computer, that doesn't make it automatically acceptable. Things you type can have real life consequences, as the poor fool in this article found out.

    41. Re:In Perspective... by Anonymous Coward · · Score: 0

      Then point out where it says "snapping his laptop shut." The words snap and shut don't even appear in the article.

    42. Re:In Perspective... by CProgrammer98 · · Score: 1

      Huh??? Perhaps if you took time to RTFA...
      "He had been seen in the area on several previous occasions over the past three months and is believed to have been reported to police by a neighbour concerned that he was acting suspiciously.
      "

      --
      And the people shall be oppressed, every one by another, and every one by his neighbour Isaiah 3:5
    43. Re:In Perspective... by Anonymous Coward · · Score: 0

      No, but if someone started yelling with a loudspeaker from inside his home, theres nothing stopping me from listening to it.

      Or getting my own loudspeaker and yelling back at him.

      NAS: bewitch

    44. Re:In Perspective... by Anonymous Coward · · Score: 1, Insightful

      It's more like getting into a car that's not only unlocked and keyed but carries a sign announcing that, with posters all over the area pointing out the state of the car, and a fleet of identical cars next to it so there's enough for everyone. In a world where some people actually offer free car services, and you have no way of telling whether this particular set up is a free car service or not.

      When you pick a flower, it's not there anymore. Use a network, and the owner still has the network.

      Your analogies aren't any good either. It's more like using a private road that isn't marked as private and carries normal looking street signs.

    45. Re:In Perspective... by hackwrench · · Score: 1

      Only about as accurate as saying your webpage is about demons from hell and that is where you'll rot!

    46. Re:In Perspective... by Anonymous Coward · · Score: 0

      obviously, it's fairly unlikely that anyone is purposely sharing their wireless network

      Sure, I can't imagine anyone doing anything crazy like that.

    47. Re:In Perspective... by Anonymous Coward · · Score: 0

      And if someone is blasting their music from the living room, windows open, as their neighbor and receiver of these sound waves, am I required to put earplugs in?

    48. Re:In Perspective... by Anonymous Coward · · Score: 0
      Bullshit, there is no hijacking involved!


      I wouldn't call it hijacking, but it is theft of bandwidth. You are using a finite amount of the bandwidth on that connection.. whether or not this impacts the owner or the ISP is immaterial. This is kind of like the folks of the Captain Crunch generation who were using "underutilized" phone services and trunk lines. It eventually didn't fly, and this bullshit won't fly now.

      Otherwise, you deserve what you get.


      Well, it seems as though the courts don't agree with you. Now take a shower, get a job, and buy your own bandwidth.

      Oh yeah, and sit outside my house with a laptop using my connection for any length of time, and you'll get eliminated. (I live in a shitty neighborhood.. seriously) After all, it's what you deserve.
    49. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 4, Insightful

      Of course there is. He did not merely "look" at wireless network. He connected to it and was using it. That's hijacking.

      This is more like getting into an unlocked car and driving it around just because the owner left the keys in the ignition. Hardly fair or legal.

      People leave their cars/houses unlocked. This doesn't mean it's perfectly acceptable to steal/rob them!


      If I see a store with a sign labeled 'open' on the front of it, would you consider me a burglar if I walked into it without asking the shopkeeper first? If there's a bus sitting on the curb and the door is open, am I hijacking the bus if I just walk into it? If there's a house with a sign labeled "garage sale" out front am I tresspassing if I start wandering around the front yard looking at things sitting out?

      The AP this guy connected to had a big giant sign *actively* saying "OPEN" on it. 802.11 provides many ways to make that sign say CLOSED instead. This AP used none of them. The guy's laptop sent a message to the AP saying "hi, is it ok if I connect" and the AP said back "sure, here's an association for you and an IP address you can use.".

    50. Re:In Perspective... by irc.goatse.cx+troll · · Score: 2, Insightful


      "This is more like getting into an unlocked car and driving it around just because the owner left the keys in the ignition. Hardly fair or legal."

      It's more like someone listening to their radio really loudly and you listening to it from next to their house. Hardly unfair, and perfectly legal. Don't give IP's or routes to unauthorized clients.

      Then again, I think it should be perfectly legal to do whatever you want with any signal thats being forced onto your land. This goes for any wireless networking, EM radiation, satalites, etc. If you're stuck with the downsides (cancer, signal collision, etc), you should atleast be able to do what you want with it(Like decode directtv's video theyre sending you).

      --
      Pain lasts, kid. Its how you know you're alive. Sometimes I think this growing up thing is just pain management-TheMaxx
    51. Re:In Perspective... by ClubFootJones · · Score: 1

      If someone does not take the due dillignece to secure their network then they "reap what they sow". It does not take a rocket scientist to "PROPERLY" install a wireless access point anymore. By not following the directions that come with the equipment. RTFM. Linksys makes it VERY easy to at least come up with a passphrase. Take it one step further and remove the SSID broadcast name. It is not only residential but business entities that are now making this stupid mistake. In 2 block area where I work I found 5 unsecured wireless networks and you can access Porn or anything else from them. They even broadcast the default "linksys" SSID.

    52. Re:In Perspective... by schon · · Score: 1

      Another flawed (but somewhat more accurate) analogy:

      If water was flat rate, and one of your neighbors was spraying his water onto the public street in front of his house, and you walked by and took a drink, should it be illegal?

      That's what these "door knocking" analogies all lack - the fact that the wireless network is being broadcast onto public property.

    53. Re:In Perspective... by Compholio · · Score: 1

      The wireless network would have been advertising its presense. This is a useful feature. But it wasn't "inviting anyone" any more than a door knob does.

      Just to start out here: I hate wireless, I think that it's mostly for lazy people who don't care about a good quality network (for the record, I have no problem with wireless in coffee shops and airports where it makes sense). Honestly, SSID broadcasting is less like a doorknob and more like having a security keypad on your door that says "Welcome! Enter the sequence 1234 to open."

    54. Re:In Perspective... by OsirisX11 · · Score: 1

      That's not the point. The point is, you shouldn't have criminal charges brought against you for using an open WiFi connection. If your logic is true, and he is being charged based on his actions outside of his use of the WiFi, then charge him as such.

    55. Re:In Perspective... by D'Sphitz · · Score: 1

      heheheh you said 'oral'

    56. Re:In Perspective... by oz1cz · · Score: 1
      TRESSPASS IS NOT A CRIME.

      I am not a lawyer, but I would guess that that depends on what country you're talking about. It may not be a crime in your country, but I wouldn't be too sure about other countries.

    57. Re:In Perspective... by Decessus · · Score: 1

      If I see a store with a sign labeled 'open' on the front of it, would you consider me a burglar if I walked into it without asking the shopkeeper first?

      This isn't really the same thing. A store that has an open sign is actively inviting people into the store. It's the accepted purpose of the sign to begin with. The same thing with your bus example. A bus is a public form of transportation, so when the door is open, it's common knowledge that it's okay to walk onto the bus.

      A better analogy would be if I left my front door unlocked. If I did, is it okay for someone to come in off the street and walk into my house? Hopefully you answer no. If not, then I don't think anything is going to convince you that what this guy did was wrong.

    58. Re:In Perspective... by kyojin+the+clown · · Score: 1
      actually, im fine with that. you can try my door any time you like. it will be locked, because i comprehend the (seemingly) simple truth that locking my door stops theives (and geeks) from getting in.

      seriously. let me know when you are coming, i'll leave some tea and biscuits out for you.

    59. Re:In Perspective... by suckass · · Score: 0

      You are an evil hacker! I'll bet you'd steal electricity from your neighbors too!

      --
      blah, blah, blah
    60. Re:In Perspective... by TogusaS9 · · Score: 1
      If I see a store with a sign labeled 'open' on the front of it, would you consider me a burglar if I walked into it without asking the shopkeeper first? If there's a bus sitting on the curb and the door is open, am I hijacking the bus if I just walk into it? If there's a house with a sign labeled "garage sale" out front am I tresspassing if I start wandering around the front yard looking at things sitting out?


      Another set of bad analogies. All of these things -- the store, the bus service, and even the garage sale -- are offerings set up knowingly and intentionally by their proprietors for the explicit and express purpose of offering goods or services. The store vendor is expecting people to enter his store and buy stuff. The bus service operator is expecting people to board and ride their buses. And the garage sale vendor is expecting people to come over and buy stuff.

      Was the victim knowingly and intentionally offering his Internet access by having his AP "open"? Most likely, he wasn't, at least knowingly -- given the way wireless internet devices are marketed nowadays (like "plug-and-play" devices), more often than not securing the AP/router is probably the last thing end users have in mind -- if it's on their mind at all.
    61. Re:In Perspective... by oxfletch · · Score: 1

      "Do you need permission to turn on the TV and watch open air TV shows?"

      Ironically ... yes. Seeing as the article points to the UK, you need a TV license.

    62. Re:In Perspective... by Tran · · Score: 1

      The issue of "inviting" is an interesting one... Lawsuits have been won ( in the US) because of an inanimate object being an enticement, causing maiming and/or death of persone ebing enticed, even though said object is on private property.

    63. Re:In Perspective... by op00to · · Score: 1

      Thank you. Analogies suck (especially mine) but you captured the absurdity of this situation quite perfectly.

    64. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 2, Interesting

      This isn't really the same thing. A store that has an open sign is actively inviting people into the store. It's the accepted purpose of the sign to begin with. The same thing with your bus example. A bus is a public form of transportation, so when the door is open, it's common knowledge that it's okay to walk onto the bus.

      A better analogy would be if I left my front door unlocked. If I did, is it okay for someone to come in off the street and walk into my house? Hopefully you answer no. If not, then I don't think anything is going to convince you that what this guy did was wrong.


      As for your front door being unlocked, no, I agree, that's not OK. A house with an open door is not an accepted standard of indication that it is public.

      However every relevant standard indicated to this guy that this AP is public: the SSID broadcast, the accepted association request, the DHCP response giving him an IP address and telling him to send all his internet bound traffic to that particular router... According to every relevant standard, the accepted purpose of every one the mechanisms used by this "hacker" to connect to this AP was to allow for anonymous, public clients to connect.

      The 802.11 and other standards provide plenty of ways of indicating a private access point. This AP used none of them, and this guy did not circumvent any of them.

    65. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      Was the victim knowingly and intentionally offering his Internet access by having his AP "open"? Most likely, he wasn't, at least knowingly -- given the way wireless internet devices are marketed nowadays (like "plug-and-play" devices), more often than not securing the AP/router is probably the last thing end users have in mind -- if it's on their mind at all.


      If the "victim" did not intend for his AP to be open then you cannot possibly fault the guy who connected to it when *every* relevant standard of communicating such an intention had indicated that this was an open AP: The SSID broadcast, the accepted association request, the DHCP response giving him an IP address and telling him to send all his internet bound traffic to that particular router..

    66. Re:In Perspective... by lgw · · Score: 1

      It's authorized if a human tells you it is, though some form of human-to-human communication. Getting a DHCP lease doesn't count - *many* people have home LANs set up that way with no idea that it lets outsiders connect.

      It's very easy to tell the two cases apart 99% of the time from a human perspective, and in the other 1% (you're not connected to the hotspot you think you are) you've still made a "reasonable effort" from a human perspective, which is generally what the law requires with respect to permissions.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    67. Re:In Perspective... by b0bby · · Score: 1

      obviously, it's fairly unlikely that anyone is purposely sharing their wireless network
      Actually, I have my access point open on purpose, because if I'm travelling I'd like to hop onto someone's ap to check my mail, and I'm happy to let others do the same. I do check my logs every so often - none of my neighbors are using it, but if they have a guest with a laptop they're welcome to get online for a while.

    68. Re:In Perspective... by lgw · · Score: 1

      If you're standing on the street and peering in through living room windows, the cops will eventually arrest you - jjust a matter of how long it will take for them to find a law that they can say you're breaking. This case is no different - the WiFi part was just the first law they found to make the guy go away.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    69. Re:In Perspective... by lobsterGun · · Score: 1

      Nice metaphore. However, it does not apply to this here. It would be more accurate to state that someone is having a soft converstaion in and you sneak over to listen in at an opened window.

      But even that comparison does not do justice to the subject situaition, nothing is being misppropriated.

      Imagine this instead. Your neighbor just bought a cordless phone setup. You go out and buy a replacement handset and set it to the same frequency as his. Are you then morally or legally allowed to make calls on his phone? I say no.

      Like phone service, bandwidth is a resource that the home owner paid for. Just because he failed to secure the point of access doesn't mean that anyone walking by can use it.

    70. Re:In Perspective... by lgw · · Score: 1

      Your analogy is bad. A sign saying free cookies is like a sign saying free WiFi. A human-to-human invitation. A hotspot connected in its default configuration, which may happen to give DHCP leases, is no evidence of any human permission to access the network. Machines can't invite you, only human intention can.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    71. Re:In Perspective... by Wicken_Fen · · Score: 1

      agreed...i wish my government would go down on me...

    72. Re:In Perspective... by lgw · · Score: 1

      if i leave my blinds open and watch tv (that's visible from the street) can i get pissed off if someone stands on the street looking in and watching the show as well?

      I'd sure as Hell be pissed about it. I'd call the cops, and they'd find some excuse, however farfetche, to run you off. Much like they found some excuse to stop this guy from hasseling the resident with the complaint.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    73. Re:In Perspective... by lgw · · Score: 1

      It may not be a crime where you live, but where I live people have been shot and killed by homeowners in such situations, and the homeowners have walked away after the court case. Coming onto some strangers property is not welcome, not safe, and not acceptable behavior. Sadly, kids don't learn this lesson from a shotgun loaded with rock salt any more.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    74. Re:In Perspective... by lgw · · Score: 1

      If you hung around for an hour, acting creepy, you bet. I don't care what excuse the cops used to get rid of you, it's fine with me.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    75. Re:In Perspective... by Romeozulu · · Score: 1

      >>When you pick a flower, it's not there anymore. Use a network, and the owner still has the network.

      Depends how much bandwidth they use. I offered to let my neighbor use my wireless, but quickly receded the offer when he started running P2P all day long.

    76. Re:In Perspective... by rpdillon · · Score: 2, Interesting

      Agreed. But me me tell you a true story.

      I buy a laptop from Los Alamos Computers (LAClinux.com), and choose not to get an 802.11 card in it, thinking "Ah, what the hell, Linux won't ever support the Intel cards well...". That was over 18 months ago.

      Sure enough, in a few months along come the ipw2100/ipw2200 drivers, and I go online and purchase the Intel 2100 internal card for my laptop. I install the new card, and fire up the computer. Of course my network is encrypted with your standard flavor of WEP, so I spend some time configuring the computer to automagically log into my home network at startup.

      There is a lot of trial and error, so I use the KWifiManager to see if I'm on the network (those little green bars in the tray can be useful!). I think I've got everything fixed (the drivers loaded with the right firmware, the essid, the key, the mode, the channel, etc) and I log in. Sure enough, the little task tray applet it showing I'm connected!

      So I log into my router (Linksys WRT54g) at 192.168.1.1, and notice that somehow in messing with my router to get my laptop working (I had messed with the key, the encryption settings, etc.) I had somehow reset my router! Miffed, I started putting my old settings back in: essid, key, port forwarding, etc.

      Well, it became clear in the next couple of minutes that I had logged into my neighbor's router (an identical model) while sitting on my couch in my living room (I live in a condo). I frantically try to figure out which is which now that they have the same essid and key, so I can log into the correct one (my neighbors) and switch all the settings back to default - hopefully they won't miss a beat and wonder "What broke the internet?"

      Anyway, all was well, and I fixed it (and fixed my login sequence to use MY network!). But the point here is that sometimes, you really do simply log into some else's network and not even know it. When I see articles like this, I wonder what facts the courts look at, because many computers actually DO (Windows XP, all 4 of my Linux boxes, and my wife's Pwoerbook) log into the first available unencrypted network on boot. Unless you actively check which network you're on, you'd never know if it was yours (at home) or your neighbors.

      Heck, if I chose to run an unencrypted network with my router's essid as "linksys" and no key (the *default* configuration), how could I tell easily if I were logged into my router or my neighbors? Most non-geeks wouldn't know to read the router info page, and even if they did, they wouldn'd know their router's external IP when they saw it.

      This is a different question than "permission to use", but is related...and probably worth some thought before we go overbaord throwing people in jail for using someone else's internet connection. Hopefully, only the malicious cases make it to court. In that case, however, we shouldn't be making laws that are only reasonable when a benevolent government is assumed.

    77. Re:In Perspective... by hkmwbz · · Score: 1
      "A store that has an open sign is actively inviting people into the store. It's the accepted purpose of the sign to begin with. The same thing with your bus example. A bus is a public form of transportation, so when the door is open, it's common knowledge that it's okay to walk onto the bus."
      And when you connect to a WiFi network you actually request access:

      You: Can I have access?
      Access point: Sure! Here's your IP address.

      --
      Clever signature text goes here.
    78. Re:In Perspective... by InvalidError · · Score: 1

      Exactly.

      Wireless routers should not ship enabled to force people to read the Quick-Start sheet (which would include security tips and appropriate warnings) at least once.

      The SSID might give a hint about wether or not the network is intentionally open but beyond this, there is no telling... "locks keep honest people out."

    79. Re:In Perspective... by FireFury03 · · Score: 1

      It's authorized if a human tells you it is, though some form of human-to-human communication. Getting a DHCP lease doesn't count - *many* people have home LANs set up that way with no idea that it lets outsiders connect.

      The term "unauthorised" is very vague these days. The computer misuse act says that it is illegal to gain unauthorised access to a computer system. What constitutes authorisation? Assuming your "if a human tells you it is" idea that means you'd have to phone up the administrator of every web server, mail server, etc. before contacting it. In actual fact, we don't do that at all - we assume that if there is a web server listening on port 80 and it isn't asking for authentication then it is publically accessible. (And your "many people have home LANs set up that way" applies here too - many people accidentally have web servers running).

      IMHO, if you can assume that a service is public because it's not restricted in a case where you have to actually go out of your way to contact the server, the same must apply even more so in the case of an open access point, which is _broadcasting_ _advertisements_ in _public airspace_ and on _public frequencies_ to advertise that it's open and unrestricted.

      If I make my house look like a pub and leave the door unlocked, I shouldn't be surprised if people walk in wanting a drink - security (or at least making it obvious that you don't want intruders) should be the responsibility of the AP owner.

      I believe your arguement also falls down because a number of people allow free public internet access through their AP _on purpose_ and your arguement would prevent them from doing so.

    80. Re:In Perspective... by Anonymous Coward · · Score: 0

      Whatever... You don't need an invitation, at most you need permission, which the guy had. Let me explain by going back to basics:

      There are two functions of WEP and WPA: to provide privacy (through encryption) and to authenticate users. Authentication is the process of validating that the user is who he or she claims they are. Authentication in wireless networks is used to prove that you have have access to that network. Permission is granted after authentication when the network lets your traffic start passing through.

      So when WEP and WPA are not activated, everyone is authenticated, and therefore permission granted. If the network was private and not meant to be accessed, then one of those should be turned on. In this case, the owner of the house did not mean to grant permission to everyone, but he was anyhow. I can hardly think of a more reasonable measure of permission (and apparently neither could the 802.11 working group) than: OPEN AP = permitted, WEP or WPA AP = no permission. Having the case where OPEN AP = maybe permitted or maybe not, is moronic. And don't give me any more shitty analogies about taking cars and walking into houses... this is completely unrelated to private property law.

    81. Re:In Perspective... by wuie · · Score: 1

      Regarding if I have access to someone's wireless network, I like to do a mental test: Would this person let me hook my computer up to their router/switch/hub if I knocked on their door, laptop and network cord in hand?

      If the answer's a no, then I don't connect to their wireless either, because that's effectively what I'm doing (minus the courtesy knock).

    82. Re:In Perspective... by Osiris+Ani · · Score: 1
      If you're standing on the street and peering in through living room windows, the cops will eventually arrest you - jjust a matter of how long it will take for them to find a law that they can say you're breaking.
      The point is that they would actually have to search for such a law, because in many municipalities, what you've just described is prima facie perfectly legal. Court cases have validated the assertion that one could even shoot and distribute photos taken from such a public vantage point.

      That's why this is an inadequate metaphor. The law prohibiting unauthorized access basically says that the owners of WAPs don't actually have to "close their curtains" to exclude the public view. It protects people from their own irresponsiblity.

    83. Re:In Perspective... by Anonymous+Custard · · Score: 1

      "A hotspot connected in its default configuration, which may happen to give DHCP leases, is no evidence of any human permission to access the network."

      Sure it is... especially when that undiscriminating broadcast signal spreads into a public area like the sidewalk. The owner took all the effort to acquire and install a wireless router powerful enough to reach the sidewalk, and intentionally left it in a mode where anyone could use it. Also, when connecting to his network, he makes no notice about it requiring access.

      And if the default behavior of the wireless router combined with the clueless owner not securing his network is protected by the law, what about the default behavior of a Windows XP wifi client and an equally clueless user?

      My friend's cousin just got a laptop with a wireless card as a gift. She turned it on, and found that she got high speed wireless internet when she was in her room. Now you and I know that windows has simply connected her laptop to a neighbor's unsecured wireless network. But when my friend asked her about it, she said, "I don't need broadband, it's wireless." She just innocently believes that wireless card = wireless internet; nothing else to it. So who's to blame here? Her default configuration connected to a network. The network's default configuration connected to her computer. Neither user had any idea what they were doing. So how can you blame the client in this case?

      I know I'm sort of playing Devil's advocate here, but the law is just too broad, and many valid arguments can be made from either side. I realize that there's something wrong with sitting outside someone's house all day and leeching their bandwidth and potentially doing illegal stuff using their IP address, but I also believe there's something wrong (entrapment?) with broadcasting a signal from your home into public space and then suing anyone who happens to accidentily connect.

    84. Re:In Perspective... by Greggen · · Score: 3, Funny

      This method was introduced by Margaret Thatcher to take down crime.

      It worked.

    85. Re:In Perspective... by asscroft · · Score: 1

      No! Not the same. A better analogy would be if I put a TV out in the middle of my front yard, and put the remote on the sidewalk.

      Using someone's wireless is not like peeping in someone's house. Using someone's wireless to gain access to thier home computer is like peeping in someone's house, but simply using thier wifi is more like if I put the TV out in the front yard.

      --
      because I have been enjoined by this Holy Office to abandon the false opinion which maintains that the Sun is the centre
    86. Re:In Perspective... by Savantissimo · · Score: 1

      I don't know which is more disturbing - the fact that this man and the one in Florida have been prosecuted, or the way that so many cowardly Slashdotters are unwilling to stick up for the rights of computer users. These prosecutions have nothing to do with theft and everything to do with maintaining telco profits and government control over access to information.

      If telcos can't outlaw sharing outright, they will make it unknowable whether connecting to an open hotspot will expose the user to prosecution, thus creating fear, uncertainty and doubt.

      Governments are in the pockets of large economic interests like the telcos and in addition want to be sure that there is no opportunity to communicate without them listening in.

      --
      "Is life so dear, or peace so sweet, as to be purchased at the price of chains and slavery?" - Patrick Henry
    87. Re:In Perspective... by houghi · · Score: 1

      The wireless network was not "inviting" him to connect. [...] it might have been broadcasting a message saying "My owner welcomes complete strangers to this network",

      That sounds like an ivitation to me. Some people get connected to their neighbours network, because that signal is stronger.

      --
      Don't fight for your country, if your country does not fight for you.
    88. Re:In Perspective... by asscroft · · Score: 1

      WHAT!!! ARE YOU FUCKING KIDDING ME????

      Hijacking involves taking control away from the proper controlling authority. Hijacking an airplane, for example means taking control of the airplane and making the crew fly you to some strange place or into a building.

      What this guy did was not taking control of the internet, he simply used the internet. It's not like carjacking, it's more like hitching a ride on a locomotive. He got a free ride, but that's A FAR CRY FROM HIJACKING.

      Next, it's not like plucking the flowers. If you pluck the flowers they won't be there for me to look it. It's more like if my front yard had shade and it was 110 degrees out and as you were walking home you paused for a minute under my tree. Now sure, being American I have every right to shoot your ass for trespassing, but I don't think I could have you arrested for stealing shade.

      The open air network analogy...well consider this one, jackass. I have an ipod with a little FM Transmitter. It's designed to be low-range, for my car only, but if you're next to me and you hit scan on your radio and it picks up a song you like you leave it on that station. But oh my fucking god, it's not a real radio station, it's my ipod! You should go to jail now, right?

      Wrong, asshole. Wrong.

      --
      because I have been enjoined by this Holy Office to abandon the false opinion which maintains that the Sun is the centre
    89. Re:In Perspective... by julesh · · Score: 1

      Probably. But nobody actually suggested anybody hijack a network... the original poster who used the word was using it in reference to people who assume open network => authorisation to use the network are "hijacking the meaning" of the network being unsecured (which is just that... it means there's no encryption).

    90. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      Regarding if I have access to someone's wireless network, I like to do a mental test: Would this person let me hook my computer up to their router/switch/hub if I knocked on their door, laptop and network cord in hand?

      If the answer's a no, then I don't connect to their wireless either, because that's effectively what I'm doing (minus the courtesy knock).


      Actually, this guy effectively did a courtesy knock. He followed all the protocols for establishing a legitimate connection to an access point. His computer did a courtesy knock asking his AP if he could have access. The AP said yes. Now if he sat there and cracked a WEP key or spoofed a legitimate MAC address to gain access, then sure I'd agree and say what he did was closer to sneaking into the house and plugging in without a courtesy knock.

      And anyway, it is not unreasonable to think that someone actually intends to run an open AP. Many people do, intentionally. Physically knocking on someone's door, asking to come in and connect to their switch I would never expect to be accepted. Not only that, how I am I suppose to know how to contact the owner? How am I supposed to know that the open AP I've found belongs to a residence rather than the coffee shop across the street which provides an open AP by intention?

      Perhaps it was not the owner's intention to run an open AP. Perhaps they didn't know what they were doing. However I don't see why this guy should be fined 500 pounds because the AP owner didn't know what they were doing. If the owners had made the *slightest* effort to communicate the private nature of their AP and the "hacker" had ignored or circumvented that then sure, then sure they might have a case for prosecution.

    91. Re:In Perspective... by tolkienfan · · Score: 2, Interesting
      The problem is, this ruling sets a precedent.

      The legal systems in the UK and US are based on precedents. Once a Judge has made a ruling with holdings, those holdings are used (held) in future cases.

      One problem with this one, is that there is no longer any way of "wirelessly" advertizing permission to use an access point. (Not in a curerntly supported standard way, anyway).

      But the bigger problem is that is sets a precedent of "default is closed". ie that access to networks must be specifically permitted.

      This has widespread effect.

      • Browsing the net
      • Web spiders
      • internetworking in general
      • anonymous ftp (how can you remain anonymous if you have to have specific permission)?

      Nearly all of the internet is based on the premise that access is granted by default.

      Even if the guy was being a dick, this is a bad, bad ruling.

    92. Re:In Perspective... by Anonymous Coward · · Score: 0

      I have an ipod with a little FM Transmitter. It's designed to be low-range, for my car only, but if you're next to me and you hit scan on your radio and it picks up a song you like you leave it on that station. But oh my f*cking god, it's not a real radio station, it's my ipod! You should go to jail now, right?

      As a side note (and offtopic, but possibly funny), those little iPod transmitters are illegal in the UK so it would probably be the case that you would "go to jail" for using one in the first place!

      Perhaps a better analogy for this kind of thing is going up to the side of someone's house and drinking water from the tap on the outside that they use for watering the lawn with - it is technically their water which they are paying for and although the tap is not secured with a padlock, it is generally accepted that you won't just use it (although maybe due to the fact that you'd need to trespass to do so).

    93. Re:In Perspective... by gcalvin · · Score: 1

      If a house has a big mat that says "WELCOME" on the front porch, do you still need permission to open the door and walk in?

    94. Re:In Perspective... by Anonymous Coward · · Score: 0

      Regardless of invitation. In the US it is legal to take a photograph of someone, or anything for that matter, which is in the public view. The same should go for wifi signals. As long as one is on public property, any wifi signal he can connect to should be legal to do so.

      In fact, I believe that this woudln't be a crime in the US at all. To my knowledge, it is legal to recieve any signal on any frequency.

    95. Re:In Perspective... by uncqual · · Score: 1
      Somewhat unrelated (probably will get me modded down - oh well).

      When you put your trash in your driveway (not even on public property) for collection, the police can in some cases search it without a warrant (U.S. v. Redmon, No. 96-3361, 7th Cir., March 10, 1998 - http://lw.bna.com/lw/19980331/963361.htm). Seemingly (if my skimming of the opinion was adequate) in part because you intended it to be taken away by another party and didn't expect to retain control of it.

      It seems logical to assume the same applies to any signals you are transmitting outside your house and/or property lines if you intentionally allowed others to access them. Hmmm... would this same logic apply if you by accident let others access them w/o a password and the police intercepted them.

      --
      Why is there an "insightful" mod and why isn't it "-1"? If I wanted insight, I wouldn't be reading /.
    96. Re:In Perspective... by TogusaS9 · · Score: 1

      If the "victim" did not intend for his AP to be open then you cannot possibly fault the guy who connected to it when *every* relevant standard of communicating such an intention had indicated that this was an open AP: The SSID broadcast, the accepted association request, the DHCP response giving him an IP address and telling him to send all his internet bound traffic to that particular router..

      Irrelevant, in my mind. All the SSID broadcast told the wardriver was that the AP itself was open. It didn't tell him if the AP's owner knowingly and explicitly intended for the AP to be open -- an automatic connection does not imply consent, IMHO. Since the wardriver in this case took advantage of this situation for three months, it stands to reason that he (the wardriver) intentionally took knowing advantage of the AP owner's ignorance, and thus is at fault.
    97. Re:In Perspective... by periol · · Score: 1

      actually, the US isn't that different. our government just use "proxies", otherwise known as "inmates", who "accidentally" drop the "soap" in the shower. the problem is that if you let one "go down" on you, you may find his boyfriend ready to "kill"/"rape" you.

    98. Re:In Perspective... by dual_boot_brain · · Score: 1
      I really can't see the difference between a free public hotspot and a unsecured private network - it's not really possible to tell the difference between the 2 from a technological perspective.
      The question is: is it reasonable to assume you are connecting to a free public hot spot? In a location near a facility known to provide no-cost-to-user wireless connectivity, then it is possible that you could reasonably mistake the no-cost public hotspot for the unsecured private hotspot, assuming that you could show that the names given to the wireless access points were either similar or did not provide enough information to allow you to differentiate between the two. It is probably better to go to a known free hotspot, pay for your own service, or do without.
      --
      There is no reset button in life; however, there are bonus levels.
    99. Re:In Perspective... by MisterMurphy · · Score: 1

      Sure. But that is a poor metaphor. The wireless network is not a house, it is a bunch of radio waves being transmitted. There is no door, there are no walls and there is no demarcation of private property. What this wireless 'hijacker' did is very similiar to using a radio, and using it to listen to a radio station. If you do not want someone listening to your radio broadcast, then do something to obfuscate it. Otherwise you are transmitting data across a public forum, and really have to abide as if your broadcast were for the public to access. The spectrum belongs to the people.

    100. Re:In Perspective... by d34thm0nk3y · · Score: 1

      Some geeks have attempted to hijack "There's no encryption on this node" or "My SSID is public and is..." to mean this, but given most WAPs are configured by default to have no encryption and to publically broadcast a SSID, and given both can be explained by many other reasons, this is simply legally non-sustainable as an argument.

      Doesn't that say it all??

    101. Re:In Perspective... by lgw · · Score: 1

      A human can communicate to you without speaking to you. For example, a sign that says "Free WiFi Here!!!" on the window of the coffee shop. If someone accidentally sets up a web server, you shouldn't go there either (though that's a different case than an access point - there really is no way to know until you're already there for a web server).

      If most houses looked like pubs by default, your analogy would work better. The majority of WAPs giving out DCHP addresses are doing so without any intention of the owner to allow strangers onto his network, simly because that's the default configuration. That by itself is not enough to assume you're invited. It's not hard to ask.

      If someone wants to give away free access to strangers, and not actually have to meet any of them, he can just post a sign, no? You can even do this through a proxy (as every free commercial hotspot I've used does - you always have to get past the splash screen), no need for a physical sign. But merely offering a DHCP lease is not enough to convey an invitation, as the *majority* of the time that's not the intent.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    102. Re:In Perspective... by lgw · · Score: 1

      Right, but I wasn't talking about any metaphor. I was talking about what really happens with cops and people lurking in front of houses. Thi guy (and the guy in Florida) weren't buted because the cops were looking for WiFi bandits, they were busted because they were lurking in front of someones house, and the new law was the most convenient tool. The Slashdot discussions seem to overlook that the technological angle wasn't what the homeowners or cops really cared about, they just wanted the creepy stranger gone.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    103. Re:In Perspective... by asscroft · · Score: 1

      wow! Blimey me, I guess they arrested the wrong chap!

      (sorry, I just watched the family guy where the pub gets bought out buy the british.)

      thanks for the info.

      --
      because I have been enjoined by this Holy Office to abandon the false opinion which maintains that the Sun is the centre
    104. Re:In Perspective... by Goose3254 · · Score: 1

      If the AP owner left his AP open even after all the information in the manual indicated that this was probably a bad idea, then someone else using it after a proper handshake should be ok.

      "didn't read the manual" is not a good defense. I didn't read the tax code either, but I'm liable if I don't pay taxes.

      Further I think the owner of a open AP is liable under criminal facilitation if any unauthorized user breaks any laws (kiddy porn, filesharing) while using an open AP. The nature of the Internet is "open unless secured". Ignorance of this concept is no excuse.

      If the wardriver was pulling things off the user's home server, then the user should have secured it. If the wardriver sniffer the traffic and got the user's credit card info, the user should have secured the AP. If the wardriver used the credit card information to order a new MAC from Apple, then the wardriver is guilty of fraud. Saying he hijacked the user's connection is like saying that you can't drive on the street because I'm driving on the street. If the Wardriver was pulling an IP address from the ISP and the user only got the one IP address then, yeah he hijacked the connection. as in this case the connection was "one at a time".

    105. Re:In Perspective... by lgw · · Score: 1

      Clueless user indeed - but that's not the same as an invitation. A hotspot configured with a quite common default configuration cannot be interpreted as intention by the owner to invite you, regardless of the technology.

      In any case, the law always takes intentions into account. There's always the possibility that you'll make a reasonable effort to ask permission before using the network, yet be deceived about what's really happening with the technology - that's OK, laws always have to account for situations like that. Just like the law recognizes a difference between walking through a parking lot trying all the dorr handles (illegal where I am) and accidentally trying to open the door of a car that's the same make and color as yours. Intention is what matters.

      Now a lawsuit would be different, as you're required (at least in America) to try to resolve disputes before going to court, but we havn't seen an example of a lawsuit yet. This was a case of a guy lurking in front of a house, and a cop finding the easiest way to make him go away.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    106. Re:In Perspective... by enjerth · · Score: 1

      Out of curiosity I looked this up. This is almost unbelievable, but it's true. Information is available at http://www.tvlicensing.co.uk/information/index.jsp it's £126.50 per year for a color TV currently, which amounts to about $224. And if you're blind, you only have to pay 50% to watch TV!

    107. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      Irrelevant, in my mind. All the SSID broadcast told the wardriver was that the AP itself was open. It didn't tell him if the AP's owner knowingly and explicitly intended for the AP to be open -- an automatic connection does not imply consent, IMHO.


      In 802.11 there are a few ways to communicate your intent. In this case, every possible means of this communication was saying "I'm open". How else, in your opinion, is an AP owner supposed to communicate an intent of openness to clients?


        Since the wardriver in this case took advantage of this situation for three months, it stands to reason that he (the wardriver) intentionally took knowing advantage of the AP owner's ignorance, and thus is at fault.


      What does the time duration have to do with it? Do people who knowingly and explicitly intend to run open APs always keep them up for less than 3 months?

    108. Re:In Perspective... by kefa · · Score: 1

      totally agree! if a neighbour's fruit tree overhangs your garden, you're hardly going to be be arrested for sampling the fruit on your own side!

    109. Re:In Perspective... by DavidTC · · Score: 1
      If your neighbours forget to close the curtains, do you have a right to use read their credit card bills on their desk, using a high powered telescope?

      Um, yes. You do.

      When did the total idiots invade this place? There's absolutely no law against reading things through windows.

      A very very few juridictions have laws against aiming telescopes over a certain power more than X degrees downward, but as that's an utterly unenforcable law, you can probably count those places on one hand.

      Now, going onto people's property and looking through the windows is probably illegal under various 'peeping tom' laws, but that's based on trespassing concepts...while you have assumed permission to go up to their front door for the purpose of knocking on it, you presumably do not have their permission to look in the windows.

      But no peeping tom law applies to someone standing on public property, or someone else's property. It is perfectly legal to look through any windows you want from the road, for any reason at all.

      Do you then have a right to use the CC numbers?

      No more than if you'd been left in their office for ten minutes with their credit card bills, and copied them down. Or if they'd handed you their credit cards to run purchase gas at the gas station you work at.

      The fact you gained the numbers by 'spying' is completelly irrelevant. Credit card fraud is credit card fraud.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    110. Re:In Perspective... by Ichoran · · Score: 1

      How do you know what the intent was?

      The WAP owner can make the intent to not share clear by using encryption. Otherwise, the WAP is sitting there shouting, "Hi, would you like an internet connection? Hi, would you like an internet connection? Hi, would you like an internet connection?" That seems pretty clear to me, even if it's accidental.

      If someone is giving something away for free and they don't mean to be, they should (1) stop as soon as they find out and (2) complain to the hardware company whose product wasn't doing what they wanted it to do.

      It is ridiculous to take legal action against people who accept a free service when it is offered to them.

    111. Re:In Perspective... by DavidTC · · Score: 1
      The problem is that if the precedent is set that 'use without express permission' is 'unauthorized use' under the law, the Internet dies tomorrow, or it would be if such a thing were enforcable.

      I'm serious here. Does anyone here have permission to view any web site?

      And while you might have permission to email other people, I'm willing to bet that almost none of them do not have the right to grant you accesss to their mail server. And before you pull up an AUP, you need to explain how you got to that AUP without permission.

      Just like every other network protocol in existence, there are ways to deny access on wifi networks, of various security levels.

      Even the minimum 'deny access to everyone but these MACs' or a web page that comes up and says 'Click to confirm you are an authorized users', while trivial to get around, would be enough to de-authorize users. The point isn't the security level, it's merely any indication it's an private network.

      Just like lame-ass Javascript protection is enough to legally protect a web page.

      But a ruling saying 'Everything is private by default' destroys the entire Internet.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    112. Re:In Perspective... by lgw · · Score: 1

      You want to assume a persons intent from some technological details because that's convienent for you, but that's not a very good principle. The fact that the majority of unsecure WAPs are unsecure by accident means you can't assume any intent from the fact it's unsecured. It doesn't matter how you wish the World were, the World is what it is, and you have to make decisions accordingly.

      People are idoits, therefore you can't assume you've been invited just because the radio signal looks inviting. Sorry for the inconvenience, but that's people for you.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    113. Re:In Perspective... by lgw · · Score: 1

      There's a real and significant difference in what you can assume about an access point, vs another node on the network. The vast majority of websites these day, BTW, have given explicit contractual permission to everyone to visit them (in the ISP's Terms of Use agreement). Every internal node in the internet these days has some contract that spells out bandwidth costs, and access is contractually specified.

      If you required every single node on the internet to have a contract explicitly allowing access before being connected (which would neatly solve the 'express permission' problem), almost no one would notice that anything had changed. With the exception of a few geeks running their own servers, the entire internet already works that way today.

      But for access points, you can always ask the owner directly if his intent is unclear.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    114. Re:In Perspective... by DavidTC · · Score: 1
      What's more, do people who do not intend other people to use their AP keep them open for three months while others use them?

      I'm sorry, that's just idiotic. It's like complaining to the police that someone, every day, walks their dog across the corner of your front yard, and the police arrest them for trespassing, when you failed to ask them to stop.

      That would be thrown out of court in a second. They probably assumed that was a public right-of-way or that youhad no problem with it. It's not trespassing until you're asked to stop or it's obvious you shouldn't be there.

      I think the fact that he was doing it for three months is a point on his side.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    115. Re:In Perspective... by Locke2005 · · Score: 1

      Damn straight! And if they didn't want me wandering into their living room, they would have locked their front door!

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
    116. Re:In Perspective... by DavidTC · · Score: 1
      Who the hell gave you permission to connect to the whois servers? What are you, some sort of hacker?

      ;)

      --
      If corporations are people, aren't stockholders guilty of slavery?
    117. Re:In Perspective... by DavidTC · · Score: 1
      I am running every open wifi network in existance, and I hereby give everyone permission to connect to them.

      What, you think I'm not? Well, perhaps you should explain how we should go about securing permission from a fucking radio signal besides, you know, following the protocols laid out to do so. Because most people don't carry around radio triangulation equipment.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    118. Re:In Perspective... by DavidTC · · Score: 1
      In fact, you can have authentication without privacy.

      For example, MAC address filtering.

      Sure, it's completely unsecure, but legally you'd be in hot water if you modified your MAC to match your neighbors so you could get on his network. (Unless you could prove you just happened to have that MAC, also.) Spoofing authentication is illegal.

      Hell, there could be a web page that you're automatically redirected to that says 'This is a private network. Click here if you are one of the authorized users' and you'd probably legally be in trouble if you clicked.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    119. Re:In Perspective... by lgw · · Score: 1

      If you don't know who to ask, don't use it. Sorry if that's inconvenient, but good manners are sometimes that way. It's usually pretty obvious in any case.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    120. Re:In Perspective... by TogusaS9 · · Score: 1
      If the AP owner left his AP open even after all the information in the manual indicated that this was probably a bad idea, then someone else using it after a proper handshake should be ok.
      Sorry, but no. I find ridiciulous and without merit any notion that a wardriver or jaysurfer should be held harmless for accessing a private AP that was left open simply because the AP owner "didn't read the manual". (Besides, just because the AP says it's OK to connect does NOT mean that the AP's OWNER says it is.)

      Sure, not reading the manual doesn't excuse AP owners from setting the AP's security properly, but then again, AP owners shouldn't be punished twice for their ignorance (once for not setting things up right, and once for having their bandwidth stolen from them).
    121. Re:In Perspective... by DavidTC · · Score: 1
      Except, in this case, to get rid of him, they're willing to set a precedent that says you can't access a computer without express permission, which immediately kills the internet.

      And there's already a crime for 'hanging around looking shifty'. It's loitering, and it's a perfectly good crime. Pull him off the streets, tell him next time he's spending the night in jail, and he might get the idea that driving to residential areas and sitting around in his car is frowned on.

      They just want to get him on 'unauthorized computer access' because it is, quite rightly, a felony. But what he did is not, in fact, that.

      I am not happy when police, in an attent to get rid of a persistent jaywalker, charge them with rape of the street, and I am not happy when the police charge a loiterer with felony computer misuse.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    122. Re:In Perspective... by TeraCo · · Score: 1
      Just like that pesky ruling that 'all residential doorknobs are private by default' destroyed the free world!

      That's the problem with this whole argument. On one hand you have the 'this ruling is ok' side with their reasonable explainations of the implications of the ruling. On the other you have the 'OMFG THIS DESTROYS THE INTERNET FOREVER!!!!11! and you all suck if you disagree' side. (No, you didn't say people suck for disagreeing, but others in this topic have.)

      It makes it easy to decide who is 'right' though.

      --
      Not Meta-modding due to apathy.
    123. Re:In Perspective... by lgw · · Score: 1

      The police aren't setting any precedent at all, they're merely using the laws provided for them.

      There is a big difference between express permission to use an access point, and express permission to use another node on the internet. I'm not sure why people keep saying that "this kills the internet" in any case. Almost every node on the internet has a contract regulating access to it, in which explicit permission for appropriate access is already granted. Requiring express permission before accessing *any* computer or network (or, more correctly, taking reasonable steps to determine that this is so) doesn't kill the internet at all - at worst, it's an extra clause in the Terms of Use agreement for ISPs that don't already make that explicit.

      Yes, you can outlaw using an access point without getting permission from a human, without outlawing the internet. It's not even complicated to do so.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    124. Re:In Perspective... by GuyverDH · · Score: 1

      Until they make the WAPs silent, until they receive a request from a subscriber, I'd have to disagree with your statement, that the unit was not "inviting" people to connect.

      Let's say that I have a WAP and you have a WAP. Mine is locked down to specific MAC addresses, pre-shared AES encryption key (40 characters), and I have reduced the range so that it cannot leave my premises.

      Now let's say that your WAP is running with signal boosters, wide open, no encryption.

      A friend drops by my house, with their laptop, and while I'm in the process of configuring my WAP to allow them access they say - whoa - i'm there dude. I look at their config and let them know that they're really on someone elses network and that they need to disconnect, and wait for my WAP to finish configuring.

      Since your WAP broadcast it's existance into my house, and placed packets on my friend's laptop, that would be seen as an attempt on your part to access his laptop's network interface - ie hacking. You've just broken the law because you did not restrict which devices your network would communicate with. If they are going to continue to look at "piggy backing" as criminal, then they will also have to start charging people for running unsecured WAPs as they *DO* send network traffic on to any and all wireless devices within range. Just because one of the devices does what Microsoft and or the user told them to, by accepting the connection and negotiating an IP address is inconsequential. The fact remains that my friend's laptop would not have known about your WAP unless you were sending broadcast packets to their wireless device.

      In order to *fix* this problem, a couple of things need to occurr.

      A change to the protocol is first up.

      There needs to be a method for WAPs and AWDs to negotiate channels that have *nothing* to do with negotiating a connection. This would allow adhoc networks and wireless access points to determine which channels they can each use without causing problems with each other.

      Secondly, the actual negotiation process needs to involve the user, and include some user interaction by which the user is informed of the source, and probable range from the source device, as well as a challenge response defined by the owner of said device.

      If all WAP devices were modified so that if they are used with default settings, that any and all requests take them to the setup page, and are given a wizard that requires them to answer a few questions, which would then configure and harden the WAP settings, it would leave end-users with no excuse to run with wide-open connections.

      After the configuration wizard is completed, the user would then be given the option to *save* the settings to a device, whether it be a USB drive, CD, floppy - whatever. From there on, configuring a client would be as easy as running a wizard on the client, read the device and bam - on the network. Once on the network the device could then lock that unit's MAC address into it's configuration for future reference.

      I really don't think it would be *all that* difficult to re-work these protocols to make them secure by default as opposed to insecure.

      --
      Who is general failure, and why is he reading my hard drive?
    125. Re:In Perspective... by DavidTC · · Score: 1
      What on earth are you talking about?

      I sysadmin on a colocated webserver.

      At no point have has my company ever contractually granted anyone access besides the people running the facility and clients.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    126. Re:In Perspective... by DavidTC · · Score: 1
      And you'd know random server owners had signed that contract how, exactly, without visiting their servers?

      Like I said, it kills the internet.

      It could, indeed, work on a network where everyone who possessed an IP had explicitly signed a agreement granting random strangers access to their port 80, and all ISPs had signed contracts saying they would require everyone in the future who gets an IP to sign such an agreement.

      That network is not, however, the Internet. And cannot be made from the existing Internet in any reasonable amount of time, even assuming you can get around the problem of multiple governments and contract laws.

      Your idea might give a semi-working internet-like thing in a few months. Basically, you'd have to immediately dismantle the existing net (As its primary purpose is, apparently, unauthorized access to computers, ISPs would be facing interesting legal problems if they tried to keep operating.), and move everyone to a new one as they signed paperwork.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    127. Re:In Perspective... by Anonymous Coward · · Score: 0

      Actually, the argument doesn't fall off on any of those points.

      You can safely assume that a public webserver is meant to be accessed. This is not the same of the majority of wireless APs. Even hotspots at Starbuck's are intended for customers only--they just don't give enough of a shit to keep anyone else from using it.

      So, there is an idea of implicit access controls here, and it remains to be demonstrated, by ANYONE arguing that open AP = authorized AP, that you can assume that the owner's intent is to offer free access to anyone simply because he didn't secure it. If the owner does not intend for you to access it, then it does not matter if there are any controls on it, you'd be wrong to assume it was meant for your use.

    128. Re:In Perspective... by maxwells_deamon · · Score: 1

      Ok,

      Keep in mind the following, I have done some war driving in my local area. I find open wireless connections. Then narrow them down to a few houses. I write the SSID on a flyer and place it on the door. The flyer tells about the dangers of open wireless and has an offer to come secure it for free.

      I set out over 500 of these flyer and got two real responces.

      Even people who have there face rubbed in it don't really care.

      Linksys, D-Link, Belkin... Should not be allowed to ship when the settings defaulted to open!

      (ps, I met a guy who says he war drives, connects, prints a flyer on the network printer. He has not gone to jail yet.)

    129. Re:In Perspective... by lgw · · Score: 1

      Well, wording and legal interpretaion varies, but the contracts I've seen make it explicit that the machine will be accessed from outside the colo in certain ways (e.g., the machine is called a "server" and there's pricing for traffic served, and often a description of the kind of traffic when you get a pre-packaged "game server" or a "web server"), so the customer grants permission for the server to be connected to the internet at large, and to serve port 80, or something similar. Clauses specifically excepting the people running the facility for any responsibility for controlling who accesses your server (from the internet side) are common (unless you buy their firewall service as well).

      If that wasn't seen legally as explicit permission for anyone on the internet to connect to port 80 (and it might well be) then it would be a minor addition to existing contracts to fix that. Requiring every ISP to only allow traffic between the internet and customer machines if there were contracts (between the ISP and the customer) that explicitly allowed that would not be a big change. It wouldn't be a technical change at all, just a new clause in the ToU if it wasnt there already. (Actually, my old home ISP had just such a clause, for the purposes of escaping liability for hacked machines I'd guess.)

      Remeber, you don't need to grant permission to each user individually, you can just grant inclusive permission to the next node upstream (and many web server agreements already do).

      --
      Socialism: a lie told by totalitarians and believed by fools.
    130. Re:In Perspective... by lgw · · Score: 1

      No, you'd just need a single law saying than an ISP can't serve traffic from a machine to the internet unless that ISP had a contract explicitly allowing requests for that traffic. Many already word their contracts that way, or point to a ToU agreement that can be changed pretty easily. ISPs have dealt with weirder requirements in the past, and the server customer wouldn't notice anything beyoned a new click-through, as it's not a technical change.

      But outside of legal hyperbole, the reasonable assumption for any machine serving port 80 is that you have permission to access port 80. That assumption is reasonable because it is true for the vast majority of cases. The assumption that if a WAP is unsecured you're invited is false for the majority of cases, so it isn't a reasonable assumption.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    131. Re:In Perspective... by TogusaS9 · · Score: 1
      In 802.11 there are a few ways to communicate your intent. In this case, every possible means of this communication was saying "I'm open". How else, in your opinion, is an AP owner supposed to communicate an intent of openness to clients?
      I think the problem WRT open APs has as much to do with those who access the APs as it does with AP owners.

      It seems to me that the general assumption regarding open APs is, "if an AP is open, it's because the owner wants it to be open". But the assumption doesn't take into account any possibility that an AP may have been accidentally been left open due to improper configuration or negligence on the part of the AP's owner -- many AP owners have been known to use the devices straight out of the box without even changing the default passwords, as many black hat wardrivers can attest (in fact, the wardrivers in the UK and Florida cases may have been relying on such negligence).

      My suggested advice, and one that I feel all wireless users should heed:

      Wireless access point and router owners: Unless you truly and honestly intend to maintain an open access point, change the router's or access point's default settings to close off unwanted outside access. Read the AP's/router's instruction manual carefully if you have any questions on how to do this.

      Mobile wireless Internet users: If you detect an open wireless access point or router that is located in a private residence, LEAVE IT ALONE -- DO NOT CONNECT TO IT until you contact the AP's owner and get permission to use it -- it's possible that they may have left the AP open by accident, and may not have meant to run it openly. Never assume that an open AP was intentionally set up that way.

      Now, any suggestions on how we can get the above across to wireless newbies before bad things happen to them? :)
      What does the time duration have to do with it? Do people who knowingly and explicitly intend to run open APs always keep them up for less than 3 months?
      I'm sorry I wasn't clear, but the three month timeframe was from the BBC article referenced in the parent post, and was the amount of time that the wardriver used the unsecured AP in question before he was arrested. I may have inappropriately used it out of context. My sincere apologies if I muddied the waters. ^^;;;
    132. Re:In Perspective... by DavidTC · · Score: 1

      Bad manners != illegal

      --
      If corporations are people, aren't stockholders guilty of slavery?
    133. Re:In Perspective... by lgw · · Score: 1

      The products are configured in the way that sells the most product - that's not likely to change. Do people actually read door flyers before discarding them? Two people do, I guess, by your study. :)

      Regardless of whether people (users or venders) "should" secure their WAPs, they don't. You shouldn't connect to a network unless you can reasonably assume you have permission. Because the majority of unsecured WAPs are not intended as invitations, you can't reasonably make that assumption. In practice, it's almost always clear whether your invited to use a network, and many Slashdotters are just trying to rationalize using a network they know perfectly well the owners wouldn't want them to.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    134. Re:In Perspective... by lgw · · Score: 1

      Bad manners == illegal, when they're bad enough. Laws are just customs that are worth the effort to enforce, after all. People are paranoid about "hackers" right now, so this custom becomes a law. It takes no more than good manners to comply with this law.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    135. Re:In Perspective... by Tim+C · · Score: 1

      If you put your pictures up on your http site even if you don't publish the link anywhere you're giving your consent for people to connect and look at your pictures. Not just your consent... your hardware, which is your stand-in online, is actively doing it.

      Minor quibble - there's nothing active about it. The server sits there passively waiting for requests to serve. It doesn't actively seek out clients.

    136. Re:In Perspective... by DavidTC · · Score: 1
      You're completely ignoring the fact that a lot of machines on the internet are not at hosting facilities, but on ISPs, and almost none of them have any sort of wording that lets anyone access your machine. (No, domain names don't help. Anyone can set up a domain name pointed at any IP.)

      So while you're might have permission to access any specific computer, you're committing an action that might randomly be illegal each time you go to a web page. Random illegality is lots of fun!

      And while you could read most colo contracts as allowing the hosting service to contact port 80, and to route traffic over the network to that machine, that does not lead to the idea that random people on the internet are authorized to access that machine. That doesn't make any sense at all. If I pay a taxi to drive me home, past my locked gates, that doesn't mean that other people can get in the taxi and go through the gates.

      Third parties simply do not gain rights to do things via my contracts. They certainly don't gain them via implicit statements that might be in contracts that they can't read.

      And trying to imply some sort of implicit contract right to access servers is fairly crazy when your entire argument is that we don't have the right to access computers that are explicitly sitting there saying 'I'm here' and respond to 'can I talk to you?' with 'yes'.

      Because it falls apart in the other direction, too. Why should servers get to talk to computers on ISPs, who almost certainly haven't signed any such contracts? Before you mention 'They're just responding...', remember the vast majority of open WAPs are broadcasting their SSID, and thus computers are just 'responding' to that.

      If you want to fix this situtation, don't try to change decades of computer use laws. We have perfectly functional computer access rules. You can go anywhere until you are asked to stop, via the correct protocols. Trying to go past that point without authorization is illegal. It's very very simple. It's incredibly easy to understand, and every protocol developed in the past three decades has a very obvious way to say 'access denied'.

      What you should be trying to do is require WAPs be sold with encryption as the default. Either via law (Just one state on taht bandwagon would probably have them change it everywhere.) or via lawsuits about selling products that expose people to danger by default.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    137. Re:In Perspective... by Goose3254 · · Score: 1

      Sorry, but no. I find ridiciulous and without merit any notion that a wardriver or jaysurfer should be held harmless for accessing a private AP that was left open simply because the AP owner "didn't read the manual". (Besides, just because the AP says it's OK to connect does NOT mean that the AP's OWNER says it is.)

      And I find it just as silly that US citizens can be deprived of due process based on tax law, which relatively NO one reads, but it's the case.

      If it doesn't mean it's OK, it should. The AP is an extension of the owner. The conversation between client and server AUTHENTICATES via handshake. That is implicit authorization. Just because your authentication process is non-selective doesn't make it a crime. It's not analagous to an open door on your house. It's a broadcast in the public area. That frequency is public domain. It's closer akin to listening to the radio in the car next to you while you're stuck in traffic, then beating that person in dialing in to win the free concert tickets.

      It's not stealing bandwidth either. Either the bandwidth is in use or it isn't, it's relatively in-exhaustable. You might could argue that it's stealing access, but the Internet is, or should be, less a public utility and more a public roadway. So the wardriver was depriving the AP owner of nothing, unless, by virtue of the configuration, the AP only allowed one IP address to be configured, and the wardriver would get it instead of the AP owner. As far as I know from the hundreds of AP's I've configured for the job and for friends, that's not a default setting. THat would imply a certain level of non-default settings and then, the SIMPLEST of protection schemes would imply a "locked door" scenario THEN it would be criminal to use it.

      Sorry but an open access point is an invitation, SINCE IT'S WITHIN THE SCOPE OF OWNERSHIP to secure it. Sure it's slimy, but there are many many things that are totally slimy and quite legal.

    138. Re:In Perspective... by Grishnakh · · Score: 1

      Ok, here's a house analogy for you:

      It's 25 years in the future, and household robots are starting to become commonplace. Besides doing chores, these robots also provide security for your home, answering the door, allowing certain guests to come inside, etc.

      So a guy goes up to a random house, and rings the doorbell. The robot answers the door, and the guy politely asks if he can come inside. The robot says, "come right in! Would you like me to prepare you lunch? Tell me what you want, and I'll make it for you! Here, why don't you sit in front of the TV while I prepare your meal?"

      Of course, the reason the robot did this is because the stupid owners didn't bother telling the robot to turn away uninvited visitors, but as far as I'm concerned, that's their problem. As long as the guy didn't steal the family jewelry or punch holes in the walls, he should get off scot free and the homeowner should get a stern lecture from the judge about wasting the court's time for their own stupid mistake.

    139. Re:In Perspective... by Anonymous Coward · · Score: 0
      If I see a store with a sign labeled 'open' on the front of it, would you consider me a burglar if I walked into it without asking the shopkeeper first?
      Of course! You might even be a terrorist!
    140. Re:In Perspective... by Anonymous Coward · · Score: 0
      Yea, pretty easy to see how you've decided one side is right and refuse to consider the other sides arguments because of a few posts which you stereotyped.

      Pot, meet the kettle....

    141. Re:In Perspective... by guyjr · · Score: 1

      All in all, people should learn to secure their wireless networks.

      Wireless networks should not be sold with security turned off - users should have to explicitly do that. This is exactly the same thing that Microshit did years back by distributing Windows NT with filesharing turned on, and passwords turned off. Consumers definitely have a responsibility (both under the law and as owners of a wi-fi node) to secure the damn thing, but jeez, it's apparently obvious that somebody needs to tell the manufacturers to make it easier for them to do so!

    142. Re:In Perspective... by Anonymous Coward · · Score: 0

      This is just really a step trying to make Open WiFi illegal. Law enforcement types hate the idea of Open WiFi.

    143. Re:In Perspective... by ampathee · · Score: 1

      Oh god, please please please - no more open-front-door, radio blaring, keys-in-car, or any other analagies!

      Every time this comes up, we have a thrillion comments explaining what it's "like"! As someone else here once said, what it is like is "connecting to an unsecured access point" - you may assume that 99% of slashdot understands this.

      The metaphors, man :(

    144. Re:In Perspective... by TogusaS9 · · Score: 1

      If it doesn't mean it's OK, it should. The AP is an extension of the owner. The conversation between client and server AUTHENTICATES via handshake. That is implicit authorization.

      Between the machines. Not the users. Just because the machines can connect and communicate doesn't mean that they should.

      It's not analagous to an open door on your house.

      It actually is, because the AP acts as the "door" between the mobile user's laptop and the resident's Internet access -- access that the resident pays a monthly fee for. An unsecured AP is thus analogous to an unlocked front door.

      It's a broadcast in the public area.

      That depends on how "public area" is defined. One could argue that an apartment complex or a gated residential community is not a public area.

      That frequency is public domain. It's closer akin to listening to the radio in the car next to you while you're stuck in traffic, then beating that person in dialing in to win the free concert tickets.

      Except that the other person in the car has the expectation that he's the only one listening to the radio at that moment. (Never mind that he's got the windows on his hoopty rolled down and is blasting the latest rap/country/smooth jazz/right-wing talk/whatever radio program out the speakers with the volume turned up to 12.) The second he sees that you're eavesdropping -- without benefit of a radio -- his expectation of privacy has been broken, and he would likely feel (rightfully) outraged at your intrusion.

      The same is true of a residential Internet connection -- the home user has purchased it for his/her/family's exclusive use and thus expects to be the exclusive user of the service. If the user then installs a wireless AP and fails to configure it properly, of course all measure of "exclusive use" has gone out the window -- but the user may not know this and still expects to be the "exclusive user". If and when that user discovers that some wardriver is using his Internet account to do deity-knows-what, of course there'll be outrage, and of course it's the user's fault for not configuring the AP properly. But does that mean that it's OK for the wardriver to access the AP in the first place?

      It's not stealing bandwidth either. Either the bandwidth is in use or it isn't, it's relatively in-exhaustable.

      But it's not infinite. The bandwidth on cable Internet services is shared -- a limited amount of bandwidth is shared by users in a given area. If more users in a given area use that limited amount of bandwidth, they will each have less individual bandwidth (i.e., slower speeds) for file transfers and such. (Of course, DSL differs in this aspect in that bandwidth is limited by the distance from the CSO.)

      And what about streaming audio and video? If both the residential user and the wardriver are online at the same time, and the residential user decided to play a high-resolution full-screen streaming video program, s/he is going to see things slow down rather noticeably for no apparent reason.

      Also, many residential broadband Internet accounts in the US have download caps, which limit how much data the user can download in a given month. If that cap is exceeded, the ISP can either cut off all access until the next month, or bill the user for the excess bandwidth. If a wardriver piggybacking on a residential account via an unsecured AP starts slurping tons of warez via BT, the residents may find themselves with an unexpectedly large bill -- or no Internet access at all -- until the end of the month.

      You might could argue that it's stealing access, but the Internet is, or should be, less a public utility and more a public roadway.

      In the US, Internet access is most decidedly not a public utility (although it is trending that way in certain local

    145. Re:In Perspective... by Anonymous Coward · · Score: 0

      Another set of bad analogies. All of these things -- the store, the bus service, and even the garage sale -- are offerings set up knowingly and intentionally ... The bus service operator is expecting people to board and ride their buses.

      FIne, hows' this:

      Your neighbor goes to a City auction and buys a surplus city bus. He parks it in from of his house with the door open and engine running. Someone see the bus and climbs onboard.

      Q: Is he 'hijacking' the bus?

      A: No. He saw a bus, pulled over to the curb, door open, engine running, and very reasonably thought it was there to pick people up.

      One WiFi connection is much like another. A personally owned WAP 'looks' just like a public one (electronically speaking), just like the personally owned bus looks just like a public one in the above example. If the WAP (BUS) is sitting there running (accepting connections), with it's door open (no WEP), then it's very reasonable to assume it's there to be connected to (there to be boarded).

      Now, argue all you want that a man should be allowed to leave his personally owned bus at the curb, engine running, door open, if he wants to. I agree. But he shouldn't be suprised when people climb aboard and sit down, expecting to go somewhere.

    146. Re:In Perspective... by fredklein · · Score: 1

      ...the SSID broadcast told the wardriver was that the AP itself was open. It didn't tell him if the AP's owner knowingly and explicitly intended for the AP to be open

      So, you go around leaving your front door open unknowingly and implicitly?

      BTW- do you know (for SURE!) that every web site you connect to was put there "knowingly and explicitly" for YOU to connect?? Or do you just assume that, since the site is there, and you are not blocked or asked for a password, that it's okay?

    147. Re:In Perspective... by fredklein · · Score: 1

      Besides, just because the AP says it's OK to connect does NOT mean that the AP's OWNER says it is.

      The only evidence you have of the owners intent is how the system is set up. If it only accepts certain MACs, or is encrypted, then it can be assumed they only want certain systems (the ones with the allowed MACs, or the WEP key) to connect. In the absence of any security measures, it must be assumed that the owner is NOT limiting the use of the WAP.

    148. Re:In Perspective... by fredklein · · Score: 1

      Your neighbor just bought a cordless phone setup. You go out and buy a replacement handset and set it to the same frequency as his. Are you then morally or legally allowed to make calls on his phone? I say no.


      And I say "Yes". As long as you do it from your property (or public property). You see, their phone system is broadcasting radio waves off their property, onto yours. I think you have the right to listen to the EM radiation they are broadcasting at you. This is naturally so, otherwise you'd need written permission to tune your radio to a radio station and listen to them.

    149. Re:In Perspective... by fredklein · · Score: 1

      it is theft of bandwidth. You are using a finite amount of the bandwidth on that connection

      Well, considering home users are usually not guaranteed a certain amount of bandwidth (companies sell up to a certain speed), what's the difference to the homeowner between: 1) Someone using 5% of their bandwidth, or 2) a bad cable/wire splice causing a 5% loss of bandwidth? And since the phone/cable company can't be brought up on charges for the 5% loss, why should the stranger be for using 5%??

    150. Re:In Perspective... by LordoftheWoods · · Score: 1

      People may never be told that the network is insecure or that anyone driving by can connect. When someone buys is told about it and buys the needed equipment, the vendor will often set their network up. The customer is then left knowing that his/her AP and wireless adaptor can communicate, but not necessarily that someone outside of their residence can too. I mean, do you expect people buying a coordless phone to consider if someone around will be able to sit outside their house and make calls on it? It is the fault of vendors, who leave things insecure because then it Just Works (tm) saving them cash that would be spent on customer support. If Joe Sixpack bought another laptop and used his wireless card, it will only work on an insecure network because only in that case will it not need any extra configuration. IMO ignorance is an excuse in such cases, and in order for the problem to be solved in the long run, vendors need to install secured networks and keep customers aware of these issues.

    151. Re:In Perspective... by LordoftheWoods · · Score: 1

      Well, isn't the SSID "linksys" or some such half the time? There are probably >2 who read them but they think you are experimenting with novel and obscure ways to market Linksys products.

    152. Re:In Perspective... by Goose3254 · · Score: 1

      You are still missing the point. The client (wardriver) does ask the server (AP owner) for permission. The owner responds by proxy. In this case the owner was standing his AP up as proxy. And set up promiscuously, the proxy always says yes. It's a real estate agency you hire putting an OPEN HOUSE sign in your yard and then you trying to shoot people for trespassing when they come on your property. If the literary standards of a WAP manual is over the head of the user, they probably shouldn't be on the Internet anyway, it's their machines that get rooted in two minutes and screw it up for the rest of us.

      The communication is two way. If the AP owner wants to keep people off his network, it is simple enough to do. Apparently he did not. He said "welcome" to the world by setting up his AP promiscuously.

      If the signal was strong enough (another setting on the AP can limit power output) to be seen off his property and on public use land (roadway park etc) then the access is fair.

      As to the owners impaired use, when you open your access to every one, which the owner did, then you can expect a performance hit. Running an open AP means that you are allowing anyone to connect BY DEFINITION, it's the OPEN part. If the owners hit their download cap, dang I guess an OPEN AP was a bad idea.

      We seem to disagree with the concept of permission. I maintain that the open AP is by definition granting permission, you disagree. But if it's NOT the owner's responsibility to secure the AP, how is it that the owners of cigarette vending machines are liable for purchases by minors, even if they clearly post a sign that says under 18 prohibited? The answer is that the owner is responsible for the security of that machine, and part of that security is to prohibit use by unauthorized people.

    153. Re:In Perspective... by TeraCo · · Score: 1
      Well, are there any loud obnoxious pots on the 'pro-ruling' side?

      I haven't decided anything yet (and since I don't own a wireless router, and aren't planning to in the future I doubt I will). This is a great place to be because any argument which at it's heart consists of 'my analogy is better than your analogy' sucks balls.

      --
      Not Meta-modding due to apathy.
    154. Re:In Perspective... by TogusaS9 · · Score: 1
      [...] In the absence of any security measures, it must be assumed that the owner is NOT limiting the use of the WAP.
      (Emphasis added.)

      This is precisely where those who believe that open APs, particularly those in private residences, can be freely accessed without permission are making a mistake: they are ASSUMING -- accepting as true without proof or on inconclusive grounds -- that the WAP is open because the WAP's owner wants it open. But this assumption discards, out of hand, the possibility that the WAP may be misconfigured (either due to negligence or ignorance) or that the WAP's owner failed to activate the security measures (again, due to negligence or ignorance).

      Given this possibility, I believe that no one should "assume" that it's OK to connect to an unsecured WAP, especially one in a private residence, unless one knows for certain that the WAP's owner has intentionally made it open -- by asking the WAP's owner personally.
    155. Re:In Perspective... by Anonymous Coward · · Score: 0

      Don't be a retard. Seriously.

      If a website owner find out that you're looking at his page, do you immediately close up and run off in fear of retribution?

      These two jackasses were clearly using a network that they had no business using and KNEW that they shouldn't. They didn't lay off, and they got spanked for it.

      Don't act like legalities have no shred of common sense to them, if something illegal is completely off the wall, the law will be overturned when put to the courts.

    156. Re:In Perspective... by Savantissimo · · Score: 1

      Well, spoofing is illegal unless you are doing it for a legit reson. My wireless ISP uses MAC authentication only and is very difficult to reach to get a MAC change. When my card turned out to be junk, I replaced it with a Belkin and programmed the old MAC in. When I told the ISP about it later, the guy was quite surprised - he had no idea that was possible. They still have not upgraded their security or acess control method. :(

      When I tried to find out from the local Apple store how to change the MAC so a visitor staying at my place could connect to the network, the arrogant child at the service and repair desk refused to believe it was possible on any card.

      --
      "Is life so dear, or peace so sweet, as to be purchased at the price of chains and slavery?" - Patrick Henry
    157. Re:In Perspective... by nickptar · · Score: 1

      The point is intent. The owner of the AP did not intend to make it publically accessible. A store owner who puts up an 'OPEN' sign does intend to make their store publically accessible. And no, they do not deserve it for failing to secure their network. That's like saying I deserve to have my car stolen because I left the keys in it; it's stupid of me, but I did not intend to give anyone license to steal it.

    158. Re:In Perspective... by nickptar · · Score: 1

      In 802.11 there are a few ways to communicate your intent. In this case, every possible means of this communication was saying "I'm open". How else, in your opinion, is an AP owner supposed to communicate an intent of openness to clients?

      It was open by default! The owner just didn't know to close it.

    159. Re:In Perspective... by TogusaS9 · · Score: 1
      You are still missing the point.
      I probably am. Somewhere. Please feel free to guide me in the right direction. :)

      Here's how I understand it:

      I understand the process of how a wireless AP grants permission to a wireless user who wishes to connect. I also understand that an open AP is by definition granting permission for outside users to connect to the Internet via the AP. But AIUI this process presumes that the AP is configured properly and in accordance with the AP owner's wishes, and that the AP owner knows that the AP is configured properly.

      But what about those who have unwittingly left their APs open? This would be like your analogy:
      It's a real estate agency you hire putting an OPEN HOUSE sign in your yard and then you trying to shoot people for trespassing when they come on your property.
      (only in this case it would be as if the owner him/herself had unwittingly put up the sign, not knowing what it read)

      Sure, in the above case, they probably didn't do things correctly, but do they deserve being screwed over (pardon my swearing) by some smarmy wardriver just because they left their cybernetic front door wide open? Or does the innocent wireless user, who thought he connected to a legitimately open AP, deserve getting busted for unauthorized access to a computer network? (AIUI, an AP that's been inadvertently left open looks pretty much like one intentionally opened, right?)

      I'm sorry, I'm not being too clear here -- I'm just pissed off by the apparent attitude of those who say, "It's an open AP, so what? Plug in! Go online! Who cares if it's open? If they left it open by accident, it's their own fault." And when I get pissed off, I get distracted to no end, and that doesn't help things. ^^;;;;

      I guess what I'm trying to say is that those who use APs, especially at home, should be careful in how they set them up and make sure that they're set up the right way, and that outside wireless users should be a little more careful in trying to access "open" APs, especially in residential areas.

      I think that if everyone did this, we wouldn't worry about wardrivers taking advantage hapless AP owners, or about legit wireless users accidentally connecting to the wrong "open" AP.

      Now... am I still missing the point? :)
    160. Re:In Perspective... by lgw · · Score: 1

      The problems you cite are only problems if you treat access points the same way as other nodes on the internet. With access nodes you can just ask a human what his intentions are. With other nodes you pretty much have to connect to the node to ask the question. Which is fine: the vast majority of sevrers on the internet are intended for public consumption, so it's a reasonable to assume that permission has been given. The majority of WAPs are offering access simply because it's the default configuration, but the owner's intention is not to share with strangers, so it's not a reasonable assumption that an unsecured WAP means you're invited.

      If consumers really care about security, venders will figure out a way to make WAPs secure by default without making connection any harder for technophobes (there's some cool research into this for bluetooth devices, which are even dumber than your average user!). If consumers don't really care (as seems likely) and just want some laws trhat appear to help, we few geeks will just have to put up with the inconvenience of asking before we use a WAP. It's just good manners anyway.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    161. Re:In Perspective... by NeutronCowboy · · Score: 1
      One day, 802.11* might have something added to make it easier to make it possible for a user to unambigiously give other's permission to use their networks (and that would be a useful feature anyway), but until then, look for notices, or talk to the operator. Don't assume.

      This is retarded, even for slashdot standards. What, I now need to talk to the admin of every site that has an open http port? Should get a written statement (notarized, of course) from a local forum admin that I am indeed allowed to view the posts? Do you see how retarded this approach is that you're taking? Just because something is wireless (or any other broadcast medium) doesn't mean that the network rules of engagement suddenly change.

      Open networks are exactly that - open. If you don't want anyone to trespass on them, put a sign up.

      --
      Those who can, do. Those who can't, sue.
    162. Re:In Perspective... by Goose3254 · · Score: 1

      Left it open by accident? There is no way to "leave it open by accident." Either they configured it or they didn't. If they didn't, then them must have meant to leave it open. The documentation included with the device TELLS you that.

      This same mentality allows people to act surprised when coffee is hot, when "unloaded" guns go off, cars explode because someone left a milk jug of gas stored in the trunk and all other manner of dumbass mistakes. The owner was personally responsible for his or her own security, in this case. He or she chose to run the AP open, implicitly allowing all traffic.

    163. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      A store owner who puts up an 'OPEN' sign does intend to make their store publically accessible.


      And what about a store owner who puts up an open sign but did NOT intend to make their store open to the public? Because that's exactly what this AP owner did.


      And no, they do not deserve it for failing to secure their network. That's like saying I deserve to have my car stolen because I left the keys in it; it's stupid of me, but I did not intend to give anyone license to steal it.


      Leaving your keys in your car does not send a message to anyone with common sense that you intend your car to be open to the public. This AP owner was sending such a message.

    164. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      It was open by default! The owner just didn't know to close it.


      It doesn't matter what it was by default. It is the owner's responsibility to know how to operate their equipment and configure it to say "this is public" if that's what they want or "this is private" if that is what they want. If due to their own ignorance they set up an AP that told the world "this is public" then noone but the owner can be faulted when the AP gets used by the public.

    165. Re:In Perspective... by Darth_Burrito · · Score: 1

      This isn't really the same thing. A store that has an open sign is actively inviting people into the store. It's the accepted purpose of the sign to begin with. The same thing with your bus example. A bus is a public form of transportation, so when the door is open, it's common knowledge that it's okay to walk onto the bus.

      You're arguing about established/accepted behaviors with a new technology. There are currently no/few established behaviors with open APs. So to figure out what the behavior should be, one has to draw on comparable kinds of interactions. The parent had the right idea.

      In 5-10 years, an open AP will generally be regarded as an invitation provided that rtfm-impaired reactionaries don't cripple us all by effectively outlawing open APs. Open APs already have big signs on them that say available for public use, it's just that a large portion of the populace is illiterate. This will change... just like people learned to use the web, to use ftp, to use network shares, and to not click on the ClickOnMe.exe email attachment.

    166. Re:In Perspective... by Darth_Burrito · · Score: 1

      If I program my robot to allow anonymous guests to enter, must my guests be burdened with requesting manual human authorization simply because you can not be bothered to spend the hour required to configure your robot.

      But no, I imagine you'd feel much safer relying on a legal system that has about a 0.001% chance of catching an offender. It's much better to allow those 99.999% of "unauthorized" guests to enter and access your private resources without being "caught" and to inconvenience me and my guests by requiring human authorization than it would be to just spend an hour configuring the robot which you went through the trouble of purchasing and installing.

    167. Re:In Perspective... by Darth_Burrito · · Score: 1

      it didn't tell him if the AP's owner knowingly and explicitly intended for the AP to be open

      This same argument can be made for virtually anything in the computer world: a web site, an ftp site, a network share. If automatic authorization does not imply consent, then everyone is a criminal.

      The owner initially had no wireless network. Then he purchased and set up an open wireless network. He could have set up a private wireless network. He didn't.

      Anyways, very few people have open wireless networks and do not realize it if for no other reason than the fact that they know they didn't have to enter any credentials or do anything special in order to connect. I know a number of people with wireless networks and none who don't know whether or not theirs is open... and we're not talking about IT professionals here.

    168. Re:In Perspective... by Anonymous Coward · · Score: 0

      People do sue others for accessing "private" webpages which sit totally unsecured on the internet. Only then we don't see a bunch of retarded geeks who defend this bullshit. Don't you read Slashdot?

    169. Re:In Perspective... by nickptar · · Score: 1

      You totally miss the point. Your store owner makes a conscious action by putting up the sign. A user who leaves their AP unsecured because it's the default does not. They don't even know that they're indicating openness.

    170. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      You totally miss the point. Your store owner makes a conscious action by putting up the sign. A user who leaves their AP unsecured because it's the default does not. They don't even know that they're indicating openness.


      I'm talking about if the store owner leaves the open sign up by accident and leaves the store, intending for it to be closed.

      It doesn't matter what you're intentions are if you aren't properly communicating them. At the very least, the person violating them isn't guilty of any wrongdoing if they violate your intentions after you've totally miscommunicated them.

    171. Re:In Perspective... by lobsterGun · · Score: 1

      Try this:

      Obtain one of the aforementioned codless handsets.

      Make a few hundred long distance phone calls. Call exotic places like Fiji or Tonga or Canada. Go wild! Have a romantic affair with the girl of your dreams for only $2.99 a minute. Talk to her for hours.

      Wait a month for your neighbors phone bill to arrive.

      Invite your neighbor over for a picnic.

      Tell him that you were the one that made all the phone calls.

      Tell him that you feel no obligation to pay for the calls because his system was broadcasting radio waves off his property.

      Now answer the following questions:

      Do you feel you did anything wrong?

      Are you sure what you did wasn't stealing?

    172. Re:In Perspective... by BoogieChile · · Score: 1

      It's interesting to see the opinions on this topic turning away from what was once seen as the benefits of wireless networking - the opportunities for sharing stuff. The old "Mine! Mine! Get away! Mine!" monster starts rearing its ugly head again. They're like the local grouch rousing on the neighborhood kids for picking fruit off _his_ fruit tree. Fruit that's hanging over _his_ (usually high) fence, to within reach of people passing by on the _not_his_ footpath (or sidewalk, if you're that way inclined).

      This guy was way over the line of what is acceptable, this is true, and well should have he received the good LARTing that he did. And people that carry on like him may very well ruin it for the rest of us. It's the difference between the kids nicking the overhanging fruit and the guy who comes around at midnight with a ladder and a couple of buckets.

      But it's generally only a small minority of people who do these sort of things. If the average man on the street sees a car with the keys in it and the engine running, he's not going to jump in and drive it away. Only a car thief would do that, he thinks to himself, and goes on his way. It's a matter of mores, things that we get taught are acceptable behaviour. Who is going to find a wallet and not return it to the owner? Not many. Who will spend the money and return the wallet to the owner by some anonymous means? Probably more. How many would keep the wallet? Hopefully less, but who's to say?

      Talk to the old ladies tending their gardens about all the folks that stop by to admire it, and you'll generally find they'll admit to being pleased as punch (they may even use that very phrase) to give a cutting to anyone who asks for one. Apart from the grouches, most people aren't too concerned with fruit on the other side of the fence. So, if you have a wireless connection and an unmetered broadband connection, where the harm if it's left available for someone passing by to check their email, find out where the nearest $whatever is or when the next bus is due? They may ever look at your website and leave a comment on how much they love your use of blink tags or something. Or leave something in return - a donation, some little token of their appreciation - an mp3 of this hot new local band or other barter item?

      Yeah, well it's probably time I stopped channeling Mr. fucking Rogers and got back in touch with the real world. Hey you! Come back here with my prize azelea!

    173. Re:In Perspective... by DavidTC · · Score: 1
      I didn't give an analogy.

      I just extended the concept 'Instead of asking an electronic device if we can speak to it, as is the norm, we must now locate the owner and ask him' to other computers.

      And, actually, there's no reason we should limit the concept to computers. Sure, that business has an open sign, but maybe they just forgot to take it down last night. Better ask someone before you go in.

      I'm sorry, no.

      And the danger isn't that people will stop using the internet, even though legally everything they do is illegal.

      The danger is that people will be able to have other people arrested for, for example, going to a certain 'non-public' URLs. Or logging into a 'non-public' FTP site with 'anonymous'.

      Once we've decided that it is possible to have non-obvious non-public places, we're in a lot of trouble, because there are plenty of companies out there willing to sue google, and anyone follow google's links, because they were stupid enough to put salaries.doc on their web site, but cleverly avoided any links to it. So anyone going there is commiting 'unauthorized access'.

      And we're already had suits over that idea.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    174. Re:In Perspective... by DavidTC · · Score: 1
      I know, I expect this other places, but this is slashdot.

      Remember those kids who got dropped from colleges because they edited their URL on their application page?

      Regardless of how you feel about that, how would you like them to be charged with felony computer misuse and sentenced to five years in jail?

      Or are people simply not understanding what 'unauthorized computer access' is and how serious it is?

      --
      If corporations are people, aren't stockholders guilty of slavery?
    175. Re:In Perspective... by instarx · · Score: 1

      The wireless network was not "inviting" him to connect. The wireless network is not a sentient entity, still less one with the legal power to do so. At best, it might have been broadcasting a message saying "My owner welcomes complete strangers to this network", but as of yet there is no protocol within 802.11* for doing this.

      This is true, but the owner of the network DID invite him in (at least according to UK law as described in the article). In the article the prosecuter said that the owner of any network is legally responsible for any crime committed with that network - aware or not, the owner is responsible. Therefore, if accessing his network was illegal then the owner was responsible because he ALLOWED it to happen by not setting security! But in this case since he allowed it, ipso facto there was no crime committed. The government can't have it both ways. I think this guy needed a better lawyer.

      This case notwithstanding, the law is clearly not settled on whether or not accessing unsecured wifi networks is a criminal act.

    176. Re:In Perspective... by wuie · · Score: 1

      Actually, this guy effectively did a courtesy knock. He followed all the protocols for establishing a legitimate connection to an access point. His computer did a courtesy knock asking his AP if he could have access. The AP said yes. Now if he sat there and cracked a WEP key or spoofed a legitimate MAC address to gain access, then sure I'd agree and say what he did was closer to sneaking into the house and plugging in without a courtesy knock.

      I meant "Courtesy Knock" as in "letting the person who is paying for the service *know* that you're using the service". The "Courtesy Knock" that you're talking about is network protocols, which can happen from either talking to an AP or plugging directly into a switch. There *is* a difference.

    177. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      I meant "Courtesy Knock" as in "letting the person who is paying for the service *know* that you're using the service". The "Courtesy Knock" that you're talking about is network protocols, which can happen from either talking to an AP or plugging directly into a switch. There *is* a difference.


      This "courtesy knock" is no more necessary connecting to an open AP than it is walking into a store with an "open" sign on the front. If the store keeper left the store and forgot to set the sign to "closed" and someone walks in after observing the sign, are they guilty of burglary?

    178. Re:In Perspective... by bfields · · Score: 1
      The wireless network was not "inviting" him to connect. The wireless network is not a sentient entity, still less one with the legal power to do so.

      A piece of paper with writing on it is also not a sentient entity. So what?

      Geeks need to get out of the habit of assuming that a default configuration amounts to "permission to use".

      What about when the "default configuration" actually issues invitations?

      The only surefire way to know if you have permission or not to use a network is to look for a publically posted notice

      How is an ssid broadcast not a public notice?

      I personally want to invite people to use my network. How the heck am I supposed to do that now? We could add a broadcast that says "here's my ssid, you can use it, and yes I really mean it this time". But then there's nothing we can do to stop the stupid hardware manufacturers from turning that on by default too. Repeat ad infinitum....

      ...most WAPs are configured by default to have no encryption and to publically broadcast a SSID...

      If the default apartment configuration featured an unlocked door and a sign that said "please come in and have some coffee", would you blame the coffee drinkers or the landlords?

    179. Re:In Perspective... by TogusaS9 · · Score: 1
      Sorry for the belated reply... I needed to get some sleep and sort my thoughts out. :)
      Left it open by accident? There is no way to "leave it open by accident." Either they configured it or they didn't. If they didn't, then them must have meant to leave it open.
      Consider the following scenario:
      Dad comes home and sets up a wireless AP. Just as he's getting ready to configure the wireless security, Junior comes down with his wireless-ready notebook PC, excited that he's now getting the Internet. Dad joins him for a few hours of male bonding and web surfing... and eventually forgets to set the AP's security functions.
      Or this one:
      Mom is setting up a wireless router, and is using the Web-based interface to make some configuration settings. She comes across the setting to enable the SSID, but notices that it's labelled "Advanced Users Only". Not thinking herself an "advanced user", she decides to leave the SSID feature off. And since the other security settings are listed below that notice, she decides to leave those settings turned off as well.
      In both scenarios, the APs' security features were turned off, in effect making the APs "open". Did their owners know they were open? Probably not, as I'll explain below.
      The documentation included with the device TELLS you that.
      Not in plain language. Not in so many words. And certainly not with any significant warning that leaving the security setting turned off may allow unauthorized access to the AP, the wireless LAN, or the Internet from outside the home. Moreover, the instructions are buried inside both the user manual and the devices' Web interfaces, sometimes under headers like "advanced users only", and the instructions are so heavily laced with technobabble that the average (i.e., non-tech savvy) user would be quite intimidated.

      (At this point, the smart ones would get on the horn and call the store they got the device from, or a tech-savvy friend, or the manufacturer's tech support line for help. The more, um, clueless ones will likely either slog on the best they can, or just leave everything turned off.)

      Your comment:
      He or she chose to run the AP open, implicitly allowing all traffic.
      itself implies that the user in question consciously and knowingly opened the AP and was fully aware of the consequences of doing so. Given the scenarios I've outlined above, it is entirely possible for an end user to "configure" a wireless AP so that it's "open" without knowing that it's open to outside access and without being aware of the consequences .
    180. Re:In Perspective... by Alsee · · Score: 1

      Yeah, in the US you just get screwed.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    181. Re:In Perspective... by Goose3254 · · Score: 1

      My last words on the matter

      Open WAPs are open. You find them everywhere. From the coffee shop on the corner to the upstairs neighbor in your apartment building. Connecting to them is not a crime.

      An open WAP is an invitation and the implicit authorization is given by process from the owner of the WAP, EVEN IF THEY DID NOTHING.

      Ignorance is not an excuse. Laziness is not an excuse. The process is WAY too simple and documented for those arguments.

      No way the guy in the UK should have lost his laptop OR 500 Euro or pounds or whatever it was. Worst case the AP owner should have told the guy to move it on down the street and FIXED HIS EQUIPMENT if it was a REAL issue.

      This was simply a ploy to eventually allow the broadband ISPs to shut down "open access points", like in apartment buildings, on the "behalf" of "unsuspecting users".

    182. Re:In Perspective... by Alsee · · Score: 1

      The wireless network was not "inviting" him to connect. The wireless network is not a sentient entity, still less one with the legal power to do so.

      OMG! I just realized you're right!

      Every time someone puts change in a vending machine and walks off with a can of soda, they are stealling that soda! The cans of soda are the vending machine owner's property! The vending machine is not a sentient entity, still less one with the legal power to invite people to take soda. Any coins you drop into teh machine are irrelevant, taking a car is still criminal even if you stuff $20,000 in the owner's mailbox first.

      The vending machine would have been advertising its presense. This is a useful feature. But it wasn't "inviting anyone" any more than a door knob does. Some geeks have attempted to hijack "There's no lock on this exit chute" to mean it's OK to take the soda, but most vending machines are configured by default to have no lock on the exit chute, this is simply legally non-sustainable as an argument. Geeks need to get out of the habit of assuming that a default configuration amounts to "permission to use". It doesn't. Only permission to use is permission to use. Stealling a can of soda out of a vending machine exit chute is still theft, and just because the vending machine is deliberately disigned to drop cans of soda in an unsecured manner does not justify stealling that soda. Just because the owner put his vending machine in a publically accessible place and advertizing its presence and he left the the exit chute in the default unsecured configuration does not imply you have any right any right to steal cans of soda.

      ------

      One day, 802.11* might have something added to make it easier to make it possible for a user to unambigiously give other's permission to use their networks

      WiFi already HAS well defined mechanisms for regulating access. For offering and denying use.

      broadcasting a message saying "My owner welcomes complete strangers to this network"

      You suggest adding just another bit string to the existing specifications, and and defining just another meaning for it. It doesn't matter if it's the ASCII bitstring commonly associated with the text "My owner welcomes complete strangers to this network", as you argue the device still has no authority to grant authorisation. If the current specified messages for granting and denying access are meaningless and do not work then a new message still has no meaning and still does not work.

      And what if someone sells your suggested new WiFi point configured to broadcast the ASCII bitstring commonly associated with the text "I hereby grant authorisation for public use of this WiFi point"? Maybe a company sells them with that as the default configuration... maybe someone sold his old device on eBay left in that configuration... either way it doesn't matter. The new owner STILL may not have any idea that his WiFi point is broadcasting that message. You STILL cannot assume that this owner has granted anyone authorisation to do anything. You're STILL a criminal and stealling if you connect to that WiFi point and use its offered access without getting authorisation from the owner.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    183. Re:In Perspective... by nmg196 · · Score: 1


      > If I see a store with a sign labeled 'open' on the front of it, would you
      > consider me a burglar if I walked into it without asking the shopkeeper first?

      RTFA. This was not a public access point in a shop - this was someone's private AP in their house. Likening it to a shop with an "open" sign on it is ridiculous - the AP was private. My unlocked house analogy was much more accurate. 99% of people would realise that it's not their own and therefore realise that it's not theirs to connect to.

      > The AP this guy connected to had a big giant sign *actively* saying "OPEN" on it.

      -5, Wrong. Nowhere does it say "OPEN" in the protocol stream or anywhere else. It simply isn't secured - just like your house doesn't say "OPEN" on it if you forget to lock it. Houses have lots of ways of being locked. Not locking them is not equivalent in ANY WAY WHATSOEVER that any normal non looter would think to having a sign outside saying "OPEN". Why do you think that people selling their houses have to stick a big fucking sign on the lawn saying "OPEN DAY"? Answer: Because no normal people would come in if they didn't!

    184. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      RTFA. This was not a public access point in a shop - this was someone's private AP in their house. Likening it to a shop with an "open" sign on it is ridiculous - the AP was private. My unlocked house analogy was much more accurate. 99% of people would realise that it's not their own and therefore realise that it's not theirs to connect to.


      First of all, you can't tell for sure that the signal is coming from a residence. You don't know where the AP is physically located. Second, it isn't an impossible scenario that someone would intentionally run an open AP out of their house - I do.


      -5, Wrong. Nowhere does it say "OPEN" in the protocol stream or anywhere else. ....
      It simply isn't secured - just like your house doesn't say "OPEN" on it if you forget to lock it. Houses have lots of ways of being locked. Not locking them is not equivalent in ANY WAY WHATSOEVER that any normal non looter would think to having a sign outside saying "OPEN". Why do you think that people selling their houses have to stick a big fucking sign on the lawn saying "OPEN DAY"? Answer: Because no normal people would come in if they didn't!


      That analogy doesn't work, but correct - by simply leaving your house door unlocked are not actively offering entry to complete strangers. However this AP wasn't passively just sitting there open, it was actively broadcasting an offer for service onto public/other people's property on public frequencies to complete strangers. If the owner of this AP had so much as configure the AP to SSID broadcasts and send probe responses only to certain MACs I might say you have a point. The way this AP was configured was more like posting signs in the yard and on every piece of public property within 1000 feet saying "open house today".

    185. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      Because it's NOT HIS.


      Is the grocery store you buy your food at yours?

    186. Re:In Perspective... by Veamon69 · · Score: 1

      Your analogy doesn't make quite fit. No, I don't own the grocery store. I also don't go in and steal, nor do I sit outside and try and rob anyone with groceries who come my way. I go in and PAY for what I want, otherwise I'm stealing. By your example, since I'm outside minding my own business, I should be able to rob anyone of their groceries because they are walking by me. Thank you, come again.

    187. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      No, I don't own the grocery store. I also don't go in and steal,


      Ok, so if you were to walk into the store, grab something and eat it, and walk out without paying for it you'd expect the cops to pick you up for theft, right?


      nor do I sit outside and try and rob anyone with groceries who come my way. I go in and PAY for what I want, otherwise I'm stealing. By your example, since I'm outside minding my own business, I should be able to rob anyone of their groceries because they are walking by me.


      No, that isn't my example at all. I don't know who these unrelated people are that you're talking about. There are only two people in the analogy: The "hacker" and the AP owner.

    188. Re:In Perspective... by Veamon69 · · Score: 1

      Ok, so if you were to walk into the store, grab something and eat it, and walk out without paying for it you'd expect the cops to pick you up for theft, right
      Uhh..yea, thats pretty much what I said....
      No, that isn't my example at all. I don't know who these unrelated people are that you're talking about. There are only two people in the analogy: The "hacker" and the AP owner.
      The "people" are the signal, the grocery store is the AP, and then you have the hacker/thief...not sure I'm following what you're getting at...from your first reply to me that I have in italics, it seems as though you and I are on the same path...

    189. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1


      Ok, so if you were to walk into the store, grab something and eat it, and walk out without paying for it you'd expect the cops to pick you up for theft, right

      Uhh..yea, thats pretty much what I said....


      Ok. Now... what if that stuff you ate was sitting on a table labeled "free samples"? Same scenario, just add the "free samples" sign.

    190. Re:In Perspective... by Veamon69 · · Score: 1

      ...Then I would know it was "free"...but if it was just sitting there and wasn't labeled, I wouldn't just assume. Just like some grocery stores have people out front grilling sometimes, I dont just walk up to them and take something because it's outside the store and I'm passing it on my way in.

      The point is if you don't have explicit permission, then you're stealing. For example, if I live across the street from a coffee shop and pick up their signal, but I'm not a patron, then I am stealing. Even though it;s broadcasting and I can pick it up, it's obviously meant for patrons only...twist it anyway you want, but thats what it is. Just because you can get to something, doesn't mean it's yours to take.

    191. Re:In Perspective... by asdfghjklqwertyuiop · · Score: 1

      However this AP's signal was labeled. "Label" isn't an entirely accurate term when talking about this stuff... the AP wasn't just labeled, it was actively shouting "free".

      However if the AP owner didn't mean for it to be doing that, that's perfectly understandable... but this guy shouldn't have been prosecuted for using it. If a store employee accidentally put some non-free food on the table labled "free samples" and you ate it, you wouldn't exect the cops to bust you for theft, would you?

      The owner made a mistake, they miscommunicated their intentions. That isn't the user's fault.

  2. excellent by Anonymous Coward · · Score: 2, Funny

    so, i'm gonna have to stop doing my bittorrent across my neighbours wireless broadband and go back to criminalising myself...

    fantastic...

  3. How do u Hijack an OPEN network??? by TheSloth2001ca · · Score: 0, Flamebait

    If the network is OPEN then u should be able to use it at will. if you don't want anyone to use your wireless network then secure it somehow. Now anyone that wants u use it has to break you security and that can be considered a crime. If it's OPEN its fair game.

    --
    Just another crappy blog
    1. Re:How do u Hijack an OPEN network??? by fourharpoon · · Score: 1

      If ur door is opened, is it legal for me to get in and grab your hi-fi?
      And BTW, do you have a hi-fi set?

    2. Re:How do u Hijack an OPEN network??? by theamazingflyingshee · · Score: 1

      I agree, or they should be secured as default and have to be made open manually.

    3. Re:How do u Hijack an OPEN network??? by James+Youngman · · Score: 1
      If the network is OPEN then u should be able to use it at will.
      [...]
      If it's OPEN its fair game.
      That might summarise the way you would like the world to be, but it's not the way it actually is.

      Besides, I'm sure that you would agree that spammers sending spam through an open relay are commiting a service-theft crime. Having the open relay is really stupid on the part of the owner of the mail server, but it doesn't make the abuse any less wrong.

    4. Re:How do u Hijack an OPEN network??? by RAMMS+EIN · · Score: 0

      Ah, right. So if you have your door open in summer, I'm welcome to walk into your house and help myself to some of the cookies that are on the kitchen table? Or print a few copies of the document you happen to have open on your PC? Just because something is easy doesn't mean it's morally justified.

      Maybe you have a different opinion about the matter, but I don't like constantly having to think about how things can be abused and what I can do to prevent that. I heartily agree that this men should be fined for his abuses.

      Of course, if you want to keep something inaccessible, you should put proper mechanisms in place to enforce that. If you don't, and people gain access, you have yourself to blame for it.

      --
      Please correct me if I got my facts wrong.
    5. Re:How do u Hijack an OPEN network??? by ejito · · Score: 0, Troll

      Your analogy blows. His door isn't on public property.

      Someone's wifi signal goes everywhere, including other people's houses. Using an open wifi signal isn't breaking into anything.

    6. Re:How do u Hijack an OPEN network??? by TheSloth2001ca · · Score: 1

      The diference is that said hi-fiset exists in teh physical world, and if u take it then i cant use it. if u use your Wi-fi connection u can still use it, and if i am using all your bandwidth then just kick me off

      --
      Just another crappy blog
    7. Re:How do u Hijack an OPEN network??? by Anonymous Coward · · Score: 0

      Yeah, and those spammers using open relays to send millions of email messages isn't a problem either. More power to 'em!

    8. Re:How do u Hijack an OPEN network??? by Anonymous Coward · · Score: 0

      No need to be so pedantic...if his car (parked on public property) is unlocked, can I sleep on the back seat overnight if I'm too drunk to walk home?

    9. Re:How do u Hijack an OPEN network??? by DoktorTomoe · · Score: 1

      It may not be legal, but at least it puts you in a difficult situation when you try to claim money from your insurance.

    10. Re:How do u Hijack an OPEN network??? by TheSloth2001ca · · Score: 1

      what i ment to say was "if i use your Wi-fi connection u can still use it, and if i am using all your bandwidth then just kick me off" thats better. i need to get some sleep

      --
      Just another crappy blog
    11. Re:How do u Hijack an OPEN network??? by a+whoabot · · Score: 1

      Yeah, but this "hijacker" sent a request for an IP from their wireless router. His request was granted and he was given access.

      Say there is a computer at his entrance. It says "Welcome" when you walk up. You type into it: "Can I come in and take your hi-fi?" And it responds with "Yeah, sure" and it opens the door for you. That's pretty much what happened I'd say.

    12. Re:How do u Hijack an OPEN network??? by TheSloth2001ca · · Score: 1

      MY car is Private property ( i think) so your analogy wont work here

      --
      Just another crappy blog
    13. Re:How do u Hijack an OPEN network??? by Stuart+Gibson · · Score: 1

      But the difference is that a computer requests access to the network and the piece of equipment you've put in place to maintain the connection essentially says "Go ahead, here's an IP address to use".

      It's more akin to having a doorman who, when people come up and ask for access says "Go ahead, let me open the door for you". If you haven't told him to stop people, that's your lookout.

      Stuart

      --
      It's all fun and games until a 200' robot dinosaur shows up and trashes Neo-Tokyo... Again
    14. Re:How do u Hijack an OPEN network??? by Anonymous Coward · · Score: 0

      Well, if the house has neon sign over the door and when you ask may you come in, they say 'yes' and hand you shopping chart? I think this is the case with open wlan.

    15. Re:How do u Hijack an OPEN network??? by jaavaaguru · · Score: 1

      Rather like if a webserver is publicly accessible, then anyone can connect to it. If there's stuff you don't want people to see, then force people to authenticate.

      I don't know why some people see wireless networks any differently from that.

    16. Re:How do u Hijack an OPEN network??? by tha_mink · · Score: 1

      "That might summarise the way you would like the world to be, but it's not the way it actually is.
      Besides, I'm sure that you would agree that spammers sending spam through an open relay are commiting a service-theft crime. Having the open relay is really stupid on the part of the owner of the mail server, but it doesn't make the abuse any less wrong."


      Actually, I think a better analogy would be the drive in theatre. If you are parked outside the theatre, on public property, would it be illegal for you to listen to the short range FM broadcast they produce for sound on their movie? Or better yet, if you are driving behind someone who has XM Radio and you can hear their short range FM broadcast, is it wrong for you to listen?

      I mean, if your network is BROADCASTING a welcome and providing DHCP for ANYONE...then that's fair game to me.

      --
      You'll have that sometimes...
    17. Re:How do u Hijack an OPEN network??? by MadCow42 · · Score: 4, Insightful

      >>So if you have your door open in summer, I'm welcome to walk into your house and help myself to some of the cookies that are on the kitchen table?

      Bad analogy - that would involve tresspass; there is a physical boundary of someone else's property that implies private access.

      A better analogy would be if those cookies were floating through the air, coming in MY window and out my door, and I happened to eat a few as they went by.

      Although it may not reflect the law, I personally believe that unsecured wifi should be public domain. WEP (even 1-bit for god's sake, to show that the intention for it to be private) should be enabled by default on routers, and it should be blatantly clear that you're providing public access (with consent) if you turn it off.

      MadCow.

      --
      I used to have a sig, but I set it free and it never came back.
    18. Re:How do u Hijack an OPEN network??? by Anonymous Coward · · Score: 0

      No, I would not agree. An open relay, like an open wireless access point, is its owner's choice. There is no way to tell an open resource from a closed service other than attempting to connect and seeing whether you're being challenged to provide credentials. If you want to start requiring in-person permission before anyone can communicate with someone else's computers, then please turn off the internet, because "unauthorized" communication is all that ever happens on this network. I don't have explicit permission to connect to the Slashdot webserver. Is this post a crime (unauthorized access to a computer/network)?

    19. Re:How do u Hijack an OPEN network??? by balloonhead · · Score: 2, Insightful

      Sending spam is a crime. Using an open relay is not. Spammers using this are committing a crime, but not the one you point out.

      Open networks require a handshake between the router and PC. This is analogous to authorising use.

      One says 'Hi, can I use your network'

      The other says 'Yes'

      The owner of the network authorised this by turning the thing on.

      I don't agree with the top post though - I leave my network open, I don't mind people using it. If they abuse it, they get kicked. I use other people's networks to send and receive email and to do the odd bit of surfing.

      If I commit a crime on their network, then I am a criminal. But using a network which I have been authorised to use to do legal things is very different.

      --
      This idea was invented by Shampoo.
    20. Re:How do u Hijack an OPEN network??? by cowstaker · · Score: 1


      Rather like if a webserver is publicly accessible, then anyone can connect to it. If there's stuff you don't want people to see, then force people to authenticate.

      I don't know why some people see wireless networks any differently from that.


      Wait a tick. If it is the owners fault for not securing their AP, then would it be the municipal councils fault if a park bench went missing because it wasn't cemented to the ground?

      Be responsible for your actions, your basically saying that it's not the criminals fault for particpating in an unethical activity.

    21. Re:How do u Hijack an OPEN network??? by a.different.perspect · · Score: 1

      It's true that the tresspassing part of the analogy is invalid. On the other hand, capitalizing on the generosity of the doorman to intentionally steal from inside the house is what the wireless hijacker is actually in trouble for. As I pointed out elsewhere, the intentions of the hijacker are really, really important in deciding their guilt in something that can easily be done by accident.

    22. Re:How do u Hijack an OPEN network??? by Anonymous Coward · · Score: 0

      You don't have a publicly accessible webserver by default. To have one you must conciously take the action of setting one up. Your wireless network on the other hand is publicly accessible by default unless you take some kind of action to prevent it. That is why people like me see these things differently.

    23. Re:How do u Hijack an OPEN network??? by jaavaaguru · · Score: 1

      I installed a web server to share my web pages out, and I installed a few APs to share my internet connection out.

      If I didn't want people to see part of my site, I'd make it secure. Same goes for my WiFi, but I'm not bothered if it's all public.

      Groups like BackNet exist to promote publicly accessible WiFi networks. Seems like a good idea to me :-)

    24. Re:How do u Hijack an OPEN network??? by the_xaqster · · Score: 1
      Wait a tick. If it is the owners fault for not securing their AP, then would it be the municipal councils fault if a park bench went missing because it wasn't cemented to the ground?


      No, but if they left it sitting on a hand truck would they really expect to find it there in the morning?
      --
      I'm just here to regulate Funkyness
    25. Re:How do u Hijack an OPEN network??? by 91degrees · · Score: 1

      Do you realise that analogies are there to draw simple comparisons with familiar situations, rather than complicated comparisons with unheard of situations?

    26. Re:How do u Hijack an OPEN network??? by acro-god · · Score: 0

      actually, that's not the same thing... it'd be more like if the municipal courts put a bench out in the park that only court personnel could use, but they had no signs sign or barracades indicating that the public weren't supposed to be sitting on it. Stealing the bench is like actually physically taking the AP, which is actual theft of private property.

    27. Re:How do u Hijack an OPEN network??? by TobascoKid · · Score: 1

      First off, I think comparing public web servers and open APs is comparing apples to oranges.

      Just because an AP is open, doesn't mean that you can assume that it is "free for all". Sadly, most routers are not secured by default and this is what's causing the problem. If APs were secured by default, then I could see that "but it was open" would be a reasonable excuse as you could assume that it was intended to be open (ie, somebody had to intentionally make it public). Instead we're in a situation where many people "buy a house, but don't bother to lock the door because they either don't know how or can't be bothered" and while some people are happy to let people come in to their new house and eat a biscuit or print something on the printer, other people aren't.

      In the past (and apperently in a few places still), people didn't lock thier doors as it was just assumed that even though something that was private was open, it didn't make it all right for people to come in and use it. And as people knew other people wouldn't go in they didn't have to lock the doors.

      --
      At some point, somewhere, the entire internet will be found to be illegal.
    28. Re:How do u Hijack an OPEN network??? by vrai · · Score: 1
      Right - will people stop using fucking analogies! None of them are any help and almost all of them simply serve to bias the argument. Analogical thinking is the idiot's alternative to logic and should be avoided at all costs.

      As for the topic at hand; WiFi access points already have a mechanism to determine whether people may connect to them or not. If the owner of an access point does not wish the general public to use it, then they should enable encryption or some other form of access control (e.g. MAC addresses). If the owner leaves their access point completely open then they are responding to the "may I use this" challenge with "OK".

      If, for some reason, they must have an open network, but don't wish others to use it then they should take steps to prevent their signal from leaving their property (e.g. using special wall insulation).

    29. Re:How do u Hijack an OPEN network??? by Kjella · · Score: 1

      >>So if you have your door open in summer, I'm welcome to walk into your house and help myself to some of the cookies that are on the kitchen table?

      Bad analogy - that would involve tresspass; there is a physical boundary of someone else's property that implies private access.

      A better analogy would be if those cookies were floating through the air, coming in MY window and out my door, and I happened to eat a few as they went by.


      That would be true if you were simply listening in. But using someone else's wifi network means instructing their private property on their ground to do something for you. If your TV remote was powerful enough to access your neighbour's TV, would you have the right to do it, since it doesn't involve trespass? No. There's no blurry line here.

      --
      Live today, because you never know what tomorrow brings
    30. Re:How do u Hijack an OPEN network??? by JackDW · · Score: 1

      Hah. I like how this post has been moderated Flamebait, when it is quite clear that a lot of morally bankrupt Slashdotters agree with what it says.

      --
      You're an immobile computer, remember?
    31. Re:How do u Hijack an OPEN network??? by a+whoabot · · Score: 1

      I was continuing his analogy. How else could I make it comparable?

    32. Re:How do u Hijack an OPEN network??? by 91degrees · · Score: 1

      How about just pointing out why the analogy is misleading?

    33. Re:How do u Hijack an OPEN network??? by lgw · · Score: 1

      Why should you get to assume you're invited, and impose the burden of securing a network on every non-technical person out there? Just ask the owner if you're invited, simple as that. If you really want to open your net to strangers, and hate the idea of actually meeting any of them, put up a proxy-based welcome page, as so many commercial free hotspots do.

      An unsecured hotspot is not an invitation, as you can't reasonably assume it's unsecured on purpose.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    34. Re:How do u Hijack an OPEN network??? by Anonymous Coward · · Score: 0

      Wow, what a perfect analogy! Now all we have to do is file a few legal briefs likening WiFi to flying cookies and we're set.

    35. Re:How do u Hijack an OPEN network??? by DavidTC · · Score: 1
      You do, indeed, have the legal right to change your neighbor's TV channel. You are free to send whatever signals in the infrared spectrum you want.

      You know, in a discussion filled with completely shitty analogies, it's amazing how many people come up with analogies that aren't even against the law.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    36. Re:How do u Hijack an OPEN network??? by DavidTC · · Score: 1
      I've never seen a webserver that's secured by default either. And if you have Windows XP Pro or Windows 98, you have a webserver built in.

      Yes, it doesn't start by default, but wireless routers don't magically fly into your house and hook them to your DSL, either.

      Ergo, by your logic, since people might start up a webserver without realizing it is open to all, accessing all webservers is illegal.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    37. Re:How do u Hijack an OPEN network??? by bwcbwc · · Score: 1

      More like there was a machine in your house throwing a cookie out the window onto the street every 5 seconds. Ignoring how dirty the cookies might be, is it OK for a passer-by to eat them? Or how about someone standing on the sidewalk catching them as they fly by?

      --
      We are the 198 proof..
  4. Jesus.. by Anonymous Coward · · Score: 0

    The drivers for most wireless cards just chuck you onto a wireless network the second you're in range - I haven't RTFA but I sure hope he was seriously abusing his neighbours connection, 'cause that is a serious punishment for a "oops I slipped" offence

    Also.. FP?

  5. honeypot... by torrents · · Score: 3, Interesting

    we should all open up public aps, log the connections and send law enforcement large lists of mac addresses of 1337 h4x0rs...
     
    that might cause them to reconsider how they enforce the law.

    --
    Get your torrents...
    1. Re:honeypot... by Rosco+P.+Coltrane · · Score: 1

      we should all open up public aps, log the connections and send law enforcement large lists of mac addresses of 1337 h4x0rs...

      Because as we all know, it's impossible to change MAC addresses in wireless cards, right? And also, because each and every citizen who purchases a wireless card is required to register his name and address in association with said wireless card...

      --
      "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    2. Re:honeypot... by Anonymous Coward · · Score: 0

      Stop, you're giving them ideas!

    3. Re:honeypot... by DavidTC · · Score: 1
      No, don't do that. Just get wireless router, turn on logging, put it in your car, and park it outside the police station.

      Remember, the FBI are the people to contact if the police refuse to act on reports of their own misbehavior. ;)

      --
      If corporations are people, aren't stockholders guilty of slavery?
  6. If windows connects automatically... by Mhtsos · · Score: 0, Redundant

    ...shouldn't they fine Microsoft? Just a thought.

  7. Justice by RAMMS+EIN · · Score: 4, Informative

    ``before Windows automagically connects to it and gets me arrested''

    Fortunately, most courts still discriminate between intentionally and accidentally doing something. If you're connecting to someone else's wireless network from your car (which, I assume, means that you don't have any wireless network facilities of your own around), it's pretty hard to maintain that you did it by accident.

    On the other hand, if my mom is found to use the neighbor's network to access the Internet, it will be pretty hard to maintain that she was doing so on purpose. All she knows is that computers can be used as glorified typewriters. GUIs are not for her, much less wireless network configurations.

    --
    Please correct me if I got my facts wrong.
    1. Re:Justice by syousef · · Score: 1

      Fortunately, most courts still discriminate between intentionally and accidentally doing something.

      Such faith grasshopper. You must be young!

      --
      These posts express my own personal views, not those of my employer
    2. Re:Justice by jridley · · Score: 1

      GUIs are not for her

      Wow, she does everything at the command line? What's she using as her "typewriter" program, emacs? Cool mom. I have this image of a couple of soccer moms in a "vi vs emacs" throwdown!

    3. Re:Justice by BobSutan · · Score: 0, Flamebait

      The 1970's called and they want their reasoning back. Intent hasn't really been considered in court (at least in the USA) for a few decades now. This may seem inflamatory, but the cold hard truth is that if a law was broken then you're gonna get screwed. In truth it really depends on if the DA/prosecutor will follow procedure, or use common sense to determine if they'll actually go after you, so YMMV.

      --
      "On a scale from 1 to 10, people are stupid"
    4. Re:Justice by a_n_d_e_r_s · · Score: 1

      Of course the courts looks at intent.

      You mean that a wannabe murderer who stabs a knife into someone are given the same sentence as a surgeon who does the same ?

      One with the intent to kill me and the other with the intent to save my life ?

      --
      Just saying it like it are.
    5. Re:Justice by jack_csk · · Score: 1

      Not to forget that some of those "moms" were secretaries who used wordperfect for DOS or such.

    6. Re:Justice by BobSutan · · Score: 1

      Either you misread my post, or you failed to understand its context. Allow me to explain in detail what I meant by intent. If you break a law, whether you meant to or not, many look at is as you broke the law so that's that. Do not pass go, do not collect $200, go directly to jail. From what I can gather, that's how the bulk of criminal cases are handled in the US these days. They don't care if you "oops, didn't realize I was speeding down that hill 20MPH over the speed limit", they'll still give you a ticked, unless the cop is willing to let you. Similarly the DA/prosecutor can do the same.

      In other words, the default is to throw the book at you. Only in rare cases will circumstance and individual intent be actually considered as to prosecute someone (not in determining their punishment, that's another thing entirely).

      --
      "On a scale from 1 to 10, people are stupid"
  8. Typical... by Anonymous Coward · · Score: 3, Insightful
    before Windows automagically connects to it and gets me arrested!


    Sigh. You know you're on Slashdot when anything bad, no matter how remote, gets blamed on Windows and/or Microsoft.
    1. Re:Typical... by The+Slashdotted · · Score: 1

      Timothy, the best and brightest among us, admits to using XP on his laptop.

      We should hope for that upfront honesty out of /.'s advertisers... like Roland Piquepaille.

    2. Re:Typical... by iandog · · Score: 1

      True, I recently started using wireless card on a linux laptop and didn't specify an ESSID when setting up the card and it chose the neighbors' ESSID and connected to his insecure network.

      Windows has it's flaws but it does take flak for stuff that isn't it's fault.

      --
      -Ian
    3. Re:Typical... by Anonymous Coward · · Score: 0

      Little tip for you. You don't have to read the whole front page/comments/linked article to know what site you are on. You can just look at the little box in your web browser that shows what is often refered to as the url. If it begins with "slashdot.org" it means you are on slashdot.

    4. Re:Typical... by noidentity · · Score: 1

      You know you're on Slashdot when anything bad, no matter how remote, gets blamed on Windows and/or Microsoft.

      Bullshit in this case. The comment would be just as relevant if it said "Mac OS X automatically connects to it" or "Linux automatically connects to it". The point was that it wasn't the user of the laptop specifically trying to access the network, it was the default OS behavior (behavior that is exactly what what one wants with WiFi); it wasn't bashing Windows in this case.

    5. Re:Typical... by Sancho · · Score: 1

      Don't presume that just because Linux acts that way, that somehow removes the guilt. That Windows connects to any open AP is Microsoft's fault; it's just a fault that happens to be shared by other operating systems.

  9. Unsecure network ? by Anonymous Coward · · Score: 0

    It seems that the person that was dumb enough to leave his wireless unsecure should also be at fault. He/she has left himself and the ISP open to abuse.

    Also the people/companies that leave in bugs & security holes are the ones at fault.

    1. Re:Unsecure network ? by badfish99 · · Score: 1, Insightful

      It's not the "dumb user" who left his wireless insecure who is at fault. He has just bought a product, plugged it in and expected it to work. Why not?

    2. Re:Unsecure network ? by Loonacy · · Score: 1

      So, he bought a product that allows computers to connect to his network wirelessly, and expects computers to not connect to his network wirelessly?

    3. Re:Unsecure network ? by aussie_a · · Score: 1

      So someone can walk through my backyard because I leave my fence's gate open?

    4. Re:Unsecure network ? by twoshortplanks · · Score: 2, Informative

      Er, yes. Under UK law at least. It's not trespass unless they refuse to leave once you've told them to or they've ignored the sign that says "keep out".

      --
      -- Sorry, I can't think of anything funny to say here.
    5. Re:Unsecure network ? by BrainInAJar · · Score: 2

      no, more like "The neigbour can accidently walk across the property line because i have no fence?"

    6. Re:Unsecure network ? by Anonymous Coward · · Score: 0

      It's not that same at all.

      You are broadcasting your internet connect across a local area, you should be responsible to make that secure.

      It's like broadcasting a radio signal to 20 houses, and by law only you should be able to listen to the radio. So it should be up to you as the broadcaster to limit that to just you. If someone else picks it up, why is it their issue ?

    7. Re:Unsecure network ? by aussie_a · · Score: 2

      Has anyone had any criminal charges brought against them for watching cable without subscribing to it (over here (at the very least) all of Sydney is flooded with Foxtel so any satellite can pick it up. However only those who have a subscription are allowed to)?

    8. Re:Unsecure network ? by rosewood · · Score: 1

      However that signal is encrypted, coded and or marked in such a way that says "you need to have our premission to watch this."

      Radio and TV signals over the air do not nor do un WEP/WPA/LEAP/ETC'd networks.

    9. Re:Unsecure network ? by in7ane · · Score: 1

      no, more like "The neigbour can accidently walk across the property line because i have no fence?"

      That is the case in the UK - you have the right to roam if there is no fence and/or sign (and sometimes even then) as long as you do not set up camp - your analogy is crap Right to Roam Bill

  10. I, for one, by PakProtector · · Score: 1, Interesting

    as someone who has been stealing internet access for more than a year now, really don't see a problem with doing it.

    The neighbour whose connection I'm leeching off of uses their connection for about ten to twenty minutes in the morning when they wake up and about an hour or so at night -- and never uses their connection to its full capacity.

    It's being wasted -- why not use it?

    --

    Edward@Tomato - /home/Edward/ man woman
    man: no entry for woman in the manual.
    "Qua!?"

    1. Re:I, for one, by Anonymous Coward · · Score: 0

      Because its theirs to waste and not yours? Heck - why not just ask nicely?

    2. Re:I, for one, by malkavian · · Score: 4, Insightful

      Hey, you use your car for maybe an hour each way to work. It's being wasted the rest of the day. Fair that I grab it without you knowing in between then?
      Of course not. Anything you decide to do becomes their problem. And, well, it's just rude! If it's one of the low cap broadband connections, perhaps you're going to push them over their limit? Or several people using it will do that?
      Still alright to cost them money?
      All it takes is a nip round to your neighbour's place and say "Look, you've got a wireless point there and broadband.. Mind if I chuck you a bit of cash each month and piggyback on top of the link, 'cos I can't really afford it?". Many would say to just hop on anyway if it's not used, without you paying anything. That's certainly the arrangement I have with my neighbours that can't afford the link (now have 3 people on mine).
      Nothing wrong with sharing a link, it's just good manners to ASK before taking things.

    3. Re:I, for one, by PakProtector · · Score: 1

      Due to where I live, and the company that feeds them broadband, I happen to know they don't have a cap.

      Also, it's not the same class of thing as them 'borrowing' my car, since I'm not using it. If they were to use my car, they would not only have to use up my gasoline, but they would put wear and tear on it. Now, all of this is a moot point, since my car is currently broken, but I hope you see my point. They have to spend electricity to use their router anyway. I'm not increasing their overhead (and if I am, by no meaningful ammount). If they use my car, they are, however, causing me a financial burden. However, if they wanted to carpool to somewhere I was going, say, the Mall, then that would be acceptable since the ammount of wear and tear and gas used with two people in my Jeep does not increase significantly over the ammount of wear and tear and gas used with one person in it.

      It's a matter of kind of thing, not of thing.

      Got it?

      --

      Edward@Tomato - /home/Edward/ man woman
      man: no entry for woman in the manual.
      "Qua!?"

    4. Re:I, for one, by PakProtector · · Score: 1

      One could argue, sanely and logically, that since the Access Point is not secured, and therefore, I am allowed to start a transaction with it that the access point approves (I can't force it to give me access to anything, it has to allow me access), that it is impossible for my action to be illegal.

      However, the courts, apparently, have let their brains take a holiday.

      I wonder if they're in Bath or Brighton this year.

      --

      Edward@Tomato - /home/Edward/ man woman
      man: no entry for woman in the manual.
      "Qua!?"

    5. Re:I, for one, by Anonymous Coward · · Score: 0

      Because you are a thieving git?

    6. Re:I, for one, by RicRoc · · Score: 2, Insightful

      If you have an agreement with your neighbour allowing you to use their network, then of course you can use it -- otherwise, it's theft, and you can get into trouble if you are caught. Whether or not they are using their network is irrelevant, it's theirs to use or not to use, not yours.

      Theft these days is so easy that it takes real moral strength just to not do it. I understand perfectly why some would choose not to exercise their moral muscles; it's just too hard.

      --
      Who?
    7. Re:I, for one, by PakProtector · · Score: 1

      Their wireless router is sent a request to allow a connection from my computer to itself. It accepts the request, and assigns me an IP address.

      It can be configured to deny my request very easily. The wireless router accepts my request -- it gives me access. I do not take access from it without its consent. Since they have their wireless router configured, through design or ignorance, to allow this, this implies their consent to it.

      --

      Edward@Tomato - /home/Edward/ man woman
      man: no entry for woman in the manual.
      "Qua!?"

    8. Re:I, for one, by mwvdlee · · Score: 4, Interesting

      Say you're using their connection to do some illegal stuff like black hat hacking or spam fraud and the IP gets traced back to your neighbors, then what?

      Or simpler; a forum which you both happen to visit decides to ban the IP for your bad behaviour or a poll-system allows only one vote per IP.

      The real problem is not using the bandwidth, it's the online identity theft through use of their IP.

      And how about a VPN? Is it okay to access that too through the WiFi connection?

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    9. Re:I, for one, by spagetti_code · · Score: 2, Interesting

      Well, if you come from NZ like I do, then you pay per megabyte.

      Unsecure WLANs can be *real* expensive.

    10. Re:I, for one, by Anonymous Coward · · Score: 0

      One could argue, sanely and logically that the car you left running / bag you left on the bus / credit card you dropped / etc etc is not secure, and therefore I am allowed to start a transaction with it.

    11. Re:I, for one, by Jamu · · Score: 1

      Ignorance doesn't imply consent: Consent would require their knowledge. They simply might not realise their wireless router can serve other people besides themselves. I agree that if all you're doing is looking for free bandwidth and then taking something that was offered (in whatever way) then you're not doing anything wrong. But if you've got some reason to think that the bandwidth is being offered in error, and you have some respect for the people you're taking it from (you might not), then I think you should accept the moral responsibility to either ask or to stop using it.

      --
      Who ordered that?
    12. Re:I, for one, by Council · · Score: 3, Interesting
      One could argue, sanely and logically, that since the Access Point is not secured, and therefore, I am allowed to start a transaction with it that the access point approves (I can't force it to give me access to anything, it has to allow me access), that it is impossible for my action to be illegal.

      However, the courts, apparently, have let their brains take a holiday.

      No. The fact that your door is unlocked doesn't mean that I can walk into your house. When on earth did "This object let me do it" become a standard of legality?!

      Since the cash register gave me money when I hit the button, that 7-11 burglarly couldn't possibly be illegal. Since the car left running at the curb allowed me to drive it, my car theft cannot be illegal.

      That standard of permission doesn't even apply to people! ("I wasn't violating the restraining order, her brother let me in!") Since when does it apply to inantimate objects?
      --
      xkcd.com - a webcomic of mathematics, love, and language.
    13. Re:I, for one, by hobbesmaster · · Score: 2, Interesting

      No. The fact that your door is unlocked doesn't mean that I can walk into your house. When on earth did "This object let me do it" become a standard of legality?!

      This is a bit different. For your analogy to be apt this exchange would have to happen with the door:
      you (or your wifi card): hi, can I connect to this network?
      door: yes.
      you: can I have an ip address?
      door: yes, 192.168.0.102, dns 192.168.0.1, gateway 192.168.0.1, you can have this for 30 days.

      THAT is what is happening technically. If the "wifi" were secured you would see:
      you: can I come in?
      door: no.
      Or no response at all, which would of course still indicate no. The problem of course becomes - which open wifi is "free" and which is not? My local airport has free wifi advertised and the SSID is the default cisco one so the default SSID argument is dead in the water.

    14. Re:I, for one, by Ruud+Althuizen · · Score: 0

      Why not use your neighnours car when it sits there all night? Because it is called joyriding, see the link?

      --
      **TODO** Steal someone elses sig.
    15. Re:I, for one, by PakProtector · · Score: 1

      I have never used a residential internet connection for illegal purposes. I do that from the public library.

      --

      Edward@Tomato - /home/Edward/ man woman
      man: no entry for woman in the manual.
      "Qua!?"

    16. Re:I, for one, by malkavian · · Score: 1

      Exactly the argument used by spammers.
      You see someone in difficulty (they obviously don't understand network security), so you take advantage.
      You don't speak up and help fix the problem, educate someone and make the world a slightly nicer place (fostering good relations with your neighbour), possibly getting exactly what you get now, with the explicit consent of your neighbour (and maybe the odd bit of cash for fixing it too!).

      I've noted elsewhere in my posts how I feel about sharing a connection (fine, as long as people ask).
      The real issue I have is about being polite and constructive vs. being selfish. You have the opportunity to do some good and help out.
      What you choose to do about it says more about you than I can, or will (because you haven't yet mentioned what your plans are with this, neighbour situations etc.).

      Yes, I do quite see your point with the car, and concede that point. Hopefully you also see mine.

    17. Re:I, for one, by Council · · Score: 1

      Yeah, I understand the analogy isn't perfect (I tried several, just to get clear). I'm just making the point that 'consent of a posession' was never any sort of legal standard.

      And I don't believe it should be. Objects do not have motivations, and it would get silly to treat them as such under the law. The law addresses the people using the systems and what they do with them. A person intentionally connects to an AP not belonging to him without permission from the owner. The law says this is wrong, the AP firmware's point of view notwithstanding.

      The claim that you can argue 'logically and sanely' argue otherwise based on the firmware's intent to subvert its owner's desire is absurd.

      --
      xkcd.com - a webcomic of mathematics, love, and language.
    18. Re:I, for one, by kryten_nl · · Score: 1

      I'm getting a bit tired of these comparissons. You simply can not compare using a neighbour's internet access to any tangiable item.

      Now let's look at how it works (TTBOMK, to the best of my knowledge):

      Option 1:
      Computer starts up wifi -> Computer broadcasts: Hey, is anyone outthere? -> Open Wifi router: Hello, I'm here. Would you like an ip and a default gateway? -> Computer: Yes please.

      If this is not permitted by the courts, it's time for the revolution.

      Option 2:
      Computer starts up wifi -> Computer broadcasts: Hey, is anyone outthere? -> Closed Wifi router: Hello, I'm here. I can give you an ip and a default gateway, if you know the secret handshake and have the decoder ring -> Computer: Sure do, it has to one of these n combinations. [/evil smurk]
      This should be punished to the fullest extend of the law (or a slap on the wrist).

      --
      For the perfect anti-Unix, write an OS that thinks it knows what you're doing better than you do and let it be wrong.
    19. Re:I, for one, by MSFanBoi · · Score: 1

      People like you are the same ones that think software piracy is OK. You may not see a problem with either, but I say you are no better than a petty crook.

    20. Re:I, for one, by swiftstream · · Score: 1
      I hardly think you can call using someone else's IP identity theft, seeing as most dialup (and some broadband) users don't have a static IP.

      The question of illegal activity is more interesting, because the article says that the person who owns the AP is responsible for anything that happens:

      Such a defence would hold little water as the person installing the network, be they a home user or a business, has ultimate responsibility for any criminal activity that takes place on that network, whether it be launching a hack attack or downloading illegal pornography.
      --
      Be a PATRIOT--because the only thing we have to fear is the lack thereof.
    21. Re:I, for one, by PakProtector · · Score: 1

      I do see your point, but let me restate my point in a better way: It's about stupidity.

      I struggle to find a good example in the 'Real World,' since situations in the world of technology are often so different from the 'Real World,' but it's something like the idea of an 'attractive nuisance.'

      I don't know if you're familiar with the concept, but it goes something like this: If I have a swimming pool, and some neighbourhood child gets in it and drowns, I'm responsible if I didn't take proper steps to stop them from being able to get into it (such as a fence with a locking gate), because it is an attractive nuisance.

      This person is using a piece of technology that they either know enough about to decide not to use WEP, or they do not know enough about it and just leave it wide open. Either way, if it's possible for me to get in the 'pool' and 'drown,' i.e., 'negotiate with the network for access successfully' and 'use the connection,' it's their fault, because they have not taken proper steps to stop me from doing it.

      The purpose of a door is to keep people and things outside. The purpose of a pool is to be swum in.

      Actually, a much better analogy would be a bouncer at a bar.

      It's a bouncer's job to allow certain people into the bar, and to stop others from getting in (underage persons.) However, the bouncer doesn't decide who gets in and who doesn't -- the manager of the club does. If the manager hires a bouncer, but doesn't tell them who to not let in, and just has them stand by the door, it's not the bouncer's fault if under age people get into the bar and drink -- it's the manager's fault for not telling the bouncer what their job is.

      In a similar way, if someone uses a Wireless Access Point, but doesn't set it up so that only they can use it, it's there fault if someone else does use it, since the WAP would then be doing exactly what it was supposed to be doing. The Ignorance of the Owner of the WAP, like the Ignorance of the Club Manager who hired the Bouncer, is not an excuse, or a reason to punish the Person Accessing the Network or the Under-age Person in the Bar.

      However, a reason to punish the Person Accessing the Network, or the Under-age Person at the Bar, is what they do while accessing the network, or while in the bar.

      Which would be, say, |o\/\/|\|1|\|6 boxen and drinking alcohol, respectively.

      --

      Edward@Tomato - /home/Edward/ man woman
      man: no entry for woman in the manual.
      "Qua!?"

    22. Re:I, for one, by Phemur · · Score: 1
      It's being wasted -- why not use it?

      Because it's not yours. It's like someone who has a car in his driveway, with the doors unlocked and the keys in the ignition: you can't take it out for a spin just because he never uses it between 1-5am. It's not your bandwidth, just like it's not your car.

      Phemur

    23. Re:I, for one, by Council · · Score: 1
      Computer starts up wifi -> Computer broadcasts: Hey, is anyone outthere? -> Open Wifi router: Hello, I'm here. Would you like an ip and a default gateway? -> Computer: Yes please.

      If this is not permitted by the courts, it's time for the revolution.

      If the owner doesn't want you doing that, it's certainly not permitted by the courts. There's no standard of consent in the law RE your router's firmware. I know there are problems with the analogy, but I believe my point is correct. See my cousin comment.

      For the record, I think it's your own damn responsibility to secure your access point. But the legal arguments in parent and GGP hold no legal water, and my analogy IS good in the important senses. The firmware is just doing what it's designed to -- that does not mean the owner consents to your use of his property. If that's PERMITTED by the courts, it's time for the revolution.
      --
      xkcd.com - a webcomic of mathematics, love, and language.
    24. Re:I, for one, by PakProtector · · Score: 1

      Actually, I don't think Piracy is 'Okay.' Every piece of Pirated Software I have I try to buy at the earliest possible convenience. Which means I use very little pirated software. And right now, the only pieces of Pirated Software I have that I have not bought a physical copy of are insanely priced (Several Thousands/Tens of Thousands of Dollars) development tools, for the reason that a College Student working Part-Time cannot afford to drop five to six times his yearly wages including student aid on something. If the prices were lowered, I would be able to buy alot more software, and companies would be able to sell alot more software.

      This is how Markets find their 'Happy Medium,' my friend.

      --

      Edward@Tomato - /home/Edward/ man woman
      man: no entry for woman in the manual.
      "Qua!?"

    25. Re:I, for one, by Council · · Score: 1

      At the end, by 'permitted' I mean 'mandated to be legal' or whatever. You get my point.

      --
      xkcd.com - a webcomic of mathematics, love, and language.
    26. Re:I, for one, by kryten_nl · · Score: 1

      Ok then, let's try this argument:
      My Wifi card is allowed by a governmental body (ie FCC). Now, can I broadcast whatever the h*ll I want within the allowed frequency range, at the allowed strength? If so, why is the router answering me and why can't I respond to it?

      --
      For the perfect anti-Unix, write an OS that thinks it knows what you're doing better than you do and let it be wrong.
    27. Re:I, for one, by kryten_nl · · Score: 1

      Yes :)

      --
      For the perfect anti-Unix, write an OS that thinks it knows what you're doing better than you do and let it be wrong.
    28. Re:I, for one, by mwvdlee · · Score: 1

      Dynamic IP's are logged, so the ISP can find out which client used which IP during which specific period of time, in many countries this is even a legal requirement.

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    29. Re:I, for one, by kryten_nl · · Score: 1

      This would allow hacking as well (Oops).... putting the thinking cap on again....

      --
      For the perfect anti-Unix, write an OS that thinks it knows what you're doing better than you do and let it be wrong.
    30. Re:I, for one, by jdduke · · Score: 1
      When on earth did "This object let me do it" become a standard of legality?!
      Ah, you're not a C++ programmer, are you?
    31. Re:I, for one, by MSFanBoi · · Score: 1

      Stop making excuses. If they are priced "insanely" then you don't get to use em. End of story. I want a twin turbo 911, but I think they are insanely priced, it does not mean if I see one on the dealers lot I can drive it around till I an afford to buy it. After all I'm not stealing the car, I'm only borrowing it...

    32. Re:I, for one, by Anonymous Coward · · Score: 0

      Um - because it is stealing. It's is a resource that belongs to someone else. Same for an orchard that is not harvested, you might pick the fruit thinking that it's otherwise wasted, but in reality, it's still stealing.

    33. Re:I, for one, by Anonymous Coward · · Score: 0

      Since you're nice enough to provide your website, I did a whois on it, and have forwarded your info to the Gainesville police for investigation. Have a nice day...

    34. Re:I, for one, by Peyna · · Score: 1

      How about those old garage door openers where you could open almost every door on the block? Since when I pushed the button on mine their door opened, does that mean I could have used my neighbor's garage? Weren't they consenting through their garage door because it responded to my signal in the affirmative?

      Your attempt at rationalizing your actions, because you enjoy leeching bandwidth fails miserably.

      If I leave a pie in an open window, it does not mean that pie is free to anyone that passes by, even though it may be very easily accessible.

      I have no problem with intentionally open networks; but access another person's network without overcoming an access control is just as wrong as doing it by overcoming an access control.

      The funny thing is that what a lot of people are suggesting here is a DMCA style approach. That the crime becomes worse because you overcame security measures. Copyright infringement is still a crime, whether or not you overcame a security measure. Should it only be a crime if you do overcome a security measure?

      Of course, I'm not sure we have a crminal penalty for accessing other people's networks here in the U.S., but if we did, I doubt it would apply only to marginally secure networks.

      --
      What?
    35. Re:I, for one, by GigsVT · · Score: 1

      If the owner doesn't want you doing that, it's certainly not permitted by the courts.

      If I put up a web server, can I have you charged with unauthorized use if you use it without getting permission?

      It's the same damn thing.

      --
      I've had enough abrasive sigs. Kittens are cute and fuzzy.
    36. Re:I, for one, by Anonymous Coward · · Score: 0
      About the swimming pool analogy, it works only when it's a child getting drown because they can't be held responsible for their own acts. But if a full grown 20 years old gets drown you can't blame it on the owner.
      You can't escape your own responsability for what you are doing.
      That's why your bar analogy is better, because you acknowledge that.
      Gaining unauthorised access to a computer is an offence covered by the Computer Misuse Act. In Straszkiewcz's case, he was prosecuted under the Communications Act and found guilty of dishonestly obtaining an electronic communications service.

      FTA the guy didn't do anything illegal with the connection that they can prove nor did he gained access to the computer, but the mere fact to o piggyback to access the web was indeed illegal. Emphasize is mine to show you the crucial part : dishonestly meant in this judgement "without asking the owner an authorization in real life". And the AP letting you in is not that, at least in the judge's mind.
      That's how it is too accomodate with tech savvy and non savvy people using wifi, period.

      Because the law forbid the squatter to connect and the owner is held responsible for what is done with his AP to avoid both of them to try to escap their responsability by blaming each other's.

      So if you are in UK or in a place with the same law, you have to ask the owner a permission in real life to be in legality (and as mere politeness you punk)
    37. Re:I, for one, by drsquare · · Score: 1

      Of course, as you've admitted you're stealing it, and you know it's illegal, you won't complain when you're arrested? Or will you whine and cry, posting to Slashdot complaining that you thought it was authorised...

      If you really, legitimately think it's OK, and are not just trolling, why not ask for permission?

      The wireless access point might send the digital equivalent of 'OK you can join', but that's not explicit permission from the owner, that's just the computer's automatic configuration. Without explicit permission, you're going to have a hard case in court proving that you weren't stealing it. A wireless access point being in its default configuration is not permission, no matter what technical arguments you come up with.

      Maybe you should just be a man and ask your neighbour for permission?

    38. Re:I, for one, by kryten_nl · · Score: 1

      No, it's not the same damn thing.

      The problem we're running into is: if a person yanks the router out of the cellophane it came in, plugs it in and goes on a six month vacation... can he make a REASONABLE assumption his network is secure?

      If there are no special laws in place, I think this is what it commes down to.
      For the record: I believe that the user can't make that assumption and that he's a dumb basterd.

      --
      For the perfect anti-Unix, write an OS that thinks it knows what you're doing better than you do and let it be wrong.
    39. Re:I, for one, by aaronl · · Score: 1

      Oh damn, using public radio is different from stealing a physical object. That's a news flash for everyone.

      I bet their VCR flashes 12:00 and they can't get their TV to play through their stereo, too. Perhaps they should learn to read their manuals. Instead they plug it in and then call tech support when it doesn't read their mind and do what they want. No manual ever opened.

      Good manners does not make it a good law, or a law at all. The problem is that the wireless kit is working as it is supposed to if you leave it open and I connect to it. If you don't want that behaviour, then set it up to not allow public associations.

      If you put your TV facing the street in the front yard, it might be rude for me to stand on the sidewalk and watch it. It would not be illegal, however, for me to do so. (It might be illegal for you to publicly display the program, but that's the not topic at hand.)

      It would be rude if I called you ignorant, but not illegal. Laws shouldn't, and mostly aren't, set by what is and is not rude.

    40. Re:I, for one, by PakProtector · · Score: 1

      I admit that it is against the law. I do not, however, see that there is anything wrong with it. I am a Rational Anarchist. I suggest you go read 'The Moon is a Harsh Mistress' by Heinlein.

      I do not need to ask for permission. If my neighbour did not want someone using theirn network, they would have it configured so. Right now I can see 6 networks (My antennae is highly damaged from the damn thing falling off the wall all the time), and two of them are using WEP. I know, however, that using a small parabolic reflector in unison with my antennae, there are around thirty networks within reach using that method, and of those thirty, all but a handful are protected.

      So obviously people know better.

      My neighbour, therefore, either does not care, or is too stupid to read the instructions that come with the device. If that is the case, then he has no one to blame but himself when I use a device in the manner in which it was meant to be used.

      As for being a man about it, and asking his permission, I really don't like to talk to him, seeing as how two to three times a week he and his friends throw huge parties outside, get insanely drunk, and he calls his girlfriend names that I wouldn't call my worst enemy until she is bawling like someone just shot her in the stomach.

      However, until I actually hear her being physically harmed, I will not do anything, as since she is an adult, she can decided to leave him. Since she doesn't, she must accept being treated like shit.

      However, if he hits her, I will be downstairs with this faster than you can say, "Justifiable Homicide, Officer."

      So, in re: being a man about it, I do not see a need to treat an inferior as an equal.

      --

      Edward@Tomato - /home/Edward/ man woman
      man: no entry for woman in the manual.
      "Qua!?"

    41. Re:I, for one, by asdfghjklqwertyuiop · · Score: 1

        it's just good manners to ASK before taking things.


      He did. His computer said to the AP, "Hi, can I connect?" and the AP said "Sure, hook right on up.".

    42. Re:I, for one, by Council · · Score: 1

      Interesting point. I'm not totally sure how that sort of distinction works. While I think about it, mod parent up.

      I think it has to do with the fact that web servers are created for the purpose of outside use, whereas wireless routers on the whole aren't, so we create a different set of rules, and give wireless users permission to restrict use more firmly.

      But it may also have to do with the fact that you're not just connecting to his wireless router, you're either snooping on his conversation (not sure how the laws govern that, but just because it's unencrypted doesn't mean you have the right to stand in his front yard and listen carefully), or you're using his connection to get to the internet (it's his cable connection that he paid for, at least . . . could these same laws kill spyware programs?)

      --
      xkcd.com - a webcomic of mathematics, love, and language.
    43. Re:I, for one, by Anonymous Coward · · Score: 0

      "If I leave a pie in an open window, it does not mean that pie is free to anyone that passes by, even though it may be very easily accessible." Of the 200 bad analogies presented so far, this is my favorite. I think this is from a 1950's Woody Woodpecker cartoon.

    44. Re:I, for one, by Peyna · · Score: 1

      While trying to locate the origin of the pie in the window story, I came across this amusing anecdote.

      About the oldest source I could find was A 1933 cartoon. Here is some evidence of the thief holding the pie.

      --
      What?
    45. Re:I, for one, by hackstraw · · Score: 1

      Hey, you use your car for maybe an hour each way to work. It's being wasted the rest of the day. Fair that I grab it without you knowing in between then?

      The difference from using someone's car and someone's internet connection:

      1) A car can get in an accident that is no fault of the driver, but the car could be totally inoperable. This will not happen on an internet connection.

      2) A car can get stolen or physically damaged because of how or where the person borrowing the car drives it. This does not happen to wifi waves.

      3) A car requires regular maintenance that is based on use (oil, gas, etc). WAPs use a fixed amount of electricity.

      4) A borrowed car cannot be used simultaneously by the owner and the borrower. WAPs can.

      5) A car usually has a specific insurance plan based on the predominant driver and their driving habits. Only a moron would pay insurance for a $50 WAP.

      These are just what I thought about off of the top of my head, I'm sure there are many more similar points.

      Nothing wrong with sharing a link, it's just good manners to ASK before taking things.

      True, but good manners are just a social convention, they have nothing to do with the law or what's right. Its "good manners" in the US to convince someone that the evil sprits have been neutralized by saying "Bless you!" when someone sneezes. Aside from it being good manners, its a completely stupid ritual.

    46. Re:I, for one, by hobbesmaster · · Score: 1

      So if you put up a door with a neon "Open" sign and someone walks in thinking its a business you see that as the door subverting your intent and the person that walks in liable?

    47. Re:I, for one, by Asic+Eng · · Score: 1
      He did not ask them. If he believed they'd be ok with it he probably would have asked and probably gotten permission.

      For some reason he chose not to ask. Why? I guess that's because he assumes they wouldn't agree. If you use something assuming that the owner doesn't want you to - well that's bad manners.

    48. Re:I, for one, by julesh · · Score: 1

      His computer said to the AP, "Hi, can I connect?" and the AP said "Sure, hook right on up.".

      1. I don't believe that's how unsecured wireless networks work: basically, you just start using them. You might want to use DHCP to get config information, but that's not the same thing at all.

      2. Who gave the AP permission to grant that permission?

    49. Re:I, for one, by hackstraw · · Score: 1

      Say you're using their connection to do some illegal stuff like black hat hacking or spam fraud and the IP gets traced back to your neighbors, then what?

      Yeah, it sucks that anti-social, immoral, and criminal people aren't more social, moral, and law abiding.

    50. Re:I, for one, by cl0secall · · Score: 1

      This is what I'm talking about. The individuals who have these unsecured APs are creating an attractive nuisance. It would be poetic justice in my mind if someone were to wardrive, identify open APs, and then have them all served with takedown notices, or better yet, summons. Neighbors who blast their stereos, have their TVs on loudly or in other ways create a nuisance are normally either told to cut it out by the police, or fined. Bottom line, this is primarily a TRESPASS, not a THEFT.

      For all those who vouch for the position that Joe Sixpack should be ENTITLED to simply hook up his equipment and turn it on with no understanding of how it works, I would note that in many cases, specialized equipment (especially radio equipment) requires training and licensing from a governmental body. "Just because you CAN do it, doesn't mean that you SHOULD." Pandering to or subsidizing laziness and/or ignorance is irresponsible and dangerous to society at large, IMO. Don't tell me that anyone has the right to be ignorant either, compulsory school laws state otherwise.

      The fact is that there is no good analogy for a situation like this. People need to take a different approach to understanding the situation and formulating an assessment of how to deal with the problem. I agree that in THIS CASE SPECIFICALLY, the individual accessing the AP was in the wrong. Needs to be prosecuted? YES. But that does NOT mean that there needs to be BLANKET PROTECTION for ignorant operators. Normally, people who create a situation which invites crime are looked down upon. This should be no different.

      --
      Model 551, Chambered in 6mm
    51. Re:I, for one, by asdfghjklqwertyuiop · · Score: 1

        He did not ask them. If he believed they'd be ok with it he probably would have asked and probably gotten permission.


      To borrow an analogy from somewhere else in this topic:

      Do you call the cell phone company on a pay phone and ask their explicit permission every time you're in the vicinity of a new cell tower and would like to make a cell call? Or do you assume that you have their permission because their equipment is using every available technical means to advertise its availability to you, just as this AP was?


      For some reason he chose not to ask. Why?


      Perhaps because he had no way of knowing who the owners were or where they were?
    52. Re:I, for one, by asdfghjklqwertyuiop · · Score: 1


      His computer said to the AP, "Hi, can I connect?" and the AP said "Sure, hook right on up.".

      1. I don't believe that's how unsecured wireless networks work: basically, you just start using them. You might want to use DHCP to get config information, but that's not the same thing at all.


      That is how they work. Before the client can do anything (that involves the AP anyway) a process known in the 802.11 spec as "association" must happen which involves the cooperation of the AP. And before that, the client must find out about the AP by receiving a beacon frame. The AP usually sends out beacon frames every so often, or that information can be actively requested by the client through a Probe Request and Probe Response.


      2. Who gave the AP permission to grant that permission?


      The owner - the only person with legitimate authority to control that permission. I suppose an AP could be hacked by someone to become open, but this guy didn't do that. The open AP was put there in the open state by the owner.

    53. Re:I, for one, by julesh · · Score: 1

      2. Who gave the AP permission to grant that permission?

      The owner - the only person with legitimate authority to control that permission. I suppose an AP could be hacked by someone to become open, but this guy didn't do that. The open AP was put there in the open state by the owner.


      Hmmm. When I first installed my AP, it was open.; that was the way the manufacturer supplied it. I had to secure it afterwards. But I certainly never gave it permission to let just anyone come along and use my network. It was entirely automatic -- and permission cannot be granted entirely automatically. There must be some process of informing a person that they are granting permission, and then some action that confirms that they want to do so. This is the simple basic fact of what consent is.

    54. Re:I, for one, by Uriel · · Score: 1

      Web servers can be used for purely private purposes. Everyone agrees that if the site is password-protected, that's a sign of it being private.

      But no web server that I'm familiar with is passworded by default...still, people can mean for a web site to be only for use by their Rotary Club. Perhaps the site contains star charts, almanac data and a VRML replica of the vault of Christian Rosycross. Things that might interest other people.

      So they just don't tell anyone about it. But one of the authorized users links to it from their home page, so it gets into the search engines.

      Now there's a website out there, you can find it in a search for something else...and there's nothing on the site saying either that it's for public use or that it's private...so should you be arrested for using it?

      I say this as a security-conscious sysadmin who has to protect a large wireless network.

    55. Re:I, for one, by not-enough-info · · Score: 1
      When on earth did "This object let me do it" become a standard of legality?!
      Oh, are we playing "let's cite only examples that make my point"? Let me try! When was the last time you saw a ticket machine at the rail station have a sign granting you permission to put money in to receive a ticket to ride the train? (random asinine emphasis added for extra points) How on earth can anyone possibly think it is okay to use this machine when there is no posted permission?! And that pay phone? And that Automatic External Defibrillator? Criminals! Get away from those publicly accessible non-permission-granting machines!

      Oh, wait. You said the WAP automatically granted you permission? Nevermind.
      --
      ---k--
      </stupid>
    56. Re:I, for one, by asdfghjklqwertyuiop · · Score: 1

      Hmmm. When I first installed my AP, it was open.; that was the way the manufacturer supplied it. I had to secure it afterwards. But I certainly never gave it permission to let just anyone come along and use my network. It was entirely automatic -- and permission cannot be granted entirely automatically. There must be some process of informing a person that they are granting permission, and then some action that confirms that they want to do so. This is the simple basic fact of what consent is.


      The owner of the AP is responbile for knowing what the AP is doing. The AP comes with documentation telling you how to set up the way you really intend to. If due to your ignorance/incompetence you completely miscommunicate your intentions and inadvertently advertise that permission to connect is granted to some other person, that's not other person's fault. As far as the other person is concerned, it doesn't really matter what was in your mind if a device you are fully responsible for is going around telling everyone that it is OK to connect.

      Here's a scenario which is based on a true story of my own: I walk up to a store on the street in the middle of the afternoon. The door is unlocked, I walk inside and start looking around. Then, the alarm goes off. The shop's new employee left out the back door, set the alarm, and forgot to lock the front door. Should I be booked for attempted burglarly or something? The shop keeper intended for the store to be closed, but they made a mistake and left the store in such a state that says "We're open".

    57. Re:I, for one, by Locke2005 · · Score: 1

      All it takes is a nip round to your neighbour's placeUh, which neighbor? There are half a dozen wireless accesspoints visible from my house (most using WEP). How am I supposed to know which house the unencrypted signal is coming from? For a short while I did connect to one of my neighbors' access points; to this day I have no idea which neighbor it was!

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
    58. Re:I, for one, by julesh · · Score: 1

      The owner of the AP is responbile for knowing what the AP is doing. The AP comes with documentation telling you how to set up the way you really intend to. If due to your ignorance/incompetence you completely miscommunicate your intentions and inadvertently advertise that permission to connect is granted to some other person, that's not other person's fault. As far as the other person is concerned, it doesn't really matter what was in your mind if a device you are fully responsible for is going around telling everyone that it is OK to connect.

      Let me clarify my point. The device does this by default. There is no way to stop it doing so except by setting it up, then logging in and changing the settings to stop it from doing so. As I have no choice but to run an open network for the time it takes to do so, the fact that I have done so cannot be considered as me having given any random passer-by permission to do so.

      By extension, the fact that not all open networks are in a position to authoritatively grant permission to connect means that we must accept that this setting does not ever grant permission BY ITSELF. Otherwise, we would be left in the position that depending on some unknown context the fact that a network allows you to connect either may or may not be permission. In this situation, we cannot make any assumptions about the owners intent and therefore (on the basis that connecting to a network without permission is a substantially worse problem than us being denied access to a network that we should have access to merely because we do not know whether or not we should) we should not use the network.

      An entirely automatic function of a network cannot be taken as indicative of its owner's intentions. A person must act to grant permission for another to use some of their resources, inaction is not enough. The consequences otherwise lead to a very unpleasant world, where you always have to watch what you're doing, because if you fail to tell somebody not to use your stuff, they'll take that as permission to use it. I don't want to live in that world... do you?

      Here's a scenario which is based on a true story of my own: I walk up to a store on the street in the middle of the afternoon. The door is unlocked, I walk inside and start looking around. Then, the alarm goes off. The shop's new employee left out the back door, set the alarm, and forgot to lock the front door. Should I be booked for attempted burglarly or something? The shop keeper intended for the store to be closed, but they made a mistake and left the store in such a state that says "We're open".

      There is a substantial difference between this analogy and the actual practice of using somebody else's unsecured network. For an incredibly substantial majority of times, when a shop advertises that it is open, this is because they want people to come in. However, I'm pretty sure that a substantial majority of open wireless networks are open not because their owners want other people to use them, but rather they do so because they are too ignorant or lazy to secure them properly. In the case of a shop, we can safely assume that the owner wants us to enter. In the case of a wireless network, we can't, because that isn't what most people operating them want.

    59. Re:I, for one, by Anonymous Coward · · Score: 0

      Not trying to be flame bait, but...

      Actually, if you do leave your door unlocked someone can just walk in. My room mate in college had someone steal cds out of his car but because the door was unlocked the police told us it was not theft (at that point it is he said/she said).

      That is why there is a charge "breaking and entering" and there is no charge for "entering". Now this is actually illegal if you post a sign that states: "No Trespassing". That actually makes the difference between a court case and the usual /. BS.

      Because the local coffee shop/panera bread/what have you doesn't have signs that say "you can use our network", but let you use it, it really amounts to the same thing. The law does not cover "intent to protect". Because speculation is the same on both sides of the fence: "He thought he left his door unlocked so everyone could use his pool." as much as "I didn't want other people to use my pool, but I didn't know how to lock the door." Ignorance is no excuse for breaking the law, but it really goes both ways. This really goes hand-in-hand with arguments for municipal wireless. In parts of NYC, for example, people have purposefully shared their connections in private residences for others to use (I know someone who does this). So is it only illegal if someone prosecutes? Then how would I know?

      What is disturbing is that the accused are not fighting the cases (in both the US and UK). This should really go to the Supreme Court (with the Florida case). This is tantamount to a violation of rights. What should happen is users should follow the manual, but apparently "Caveat Emptor" is no longer a concern of the masses.

      -- ezweave (at work)

    60. Re:I, for one, by asdfghjklqwertyuiop · · Score: 1

      Let me clarify my point. The device does this by default. There is no way to stop it doing so except by setting it up, then logging in and changing the settings to stop it from doing so. As I have no choice but to run an open network for the time it takes to do so, the fact that I have done so cannot be considered as me having given any random passer-by permission to do so.

      By extension...........


      None of this changes the fact that it is the responsibility of the owner to know what their device is doing at all times and how to securely set it up. If the device cannot be set up and used securely then it is the owners responsbility to not use that device and find one that can be. When buying an AP, it is the responsbility of the purchaser to be aware that it actively advertises its presence and usability to everyone within range on publicly usable frequencies.

      If the owner chooses to remain ignorant (for at least three months in this case) then the ignorant owner must live with the consequences, not the random person who completely follows standard protocols, uses public frequencies, and does not in any way circumvent any access control mechanisms.


      An entirely automatic function of a network cannot be taken as indicative of its owner's intentions .A person must act to grant permission for another to use some of their resources, inaction is not enough.


      There's no such thing as an entirely automatic function of a piece of network equipment. All such function is triggered by a human in some way (right back up to the programmer who wrote the firmware). Knowing that, it is possible to understand the behavior of such a device and control it accordingly (or hire someone who can). There is no inaction. The action taken was to set up a device which advertises its openness by default. The owner's ignorance of that fact is unrelated.


      In the case of a shop, we can safely assume that the owner wants us to enter. In the case of a wireless network, we can't, because that isn't what most people operating them want.


      It doesn't matter if the majority of people operating open wireless networks want them open or not. They *are* open, and they are the responsbility of the owner.The user simply receives an advertisement for service on a public frequency and accepts the offer. Wether they're open out of ignorance or intent is not the concern of a user. As long as they did not voilate any access control measures then they did their part. Anything else is ignorance on the part of the owner and that is their own responsibility.

    61. Re:I, for one, by toddestan · · Score: 1

      What if he has one of those FM modulators on his iPod, and the signal goes into my kitchen so I decide to tune in. Is that illegal? He created the signal, but is it his once it reaches my kitchen?

    62. Re:I, for one, by Sancho · · Score: 1

      I don't have to call the cell phone tower. The chip in my phone asks the tower if it's ok for me to use, the tower responds. If I stop payment to my cell company, my chip will ask the tower and be rejected.

      That's the key. There's an agreement set up ahead of time with the company that I may use any tower that the chip they provide (the SIM card, I believe it's called) says I can access.

      With a wireless AP, it's different. There has been no agreement with anyone.

    63. Re:I, for one, by asdfghjklqwertyuiop · · Score: 1


      Ok, you have a point with the prearranged agreement. Bad analogy on my part. That is different from an open AP.

      Howver, the point was that you would consider an "access granted" message from a machine acceptable. I don't see how the lack of a prearranged agreement with an AP owner means an access granted message from their equipment is not acceptable

    64. Re:I, for one, by NeutronCowboy · · Score: 1

      That standard of permission doesn't even apply to people! ("I wasn't violating the restraining order, her brother let me in!") Since when does it apply to inantimate objects? Because it's not just any inanimate object - it's a router that is giving specific responses to specific requests. Since the owner of the router controls the router's responses, it is the owner of the router who is giving permission - or denying it. Stop bringing ridiculous analogies into this that have nothing to do with the situation.

      --
      Those who can, do. Those who can't, sue.
    65. Re:I, for one, by nzhavok · · Score: 1

      Sorry guys, move out of the sticks.

      --

      He who defends everything, defends nothing. -- Fredrick The Great
    66. Re:I, for one, by Council · · Score: 1

      I'm sorry. I honestly don't know quite what to make of this problem, and I'm doing my best to bring in appropriate analogies. The 'brother' example is an example of an entity giving specific responses to specific requests that may not have been arranged properly in the first place.

      I guess what concerns me is that we have to acknowledge the fact that most routers ship with no password, and that most people -- however much we'd like them to -- haven't figured out that they need to turn on security. Now, I agree that what we need to do is turn on security, but in the present absence of that, it doesn't seem ridiculous to me to look at it the way I am -- you are not physically barred from doing this, but the owner may not want you to. (please don't jump on the 'barred' vs. 'permitted' thing. routers ship with the default ability to ALLOW you to connect, and you have to take action to stop them. don't anthropomorphize them.)

      So this leaves us with the problem of "the owner may not want us to" being what is keeping us from using her piece of hardware. Because how do we know she doesn't want us to? I honestly do not know. I'm trying to look at (ridiculous) analogous situations to work that out. Generally, you have needed a clear statement of permission to use something belonging to someone. You are trying to say that the router being open IS a clear statement of permission, but I don't see that as true! They ship like that by default, and like it or not, people don't know to enable it. Taking advantage of that ignorance and trust to try to justify intruding on their privacy seems wrong to me, and I'm trying to explain that as best I can.

      --
      xkcd.com - a webcomic of mathematics, love, and language.
    67. Re:I, for one, by NeutronCowboy · · Score: 1
      Well, there are plenty of things that are allowed with direct permission. Sitting on the grass in Central Park. Walking into a store and browsing the merchandise. Going to a town hall meeting and asking questions. Using a public pay phone. Note how all these things are allowed because of one thing: they are "public" and open. Both of which come with the understanding that permission for use is implicit, and doesn't have to be explicit. Now does that mean that you can do anything you want? No. You can't build a house in Central Park without prior approval. You can't walk out of the store without paying for the items you took. You can't take a crowbar to the phone to get to the money. Again, access is permitted - use is regulated.

      And that's how I see open Wifi spots. If it's open, it's open. I won't go snoop around their probably unsecured computer. I won't download my 800 MB Outlook archive file over their connection. I'll be nice. But I'll use it.

      I agree that a lot of people don't know how to configure their router and that this might not be their intention. I can't agree though that we therefore need to assume that all open spots should be default be assumed to be closed. What if I want to have an open spot? By your logic, it would be impossible for me to provide a free access spot without having people contact me and get stuff in writing.

      So what are the solutions for people who are ignorant? The same solution as always - get educated. Or don't use it. Should you be allowed to drive a car if you don't know how to use it? No. Kids are taught how to use electricity properly, how to operate microwave ovens, etc. Why can't adults be asked to learn how to properly operate their tools? I see this as a problem of education, not permission.

      --
      Those who can, do. Those who can't, sue.
    68. Re:I, for one, by Alsee · · Score: 1

      When I first bought a vending machine, the exit slot was open with no lock; that was the way the manufacturer supplied it. I had to secure it afterwards. But I certainly never gave it permission to let just anyone come along and steal my cans of soda. It was entirely automatic -- and permission cannot be granted entirely automatically. There must be some process of informing a person that they are granting permission, and then some action that confirms that they want to do so. This is the simple basic fact of what consent is. Anyone who takes a can of soda out of the exit slot of my vending machine is stealling my property. A broadcast automated advertizement to take cans of soda cannot constitute authorisation.

      Oh, and my the way dropping money into the vending machine doesn't really change anything. The fact that you slip $20,000 into my mailbox does not change the fact that taking my car is theft, does not grant you authorisation to take my car.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    69. Re:I, for one, by Anonymous Coward · · Score: 0

      . Generally, you have needed a clear statement of permission to use something belonging to someone. You are trying to say that the router being open IS a clear statement of permission, but I don't see that as true! They ship like that by default, and like it or not, people don't know to enable it. Taking advantage of that ignorance and trust to try to justify intruding on their privacy seems wrong to me, and I'm trying to explain that as best I can.

      There's a maxim in law that says "ignorance of the law is not a defense". I think this maxim should apply in a broader context. At some point, you have to be assumed to know what your doing; incompetence should not be a defense under the law.

      If you post a sign in your store window saying: "Free cofee and donuts today! Walk right in and have a donut on us, no strings attached!", and I walk into your store, and start drinking your coffee, and I eat one of your donuts, should I be held guilty of breaking and entering, and of theft and/or destruction of property?

      Or should you be forced to learn to read English before you post signs in your window without knowing what they mean?
      --
      AC

    70. Re:I, for one, by Asic+Eng · · Score: 1
      Perhaps because he had no way of knowing who the owners were or where they were?

      If you check further up this thread - he knows who the owners are. He just decided not to ask. He assumes it's not ok with them. Ever heard of a cell phone tower which the owners don't want you to connect to? If not the analogy is not so good.

    71. Re:I, for one, by asdfghjklqwertyuiop · · Score: 1

      If you check further up this thread - he knows who the owners are. He just decided not to ask. He assumes it's not ok with them.


      He assumes its not OK with them, or that it is? Their AP was telling him that it was OK to connect.


      Ever heard of a cell phone tower which the owners don't want you to connect to?


      Sure. All of... Cingular's towers. Mainly because I'm not their customer and my provider has no roaming agreement with them. But more importantly (for this discussion), their towers probably won't allow me to connect at a technical level. My phone has to identify me to the towers so they know who that I'm a customer and who to bill the call to. I could steal someone else's phone's identity and that would be wrong. But this wifi "hacker" didn't do that.

    72. Re:I, for one, by Asic+Eng · · Score: 1
      He assumes its not OK with them, or that it is?

      He calls it stealing. He assumes it's not ok with them.

      Their AP was telling him that it was OK to connect.

      It's ok with their access point, but that's not communication with a person. Most people don't know how to configure APs properly, he assumes that's the case with his neighbours.

      If lots of (deliberately) open APs exist, and you connect to one of them assuming that it's ok, nobody can blame you for that. However deliberately connecting to an AP which you assume is only open due to misconfiguriation sucks.

  11. So what is the harm? by luckynoone · · Score: 1
    So what is the harm of this guy using his neighbors wireless?

    "reported to police by a neighbour concerned that he was acting suspiciously"

    sounds like the guy is not the type to pay for internet anyways if he is willing to go to all that trouble.

    1. Re:So what is the harm? by badfish99 · · Score: 1
      He came to the attention of the police, and they discovered that he could be prosecuted for breaking a law. That's one more point in their favour in the crime statistics.

      Why would they care whether he was doing any harm or not?

    2. Re:So what is the harm? by Dunbal · · Score: 1

      He came to the attention of the police, and they discovered that he could be prosecuted for breaking a law.

            At least they didn't shoot him dead that time...

      --
      Seven puppies were harmed during the making of this post.
    3. Re:So what is the harm? by ThePilgrim · · Score: 1

      No. The police only shoot inocent people. He was oviously guilty.

      --
      Wouldn't it be nice if schools got all the money they wanted and the army had to hold jumble sales for guns
  12. Accident? by malkavian · · Score: 4, Informative

    Not really. Despite the BBC hedging it's bets, and putting the conspiracy angle on it a touch, The Register has a clearer account of what happened.
    Basically the bloke was engaged in Wardriving, and deliberately hooked into the wireless network.
    It'll certainly be murky waters when windows automatically selects the average joe's router instead of their own, but with many routers at least asking people to put better security on wireless points, this should start becoming less frequent.
    From all accounts, he was caught tapping away on his laptop, moved away when police watched, then came right back to the same point again. At which point he was investigated as he looked a little 'suspicious'.
    Wardrivers remember! Just because you're invisible in the network, it doesn't make you invisible to the local copper walking on the street, or the local neighbourhood watch!

    1. Re:Accident? by hutchike · · Score: 1

      I was in an NHS hospital (UK) for 2 months. Given the choice of hijacking their open wireless network to read /. or paying 10p per minute for a "Patient Line" dial-up connection, I chose the former.

      Unfortunately I wasn't so invisible and they found my laptop within a day or two. I say, if it's there and it's open then why not use it? We're talking about data here - not property.

      Any tips on how I can better hide my ID on the net?

      --
      Zen tips: Pay attention. Don't take it personally. Believe nothing.
    2. Re:Accident? by Anonymous Coward · · Score: 1, Insightful

      Does it matter? If it behaves like a public hotspot, it is one. The access point owner communicates on public frequencies, I do the same. I have no control over his access point. Whether my network card is allowed to associate with his access point, whether my computer gets an IP address, whether my browser can connect to the internet through his access point, that's all under HIS control, not mine.

      He's not in his home, he's on the public airwaves. There is an established protocol for open access points and his access point behaves exactly according to that protocol. It's his responsibility to clearly state his intentions in the public space if he doesn't want to be misunderstood. You learn how to safely use a car before you use it on public roads. Why do people think it's ok to use the ISM bands without so much as a thought about what it is they're doing?

    3. Re:Accident? by Tx · · Score: 1

      WTF... the BBC is being sensationalist, and The Register is being factual?!? I'm going back to bed.

      --
      Oh no... it's the future.
    4. Re:Accident? by malkavian · · Score: 3, Informative

      Actually, considering I work in an NHS hospital, there are very good reason why you don't use their open wireless, and you tell 'em FAST it's there.
      Patient records. If you're a nice guy, you won't go looking around. Not everyone is that nice. Ever thought what happens when you delete someone's allergy records when they head to surgery?
      We have wireless points here, and regularly go sniffing for open access points run by departments. When we find them, we chastise the owners, and then secure the points.
      Or, perhaps, you're happy sharing your medical history with the world. If so, that's fine. Not everybody is.
      Incidentally, I'm very suspicious of your claim to read /. from the internal network via an open wireless access point. Simply because the proxies need authentication (it's part of NHSNet's rules). If you don't have the domain account configured for internet access.. Then you're internal only. And you really shouldn't be there.

    5. Re:Accident? by HiroProtagonist · · Score: 4, Insightful

      And why isn't it secured again?

      If a hospital network isn't secured, IMO it is GROSS negligence on the part of the IT staff of the hospital.

      --
      --Remove chicken to e-mail
    6. Re:Accident? by malkavian · · Score: 1

      Amen to that. Which is why we keep a close eye on what gets put in (departments are known to cut around IT with installing things they believe they need). I was just wondering which hospital this open port was discovered at.

    7. Re:Accident? by rikkards · · Score: 1

      Any tips on how I can better hide my ID on the net?
      I believe you are asking how to hide yourself better on a network and not on THE 'net.

      The answer would be no without mimicking an existing MAC address which could potentially cause DOS for either you or the other MAC.

      There are tools out there that can detect and list new network cards connecting to a wireless network as well as force disassociation of said network cards as well as rogue access points

      Mind you a hospital using Wireless without locking it down with some form of VPN is silly if not plain stupid.

    8. Re:Accident? by malkavian · · Score: 2, Interesting

      Yes, it matters.
      In much the same way you're not expected to be a plumber to put in your own washing machine, or be a car mechanic able to build your own car before you get in one.
      The point I was making is that it's rude, inconsiderate and very selfish to hijack the bandwidth. Just because someone else hasn't spent years learning all about computers, and just wants to plug their laptop into their network without understanding all the underlying principles of wireless transmission and security doesn't mean you have to leech, steal and generally take advantage of them.
      The NICE thing to do is quitely tell them they have a problem (much like you'd quitely tell someone they had their fly undone in public), and actually educate them.
      The SELFISH thing to do is take advantage and say "It's not my fault they don't have a clue". Because it IS your fault by not informing them.

      I'd hazard a guess that in every day life, you break a goodly many outdated and ignored laws and byelaws. Would you like it if the police suddenly decided to pick you up on them, and say that it was no excuse you weren't aware of 50 heavy tomes of law, and that it was your duty to know it?
      Why do people think it's ok to ignore these laws without so much as a thought to what they're doing?

      Could it be that, to make sure the world works properly, people need to concentrate on other things? And not everyone has the time to spend to learn how wireless works (or that it's even insecure)?
      Nah. Perish the thought. Everyone's a network engineer, right? Just like we're all as good at diagnosing ourselves as doctors are?
      And know the Law as well as a Lawyer?

    9. Re:Accident? by t_allardyce · · Score: 1

      The NHS does its best to ensure that gross negligence is maintained at a high level and that the use of initiative is kept to a minimum. If you find a secured network at an NHS hospital you should immediately contact the management to alert them to this misuse of staff training.

      --
      This comment does not represent the views or opinions of the user.
    10. Re:Accident? by Kjella · · Score: 1

      Well, I can't speak for your country, but here we have typically green and red zone. Green zone is internal network, bookkeeping, hour scheduling, internet access, e-mail and so on. Basicly your normal internal corporate network. Red zone is all sensitive data like patient records. If anyone can get into red zone simply by an unauthorized wifi point, there would be hell to pay around here. At the very least he should get nothing done except bang his head on a VPN firewall.

      Kjella

      --
      Live today, because you never know what tomorrow brings
    11. Re:Accident? by Anonymous Coward · · Score: 0

      I don't even know that they HAVE a problem. For all i know, they want their access point to be open. There's no way to tell. That's the freakin point. Besides, suppose I want to tell them that they have an open access point. Apparently I am not allowed to connect to their network to find out who they are, I can't tell where the signal is coming from, the SSID is "WLAN". How would I know whom to contact?

      The AP is sold as a device which allows computers to wirelessly connect to a network. It doesn't take a network engineer to raise the question which computers can connect.

      I don't expect anyone to build an access point from a couple of chips, circuit board and solder. I expect them to use their access port responsibly. Encryption settings are not just for engineers. The web interface is designed to be used by the owner of the device and the manual describes how to access it. If ordinary people were not supposed to use encryption, then these settings would only be accessible through solder pads inside the enclosure or after entering a manufacturer password.

      People who use the ISM band have a responsibility towards society because they're using a scarce shared resource. If you outlaw use of an open access point to protect negligent consumers, then you also outlaw use of deliberately open access points. You're in a public space. Don't behave like the money you paid for the access point absolves you of cooperating with other users of the public resource.

      Let me state this as clearly as I can: I don't want to connect to your access point if you don't want me on it. All I'm asking is that you give me a chance to know a public hotspot from a private access point.

    12. Re:Accident? by LnxAddct · · Score: 1

      You've got far bigger network security issues if I can just start randomly accessing files simply because I'm on your network, regardless of how I got on it.
      Regards,
      Steve

    13. Re:Accident? by jabuzz · · Score: 1

      I will just mention the Freedom of Information Act here. Without anyone realizing it *ANY* record held by the NHS is covered. There is no such thing as private medical records in the U.K. anymore unless you are exclusively using private medicine.

    14. Re:Accident? by cmdr_tofu · · Score: 1

      I don't see why the guys `suspicious' behavior should incriminate him. If I eat a bean burrito in my car, and every time a cop drives by I hide the burrito underneath my seat and deny what I was doing, that does not make eating a burrito criminal.

      What this ends up doing is setting a precedent of illegalizing free wireless access points. When I lived in an apartment, we strung coaxial cable around back so that my neighbors could share my dialup internet connection. They chipped in $ for the 24 hour connection.

      I wonder if the real reason for this criminalization of accessing open networks is because ISPs want to make more money. It is one thing if a user cracks a WEP key or tried to gain illegitimate access to a network, but we are talking about an open network.

      Similarly, if I set up a free burrito stand, and you come and take a burrito without paying, I should not have the right to prosecute!

    15. Re:Accident? by BVis · · Score: 1
      If a hospital network isn't secured, IMO it is GROSS negligence on the part of the IT staff of the hospital.
      This makes a few assumptions:
      • That there is an IT staff at said hospital,
      • That said IT staff, if it exists, has collective brainpower greater than that of a pile of wet coffee grounds,
      • That some impervious-to-logic bean-counter hasn't decided that securing the network is too expensive,
      • That some overpaid quack M.D. hasn't complained to the administration that the network doesn't "just work",
      • That said administration gives a damn about negligence.
      In my experience, it's a small fucking miracle that the hospital even HAS a wireless network. Maybe it's different in the UK, but here in the States most hospitals go to irrational lengths to avoid spending money on any technology newer than 10 years old. Unless they can (over)bill the HMOs for it, that is, in which case it's laptops for everyone!... except for the people who do actual work, like the nursing staff.

      Someone want to tell me whose bright idea it was to have for-profit hospitals? Did they really think that having making money be the primary goal of a health care institution was a good idea? Free clue folks: The profits aren't going to come from patients choosing to use your services because you make a better mousetrap, they're going to come from spending as little as possible on said mousetrap. The vast majority of patients in the US health care system have little or no choice in who provides their health care, especially at the hospital level. They go where the HMO tells them to (if they don't want to go bankrupt paying for it, that is.) As a result, the hospitals make the choice to cut costs by any means necessary. As long as the level of care remains at a level that prevents malpractice suit settlements from eating into the bottom line, that's good enough for the administration. Meanwhile, the people who give a damn about the patients (again, the nursing staff) see their staffing levels drop to dangerous levels and watch as patients get denied care by some lawyer who couldn't diagnose a cold if it walked up and sneezed on them.

      I'm really glad I didn't go to med school.
      --
      Never underestimate the power of stupid people in large groups.
    16. Re:Accident? by aaronl · · Score: 1

      No, just no. The only fault for them not knowing is their own. They were being irresponsible, and now established practice and normal operation of the technology is causes an unintended side-effect that they might not be happy with.

      Your stance is the mentality that makes us put labels like "hot" on coffee and "suffocation hazard" on plastic bags.

      Those outdated/large tomes of law defeat the purpose of law anyway. They take the law away from the common man and make it something that only specialized people know. This is bad for *all* citizens of the country in question.

      These physical object analogies are just the wrong way to do it; they are made by people who don't get it. There is no trespess here; there is no illegal entry; there is no theft. The device is working in the manner it was designed to work. The people leaving it that way are either doing so on purpose, or have the net effect of doing so on purpose. There is no way to tell the difference between the two. Ignorance of the law is no excuse... why should ignorance of your property.

      If you leave money somewhere public, it will get taken. If you leave your wallet, then perhaps someone will return it to you, since they can tell whose it is. Either way, it is theft to take someone's physical property without permission.

      If I walk around naked and someone watched me, the problem is me doing it where someone else can see it. Likewise, if I transmit a signal omnidirectionally, and someone picks up the signal, that's my fault for not doing it differently.

      As for your assertation that most people don't have time to understand this. First, it's clearly described in the manufacturer doco. Second, it's on a public band. Third, it's working as intended if it lets anyone connect and use.

      Your statements are ridiculous in that regard. You don't need to be a network engineer to install an AP any more than a plumber to replace a water filter or a mechanical engineer to put gas in your car. The incredibly simple and well documented process of configuring your AP is a little different than prescribing your own medication from a list of thousands of things with thousands of side-effects and interactions.

      Setting up an AP is more like connecting a VCR. It's incredibly easy unless you're too lazy to read the two pages of documentation. Then it doesn't work how you want it to, and it's your own fault.

    17. Re:Accident? by Xugumad · · Score: 1

      If you read the post carefully, it sounds a lot like they have official secured points, but occaisionally departments will get their own wireless access points and set them out, leaving IT services out of the loop.

      It really shouldn't be a massive leap to believe that staff, when told by IT services that they have to secure any wireless access points, will just install their own points "because it's easier". I've certainly seen it happen at where I work.

    18. Re:Accident? by cortana · · Score: 1
      Just because someone else hasn't spent years learning all about computers, and just wants to plug their laptop into their network without understanding all the underlying principles of wireless transmission and security doesn't mean you have to leech, steal and generally take advantage of them.
      It doesn't take years to read the fine manual that came with the wireless access point in the first place!
    19. Re:Accident? by kabocox · · Score: 1

      From all accounts, he was caught tapping away on his laptop, moved away when police watched, then came right back to the same point again. At which point he was investigated as he looked a little 'suspicious'.

      So now, it is suspicious to be using a laptop outdoors with police watching. I guess all those officers with mobile data computers in their cars are highly suspicious as well.

      Actually, it sounds like he could have just keep on doing exactly as he pleased, and they wouldn't have been able to do anything. It is that he was hiding from the police that they thought he was doing something wrong. Your really can't blame the police because that's standard for them if a citizen is activly hiding or running away from the police odds are they are doing something that is against the law.

    20. Re:Accident? by cahiha · · Score: 1

      Basically the bloke was engaged in Wardriving, and deliberately hooked into the wireless network.

      Yes, and what's wrong with that? If the network isn't secured with a key, it's obviously intended to be used by anybody.

      The court made a major error with its decision.

    21. Re:Accident? by MrNemesis · · Score: 1
      If you look up "gross negligence" in the Oxford English Dictionary you'll find the following;
      • failure to act with the prudence that a reasonable person would exercise under the same circumstances
      • the trait of neglecting responsibilities and lacking concern
      • UK government IT contractors
      ;)
      --
      Moderation Total: -1 Troll, +3 Goat
    22. Re:Accident? by Anonymous Coward · · Score: 0

      >The profits aren't going to come from patients choosing to use your services because you make a better mousetrap, they're going to come from spending as little as possible on said mousetrap.

      Just wanted to let you know its not any different in a country with a public health system (Canada), infact the presures to contain costs are even greater, people kick governments out for tax increases, and public health care is IIRC our largest expenditure. It's really bad in many places, my local hospital had to resort to charity drives to get enough money to purchase a MRI unit, the closest one before that was over three hours away. Funny enough that same MRI only got used for 8 hours a day even though there were month long waiting lists because they didnt have the budget to staff it. This stoped after it was reported that the hospital even with these waiting lists was allowing veternarians to use the equipment after hours (for a cut of course).

    23. Re:Accident? by Darth_Burrito · · Score: 1

      Just because someone else hasn't spent years learning all about computers

      Where I live there are three wireless APs. Two, maintained by non tech average joe adults are secure. One, maintained by me, an IT professional, is deliberately open for public use. It doesn't take a network engineer to set up a wireless access point. An open access point is often deliberate.

      ... doesn't mean you have to leech, steal and generally take advantage of them.

      Where is the theft? I am systems administrator and a software developer and the mechanism by which an open access point lets a host on the network looks an awful lot like authorization to me. This is the way it would be treated with the web, with ftp, with windows shares, and so on. And let's not hear any crap about the web being a public medium. It doesn't get any more public than the signals from the AP that are passing through the air and through my brain in an unregulated public spectrum.

      The real problem is that people don't really understand wireless as well as they should. But this will change. I knew people who reacted the same when they found out people were accessing their shares in the dorms, but these people have slowly learned. They're a lot fewer idiots opening random email attachments now than there used to be. In 5-10 years, people will understand wireless to the point that they will no longer be burdened with the excruciating task of spending an hour reading their manual.

      Because it IS your fault by not informing them.

      I am not my brothers keeper. In my experience, most people know their XYZ is open and don't care. If they don't know and do care, and you tell them, they tend to kill the messenger.

      you're not expected to be a plumber to put in your own washing machine, or be a car mechanic able to build your own car before you get in one

      What, so you are not responsible for configuring anything you ever buy? If you buy a garbage disposer, don't you need the ability to install it under the sink? If you buy a new cd player for your car, don't you need to know how to put it in and program it? Suggesting that turning on security in a wireless access point is a job for network engineers is like suggesting that changing a tire is a job for an automobile designer. It's borderline insulting.

      The SELFISH thing to do is take advantage and say

      The selfish thing to do is propose new legislation and misinterpret existing legislation to protect people who can't be bothered to understand the most basic functions of a device they purchased and installed. The selfish thing to do is to make it practically impossible for people like me to share my resources freely with others.

  13. DHCP server gave him permission! by Anonymous Coward · · Score: 0

    Would have been more interesting if the guy had had a clued up a lawyer.

    Seeing as these people's DHCP server gave him an IP address, doesn't that count as permission? I guess the prosecutors might have thought so too which is why the crime is using his airspace not his computer. Which is even more ridiculous, their network came into his car not the other way round.

    This has alarming civil liberties implications. But I guess is mainly down to cluelessness and incompetence on the part of the judge as these things usually are.

    1. Re:DHCP server gave him permission! by Teun · · Score: 2
      Would have been more interesting if the guy had had a clued up a lawyer.

      Indeed, I hope someone picks this one up and goes to a higher court, even after reading various accounts it's not obvious he had to break anything to gain access.
      This realy is like the guy took an apple from a bowl with fruit in the street carrying a sign om it that vitamines are healthy.

      --
      "The likes of Facebook and WhatsApp are free to those whose privacy is of zero value."
  14. Implication that he accessed a computer by l-ascorbic · · Score: 1
    From TFA:
    Gaining unauthorised access to a computer is an offence covered by the Computer Misuse Act. In Straszkiewcz's case, he was prosecuted under the Communications Act and found guilty of dishonestly obtaining an electronic communications service.
    "I guess, and it is a guess, that they couldn't prove he accessed the actual computer and that is why they used another legal avenue," said Mr Janes.

    Perhaps because it's unlikely that he did access the computer? Why would he need to, if he's just leeching the bandwidth?

    1. Re:Implication that he accessed a computer by Linus+Torvaalds · · Score: 1

      Gaining unauthorised access to a computer is an offence covered by the Computer Misuse Act.

      It is. But what about this is unauthorised? He didn't break any encryption or crack any passwords, did he?

      If the issue is that he wasn't explicitly granted access, then surely visiting websites makes you just as guilty - you initiate the connection, not the server, and no special privileges are granted beforehand.

      Yeah, maybe there's implied permission by running an unsecured web server on a standard port. But if that's the case, then surely there's an implied permission by running an unsecured hotspot on standard frequencies.

  15. Impossible to help by Anonymous Coward · · Score: 0

    I've no doubt that when this happens it's mainly ignorance, but the trouble is there is no way of pinpointing where the router is, so no way of politely helping a neighbour. In my case: a router called "netgear" - a default of course - and a load of terraced houese. Short of walking round with my laptop and netstumbler, there is no way to help.

  16. 'Is reporting'? by jginspace · · Score: 1, Troll

    This 'news' is from last Thursday for Christ's sake...

    1. Re:'Is reporting'? by geodescent · · Score: 0

      Not quite. That guy was cloned for the purpose of duplicate action, much like Slashdot

    2. Re:'Is reporting'? by baldvin · · Score: 1

      Does it make it less interesting? No. (For Christ's sake...)

      I hate the modern media, because being the first counts more then being accurate. I personally don't care if it is two weeks old: if somebody found it just right now, or some journalist was able to make space for it only now: OK, then I am open to read and discuss it now...

  17. So what does this accomplish? by mendaliv · · Score: 1

    While it might get rid of bozos who go and mess with unsecured wireless routers, I don't think this sort of action does anything but create a false sense of security.

    Fines and probation won't magically make everyone's wireless network secure. The only reason this guy was caught was because he was acting suspiciously, just like that guy in the US.

    1. Re:So what does this accomplish? by Baron_Yam · · Score: 2, Funny

      I am, by your definition, a bozo.

      When I had the only WAP in my building, no problem. When my neighbours above, below, and on either side all decided to use the same channel for their wireless they were making things worse for everybody.

      Mostly, I was only worried about me, of course. I logged on to their unsecured routers and put them on channels likely to cause less interference.

  18. If I'll ever invent breakthrough technology... by Anonymous Coward · · Score: 0

    ... I'm going to make a test of technical aptitude a requirement before anyone is allowed to use it, and then nobody can claim that they need to be protected by law instead of protecting themselves by turning on encryption. Fucking idiots keep ruining it for the people who care about technology...

  19. The law? by t_allardyce · · Score: 1

    Well to be fair this has always been technically illegal. If you leave your windows or your Windows open (heh), it doesn't make it legal for someone to go inside. I don't agree with it though, that's the law. I think there should have at least been a flag in the protocol to way 'this is a private network' and hardware should default it on - that way even if its totally open you still know where you stand legally. I also think more should have been done to clear up the legality of who was responsible for what goes on their network, there's no way you should be held liable for what someone else does on your connection - otherwise no-one would have access points, not even Starbucks!

    --
    This comment does not represent the views or opinions of the user.
    1. Re:The law? by DenDave · · Score: 1

      This is interesting as this may vary per jurisdiction. If you think about it, every attempt to log into my web server via ssh goes unpunished, this is however, using my network without permission. This is to my knowledge not punishable under current local laws unless the perp has actually succeded in accessing the system. Mere use of the network does not get the authorities wound up at all.

      By analogy you should think then that merely using an unprotected wifi without accessing the actual computers would fall under the same regime?

      Does anyone have a decent lowdown on these issues?

      --
      -if at first you don't succeed, stay the heck away from paragliding.
    2. Re:The law? by Anonymous Coward · · Score: 0

      The FCC would say otherwise.
      If you're beaming it through the air, it's free game for anyone who can do something with it.

    3. Re:The law? by t_allardyce · · Score: 1

      What does the FCC say about mobile phones? I think you will find its illegal to intercept them.

      --
      This comment does not represent the views or opinions of the user.
    4. Re:The law? by Loonacy · · Score: 1

      Certain frequencies are licensed, this is true. However, the frequencies used by WiFi are completely open to the public.

    5. Re:The law? by Anonymous Coward · · Score: 0

      There is this flag. You can turn off broadasting the base station id. If this isn't being broadcast, then there is no invitiation, and you'd actually have to sniff or randomly guess the id to get access.

    6. Re:The law? by t_allardyce · · Score: 1

      Ah but its turned on by default on just about every piece of hardware. If its on you can't assume that it means an invitation because its socially equivilent to forgetting to lock your door.

      --
      This comment does not represent the views or opinions of the user.
    7. Re:The law? by Jimmy_B · · Score: 1

      No, forgetting to lock your door is different because you have to do it so often that it's easy to forget. Leaving an access point open is like buying a house and not taking down the "Open House" sign the realtor put up. You should expect visitors until you take it down (configure a password), but you only have to do it once.

  20. Our bodies, our signal by GregBryant · · Score: 1

    Personally, I feel I have rights to any radio waves traveling through my body.

    1. Re:Our bodies, our signal by jurt1235 · · Score: 1

      I thought the question of being able to feel radio waves was still not answered?

      --

      My wife's sketchblog Blob[p]: Gastrono-me
    2. Re:Our bodies, our signal by MirrororriM · · Score: 1

      Tinfoil suit, my friend...tinfoil suit.

      --
      Content Management System: A pretentious way of saying "text editor."
    3. Re:Our bodies, our signal by slashjunkie · · Score: 0

      I agree. Satellite TV realised this years ago - if they didn't take the initiative and encrypt their signal, they'd be giving away free content. The guys that go to considerable lengths to break that encryption - are obviously committing a crime.

      But anyone stupid enough to use a broadcast medium such as RF, and not apply some kind of security and access controls, is asking for that service to be abused.

      Someone previously posted here on /. that technically a DHCP ACK could be construed as granting permission to use the network. Come on folks, this is so seriously simple to even just turn off DHCP, then at least you can argue that the AP is not responding to requests to use the network.

      Better yet, get real about WiFi security, use WPA+AES and 802.1x or a good long PSK.

  21. Idiot by 16K+Ram+Pack · · Score: 3, Insightful
    "Some people might argue that taking a joy-ride in someone else's car is not an offence either"

    Wrong. It's more like going up a private road which isn't marked as a private road, and which you have contacted Google to tell them to put it on their maps. Don't want people to go driving up your private road? Put some signs up or a gate.

    It's very simple - put WEP or WPA on. To be honest, if someone goes through your WEP, then that counts as a deliberate break-in in my book. If you don't have it no, don't complain when people go using it.

    1. Re:Idiot by nmg196 · · Score: 1

      > Wrong. It's more like going up a private road which isn't marked as a
      > private road

      Which is illegal. What's your point? You can't possibly have any legitimate reason to go up the private road as it only leads to other stuff which isn't yours.

      > Don't want people to go driving up your private road? Put some signs up or
      > a gate.

      I have 200 acres of land. How can I put up signs or a gate on 200 acres of land? You shouldn't be trespassing - you have no legitimate reason to go on to my land.

      Say you park your car on the street and one night you forget to lock it. Would you be happy if someone took that to mean that they had an open invitation to get in your car and drive around in it (even if they brought it back again)? I doubt it...

      You seem to be under the gross misconception that if you haven't been physically prevented from using something, then it must be entirely legal and morally correct for you to use it. It's the other way round - by default, you can't do anything with anyone's private property unless they have expressly permitted you to do so - whether or not they have secured it. Simply "not securing" something is not any kind of permission to use or abuse an object or service! I think that's fairly fucking obvious to pretty much everyone in the world apart from thieves (and even they probably realise it's wrong - they just don't give a shit).

    2. Re:Idiot by blueskies · · Score: 1

      You seem to be under the gross misconception that if you haven't been physically prevented from using something, then it must be entirely legal and morally correct for you to use it. It's the other way round - by default, you can't do anything with anyone's private property unless they have expressly permitted you to do so - whether or not they have secured it.

      Oh, so you ask permission before reading someone's blog? Just because you haven't been prevented from downloading pages from their webserver doesn't mean that you should be downloading those pages. Oh, and don't email them to ask them permission because then you are using their bandwidth without their permission. Oh, and don't call them on their phone either unless you have permission....

    3. Re:Idiot by 16K+Ram+Pack · · Score: 1
      OK let's say you have some sort of private parking outside your house. Under UK law, I can park anywhere that's allowed on the public highway, this includes parking on the street outside people's houses.

      However, some housing has private roads that you can't park on. Basically, if you don't mark it as a private road, people can reasonably assume that it's public highway, because most of it is. Don't want me to park on your private road? Put a sign up.

      The analogy of driving a car away is ridiculous. No-one would do it because they know that by default, people don't leave their cars open for other people to use. However, there are public hotspots. I know 3 near me that are unlocked, and in each case, I know the owners are cool with it. 2 are hotels, one is a restaurant. What if I'm sitting in a restaurant and hit a hotspot of the home next door? How do I know, particularly as they broadcast their presence.

      I'm just saying that the protocol for open hotspots is disputed. Don't want people on it? Switch WEP or WPA on.

    4. Re:Idiot by 16K+Ram+Pack · · Score: 1
      As I said in another post, this is all about protocols. We go into a cafe and pick up a sachet of sugar. We don't expect to pay for it, even though we haven't paid for or asked permission.

      What is the protocol for open hotspots? Well, my view is that its an undecided, but if I was sitting in a hotel or bar, I'd probably check the approximate name and if it looked reasonable and the bar seemed to be a hotspot sort of place, I'd use it (if unsure, I'd ask).

      If I was in a residential area, I'd presume it was someone's home network and not use it.

    5. Re:Idiot by sparty · · Score: 1
      Wrong. It's more like going up a private road which isn't marked as a private road.
      Which is illegal. What's your point? You can't possibly have any legitimate reason to go up the private road as it only leads to other stuff which isn't yours.

      I don't know what jurisdiction you're in, but around here, a lack of "No Trespassing signs" or "Private Road" signs implies that the public has certain access rights (hunting, fishing, and trapping in particular).

      Don't want people to go driving up your private road? Put some signs up or a gate.
      I have 200 acres of land. How can I put up signs or a gate on 200 acres of land? You shouldn't be trespassing - you have no legitimate reason to go on to my land.

      If you don't have signs up, he's not trespassing (at least around here). If you want to keep people off, you need to post it, per State Law. Or you can make sure to tell anyone who shoes up to go away, but the burden is on the landholder to notify the public that particular land is off limits.

    6. Re:Idiot by bogjobber · · Score: 1

      In the U.S., the driver (or walker, hunter, whatever) has to be aware of whether they are on private or public land. It is not the land-owner's responsibility to post signs across their entire property.

      Now, I don't think that anybody is going to be arrested for driving up somebody's private road, but it is technically illegal. Similarly, I doubt anybody is going to get arrested for logging onto someone else's home network (even if it is secured). But when you are doing something that is blatantly illegal in public view regularly for three months, don't be surprised when you get arrested.

    7. Re:Idiot by Random832 · · Score: 1

      > > Wrong. It's more like going up a private road
      > > which isn't marked as a
      > > private road

      > Which is illegal.

      Is not.

      > What's your point? You can't
      > possibly have any legitimate reason to go up the
      > private road as it only leads to other stuff
      > which isn't yours.

      Unless it's a through road. Then it leads to public roads on *gasp* the opposite side of your land

      > > Don't want people to go driving up your
      > > private road? Put some signs up or
      > > a gate.

      > I have 200 acres of land. How can I put up signs
      > or a gate on 200 acres of land?

      it's a ROAD. he's not asking you to put a gate in the middle of your fucking cornfield.

      > You shouldn't be
      > trespassing - you have no legitimate reason to
      > go on to my land.

      Then mark your land. Try pissing all over it, it works for dogs.

      --
      We've secretly replaced Slashdot with new Folgers Crystals - let's see if it notices.
  22. am i next? by Anonymous Coward · · Score: 0

    What a coincident, i am writing this using my neighbour's wireless network without their knowledge. ;)

  23. So could this guy have gone to jail for a year? by putko · · Score: 1

    Is that 12 months probation? E.g. if he screws up, can they throw him in the slammer? That'll teach him!

    I can't imagine how he feels; if he screws up again, he's going to get traded aroud on the block for cigarettes. That's just not funny.

    --
    http://www.thebricktestament.com/the_law/when_to_s tone_your_children/dt21_18a.html
    1. Re:So could this guy have gone to jail for a year? by Richard_at_work · · Score: 1

      Luckily, in British prisons, male rape is extremely rare, so that wont happen. We believe in rehabilitation rather than straight punishment, so our method of penalisation is a little different to the 'prisons ruled by inmates' method of the US. It doesnt always work mind you.

    2. Re:So could this guy have gone to jail for a year? by putko · · Score: 1

      These folks agree with you. That's nice to know.

      --
      http://www.thebricktestament.com/the_law/when_to_s tone_your_children/dt21_18a.html
    3. Re:So could this guy have gone to jail for a year? by t_allardyce · · Score: 1

      Seems like the US justice system is pretty comparable with Saudi Arabias. Its quite disturbing that nothing is being done about what is clearly an unconstitutional situation in the "land-of-the-free"

      --
      This comment does not represent the views or opinions of the user.
  24. King Fahd is dead! by Anonymous Coward · · Score: 0

    Long live Amerika, Koka Kola and Vonderbra!

  25. Re:First post! by a.different.perspect · · Score: 1

    Maybe if you'd stolen a faster internet connection. :(

  26. Did you read this bit.... by C0d1ngM0nk3y · · Score: 0

    "the person installing the network, be they a home user or a business, has ultimate responsibility for any criminal activity that takes place on that network," ?

    WTF? If someone sneaks into my garden and starts dealing crack does that meen I'm responsible for that crime too? I meen, it was on my property after all.

    Enlgish law is f***ed up. Someone should point these dumb-asses at a book about computers which they should read before passing laws like this.

    If you're going to fine or jail anyone for having an insecure router it should be the company thats still selling WEP-only routers even though they've been proven to be insecure:

    http://securityfocus.com/infocus/1814 ..that gets fined or has it's CEO jailed.

    Where are the laws to protect the consumer from purchasing insecure WEP routers? Where's the consumer protection law making it illegal to sell someone an insecure communication device? Nowhere. Typical!

    I wonder how many people have actually gone to jail over this? Wouldn't this be a really easy way to set someone up that you didn't like? Hack their WEP, browse to a kiddy pr0n site on their connection and then tip off the police!

    1. Re:Did you read this bit.... by TobascoKid · · Score: 2

      WTF? If someone sneaks into my garden and starts dealing crack does that meen I'm responsible for that crime too? I meen, it was on my property after all.

      While IANAL, I do remember reading somwhere that yes, under English law you would at least be partly responsible. From what I can remember about the article where I read that (yes, it's a bit sketchy, this was several years ago), it was to do with somebody (I believe a political activist and the police were out to get them) was charged with with allowing drug offences to take place on their property (ie, they caught somebody else smoking hash in the guy's flat). I think a lot of it depends on if you know about it or not (ie, if you saw somebody dealing crack in your back garden and you didn't phone the police then you'd be liable, but if you owned a flat and rented it out to drug dealers and didn't know that they were selling crack, then you wouldn't be).

      --
      At some point, somewhere, the entire internet will be found to be illegal.
    2. Re:Did you read this bit.... by csrster · · Score: 3, Informative

      You might be thinking about the Cambridge Two.

    3. Re:Did you read this bit.... by TobascoKid · · Score: 1

      Yep, that was it. Cheers

      --
      At some point, somewhere, the entire internet will be found to be illegal.
    4. Re:Did you read this bit.... by C0d1ngM0nk3y · · Score: 0

      Interesting. Ok, so say that I know my wireless router is insecure and that I know somebody is using my bandwidth and I report it.

      Say also that I don't know how to check what they've been surfing (I do, but lets be hyperthetical).... ...if I report this to the police I get screwed for having kiddy porn but if I hide it and get found out later then I get screwed for knowingly letting someone commit a crime using my network or else they don't even believe that someone else did that and I get screwed for possessing kiddy porn again. How can you win when the big corporations knowlingly sell insecure products?

    5. Re:Did you read this bit.... by JimBobJoe · · Score: 1

      While IANAL, I do remember reading somwhere that yes, under English law you would at least be partly responsible.

      I don't believe this is a common law concept, but, at least in the US, I know that there are specific laws regarding drug offenses and property owners. For instance, in some states, a landlord is *required* to evict someone whom he knows has drugs on premises, or faces charges for failure to do so. This law is yet another offshoot from the War on Drugs, but doesn't necessarily mean that a landlord whose tenant is doing something else illegal is required to evict.

  27. How many people secure their networks anyway? by Dynamoo · · Score: 2, Informative
    How many people secure their wireless networks anyway? Well, from my own personal experience.. not a lot.

    While I'm at home, I can see just one wireless network.. mine. But step outside and I can see eight other ones, only one of which is secured. About half are set to the default network name (so I guess default IP addresses and passwords), all of them except mine use the same channel. And some of them stupidly have the owner's names for the network (stupid.. because a burglar could use that to find out who had kit worth nicking).

    So are these people being stupid or what? Errr well.. no, they're just being normal people who expect the kit to work out of the box. But really, who many non-geeks understand WEP, SSIDs, MAC addresses and all the other jargon?

    The probably is made worse by "leakage". If you are inside then you'll rarely pick up someone else's wireless connection.. but these things leak out all over the place when you go outside. The perception of the typical user then is that if they can't see someone else's network from inside, then nobody else can see theirs. Alas, this isn't the case.

    I think the bottom line is that WiFi is incredibly dangerous if you don't know what you are doing. Most products do work straight out of the box, but crucially they are not secure out of the box. Even Microsoft eventually learned that lesson with its operating systems - early versions of XP didn't even have the firewall enabled and were wide open to attack.

    In this particular case the issue of intent is important. Given the proliferation of insecure networks, it must be trivially easy to accidentally connect to some else's wireless point. How you can prove intent is more difficult though.

    --
    Never email donotemail@WeAreSpammers.com
    1. Re:How many people secure their networks anyway? by Anonymous Coward · · Score: 0

      I don't. I run an open relay and have a clear )( in my SSID and am happy for others to use my connection. Sharing made the internet what it is.

      I'm guessing anybody who states they have an open relay isn't going to call in the black helicopters if they see you making use of it.

    2. Re:How many people secure their networks anyway? by Jesus+IS+the+Devil · · Score: 1

      Who's fault is it if you don't bother reading what's usually just a fold-out, 2-page pamphlet instructing you to CHANGE THE DEFAULT PASSWORD?

      --

      eTrade SUCKS
    3. Re:How many people secure their networks anyway? by quasi_me · · Score: 1

      I don't secure mine, since I can't see a point in doing that. My WLAN is hooked to its own PPPoE network connection. If I use my PC for something real, I use another PPPoE connection. I want my WLAN to be easily accessible for the (short) times I use it for reading /. with some portable device. If someone else is using my WLAN connection, be my guest.

    4. Re:How many people secure their networks anyway? by Anonymous Coward · · Score: 1, Interesting

      What's ironic to me is that the focus of the article--the prosecution of some person who was wardriving--isn't the scariest part of it. For me, this was:

      People with criminal intentions have, in the past, attempted to use the openness of their own wireless networks to cover their tracks online.

      "There have been incidences where paedophiles deliberately leave their wireless networks open so that, if caught, they can say that is wasn't them that used the network for illegal purposes," said NetSurity's Mr Cracknell.

      Such a defence would hold little water as the person installing the network, be they a home user or a business, has ultimate responsibility for any criminal activity that takes place on that network, whether it be launching a hack attack or downloading illegal pornography.


      Basically, what they're saying is that if someone actually breaks into your network and uses it for criminal activity, you're held responsible.

      Brilliant.

      So on the one hand, if you are using someone else's network for innocuous reasons, you're a criminal. However, if someone else uses your network for something nefarious, you're the criminal.

      This pisses me off to no end. The problem with this reasoning is that the people who are actually most likely to use others' networks for something undesirable or criminal are those who are most likely to try to cover it up! So you have this double incentive for actually breaking into networks: first, you get the privledge of actually using the network, and second, if your problematic use is detected, it's blamed on the network owner, not the actual perpetrator.

      Now, I totally agree that most individuals have no clue about the security of their networks, and should be more concerned and educated about it, or there should be pressure on the industry to increase the default security of their networks on installation. However, I think it's even more ridiculous to start blaming the victims of malicious hacking for something they have nothing to do with.

      I mean, organizations with professional security experts on staff have networks intruded into, so even if grandma down the street does everything she knows how to secure the network, what's to stop someone with malicious intent from making use of her?

    5. Re:How many people secure their networks anyway? by Sancho · · Score: 1

      I imagine that if the actual perpetrator could be found, he would be prosecuted instead. I think the point is that an open network in-and-of itself is not going to be considered reasonable doubt for the purposes of prosecution.

      Personally, I'd strike a middle-ground and charge the person with aiding and abetting. You may not have known who was using your connection, but you gave them the access and equipment to hack into that company.

  28. Speaking generally, not about this particular case by a.different.perspect · · Score: 1

    Ah, right. So if you have your door open in summer, I'm welcome to walk into your house and help myself to some of the cookies that are on the kitchen table? Or print a few copies of the document you happen to have open on your PC?

    The problem is that Windows will automatically put you inside the house, and you don't have to have done anything so conscious and specific as take cookies or print documents to steal bandwidth - you could just open IE and go to Google without thinking about it too much at all.

    Just because something is easy doesn't mean it's morally justified.

    True. But when something's done for you, and not by you, your moral responsibility for it is rather slender.

  29. These Are Such Stupid Anologies. by Anonymous Coward · · Score: 0

    Your "Door" isn't open on your private property. Your "private" information is flowing out into the street. The PUBLIC street. So if you dont want your "private" data to be exposed to the "public" then dont broadcast it out where anyone can read it. Its more like leaving your hi-fi plugged in and out in the middle of the street, and someone comes by and listens to it, and then you get mad at them for doing it. Its like dressing like a slut then being offended when people stare at you in public places.

  30. So What by Digital+Warfare · · Score: 0

    I can connect to some guys internet in my street.
    He doesn't have it WEP enabled or any form of security at all, not even a password
    So how is it my fault if I was to connect to it ? Surely I could claim accident as the guy hasn't a clue how to setup such a device

    --
    "Sweet llamas of the Bahamas !"
  31. So basically .... by Norfair · · Score: 1

    ... you want to DDoS the FBI? Sounds good, count me in!

    1. Re:So basically .... by Anonymous Coward · · Score: 0

      ... you want to DDoS the FBI? Sounds good, count me in!
      It's called Slashdotting the FBI...

  32. Intentional doesn't mean criminal by NigelJohnstone · · Score: 5, Insightful

    "Fortunately, most courts still discriminate between intentionally and accidentally doing something. "

    Except for one thing, you can't know if he neighbours INTENT was to share his open wireless connection for sharing. Thats the whole point of Open WiFi afterall, sharing. By doing this they're making Open WiFi illegal, because not only does your computer have to get permission to connect to the network (via the login) but now extra permission is needed too.

    Let me put it another way. Suppose you have free open municiple wifi and Fred Bloggs open wifi, you computer has no way of telling which is the free Municiple open wifi and which is not so it connects to Fred Blogs's net, attempts to login and is given permission -> crime comitted. You had the intent to connect to an open network, but not the method to determine which network is permitted.

    Or rather you did have the way, the login, but the court ignored that.

    1. Re:Intentional doesn't mean criminal by SimilarityEngine · · Score: 1

      you can't know if he neighbours INTENT was to share his open wireless connection for sharing

      So, as the UK law currently stands, what is assumed by default when you find an open wireless connection? That the owner intended to share or not? Or does the law require you to find out the owner's intent?

      Hopefully someone reading this can provide an answer (IANAL!), but I would have thought (even before seeing TFA) that under British Law you cannot just assume rights over another person's property (in this case a computer accessed via a wireless connection).

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
    2. Re:Intentional doesn't mean criminal by Zacha · · Score: 1

      "Let me put it another way. Suppose you have free open municiple wifi and Fred Bloggs open wifi, you computer has no way of telling which is the free Municiple open wifi and which is not so it connects to Fred Blogs's net, attempts to login and is given permission -> crime comitted. You had the intent to connect to an open network, but not the method to determine which network is permitted."

      Well, this is what SSIDs are for. The name should tell you if it's a known company or called 'FREEANDUSEME'.

      At the very least, you can try to load up your first webpage: if it doesn't automatically redirect to some kind of login page, you can be pretty sure it's not an unknown commercial service, either.

    3. Re:Intentional doesn't mean criminal by NigelJohnstone · · Score: 3, Informative

      "The name should tell you if it's a known company or called 'FREEANDUSEME'. "

      Except there's no convention for matching an SSID to a usage condition. So 'FreeOnMondayNights' might mean the guy wants a date on mondays or his computer is free on mondays or his wifi is free.....

      You can't know from the SSID what the conditions of usage for that network are.

      Take another example, you try to connect to "MiksNetwork" and it connects, but you are not sure if Mik really wanted it that way. How the fuck are you supposed to know who Mik is, how you get permission from him, or who has authority to give you permission. His network says it OK, yet you're supposed to assume it still isn't?

    4. Re:Intentional doesn't mean criminal by Anonymous Coward · · Score: 0

      So when my neighbour leaves his window at night time open his INTENT is to have an Open-House(TM)?
      By your logic, it would be OK for me to go and explore his premises at night when he (probably accidently) leaves his window/door/gate open. Hell, when we are talking about entering the internet from his WiFi LAN it is more like me coming to explore his place ant that sitting on his sofa to see some TV.

    5. Re:Intentional doesn't mean criminal by Anonymous Coward · · Score: 0

      FREEANDUSEME

      So the access point is ran by a very cheap whore?

    6. Re:Intentional doesn't mean criminal by drsquare · · Score: 1

      He KNEW he was doing it without permission. Read that sentence. And again. It might sink into your slow brain. He was doing it in his car for THREE MONTHS. Under the law, it's illegal if he knows he's doing it without authorisation.

      For Christ's sake, he snapped his laptop shut anytime someone walked by, and you're saying he thought he was doing it legitimately...

      If there was any remote chance of him not being guilty, you'd think he'd have gone to the house, knocked on the door and asked for permission. But of course, he knew what he was doing was wrong. But even the Slashbots won't accept that anything done via a computer can be in any way wrong or illegal.

      Thankfully the law system lives in the real world, not the Slashdot reality distortion field.

    7. Re:Intentional doesn't mean criminal by zenyu · · Score: 1

      You can't know from the SSID what the conditions of usage for that network are.

      Sure you can, my SSID is "nycwireless.net". Which is one of the SSID's recommended by the nycwireless.net users group for people sharing their wireless in NYC. I would assume other cities have similar standard SSID's for someone running an open node.

      This doesn't tell you the full conditions of usage, since different node owners have different monitoring policies, etc. But it tells you one thing very clearly, "THIS NODE IS OPEN FOR YOU TO USE".

      If someone accidentally used "nycwireless.net" as their SSID and then tried to got the police to arrest their neighbor the Judge would throw out any theft of service charge pretty quickly.

    8. Re:Intentional doesn't mean criminal by blueskies · · Score: 2, Interesting

      If someone accidentally used "nycwireless.net" as their SSID and then tried to got the police to arrest their neighbor the Judge would throw out any theft of service charge pretty quickly.

      Why should it waste the judge's time at all? We just need some intelligent case law stating that any unsecured networks are equivalent to open networks. OS manufacturers have made it the de facto standard that unsecured networks are considered available networks.

    9. Re:Intentional doesn't mean criminal by Anonymous Coward · · Score: 0

      And then there's the case of whether it's free as in beer or as in freedom...

    10. Re:Intentional doesn't mean criminal by asscroft · · Score: 1

      that's the point. If open wifi is illegal, they cable/internet providers know they'll be able to get everyone to pay 50-80 bucks a month.

      If open wifi is legal, you'll have people leeching off one guy, or worse! neighbors going in on it together.

      I remember back in the day people used to split the cable bill with their neighbors, and split the line at one house and run it to two or even three houses themselves.

      But then the cable companies started arresting people who did this and now we all have to pay for our own cable. Hell, Satellite people have to pay for each freaking TV Set.

      That's the goal of the companies, pay for each IP address. Fortunately we're winning that war, but unless we demand some common sense from the legislators on this new front we're going to lose legal open wifi and we'll be that much closer to finding our routers are now illegal.

      --
      because I have been enjoined by this Holy Office to abandon the false opinion which maintains that the Sun is the centre
    11. Re:Intentional doesn't mean criminal by Jaywalk · · Score: 1
      By doing this they're making Open WiFi illegal, because not only does your computer have to get permission to connect to the network (via the login) but now extra permission is needed too.
      The key to the problem is the phrase "unauthorised access." If you read the original article, you'll see that the guy messed up because, when the network owner approached him, he hid his laptop and acted, well, guilty. He clearly knew he wasn't authorised to access that point.

      What if, on the otherhand, he had smiled and said, "Oh, there's an open access point here; I'm just checking my email?" He could have claimed he thought it was an Open WiFi connection. Others do it, so it's not like there are no examples. Also, the owner knew he could have secured his access point and didn't. It would have been easy to argue that -- by not doing so -- he was effectively giving permission to use the connection.

      Of course, then we would have never even heard about the case. The owner only called the cops because he thought the guy might be a burglar. If the "thief" had been open about his actions, the guy would have either said "okay" or told him to buzz off and then secured the connection like he should have in the first place.

      --
      ===== Murphy's Law is recursive. =====
    12. Re:Intentional doesn't mean criminal by fm6 · · Score: 1
      Except for one thing, you can't know if he neighbours INTENT was to share his open wireless connection for sharing.
      Jeez, have you ever followed a court case? Or even watched an ep of Law and Order? Judges and juries determine intent all the time.
      Thats the whole point of Open WiFi afterall, sharing. By doing this they're making Open WiFi illegal, because not only does your computer have to get permission to connect to the network (via the login) but now extra permission is needed too.
      Nonsense. All the open network owner has to do is put access permission in his window or on a web page. (Which almost all of them already do.) Somebody accused of stealing access can then point to that permission. But you can't assume every open access point is permission to access, any more than you can assume an unlocked front door is permission to enter.
    13. Re:Intentional doesn't mean criminal by HiThere · · Score: 1

      I have to admit that I've never used wifi, and never investigated it, but you seem even more ignorant than I am. Which takes work, as I rarely pay attention to wifi.

      A wifi port is a network access. There need not be, and I presume usually is not, an associated web page. If I enable wifi access on my Mac, it will transmit to my printer without much interaction on my part. (I don't know the details, as I prefer a wired connection, but non-technical people do it successfully all the time, so it can't be complex.) I really doubt that a web page is involved. In order to do this the computer would need to connect to the in-house wifi network (currently the printer, as I haven't bothered to turn off it's ability to receive messages). Theoretically someone out on the street, or a next door neighbor might accidentally connect. (This hasn't happened yet, or at least nobody's printed anything.)

      More to the point, I have no idea HOW the network would identify itself, but it's already up and running. The printer says so. Is it an open network port? My guess would be yes. Do I give someone else permission to use it? Well, I haven't denied it, but if somebody started printing a bunch of stuff I'd probably cancel the job, and turn off the network. Unless they made a pre-arragnement, and how would they know who to contact? I might be able to tell from what they printed who they were, but I can't think of any way that they could tell. 192.168.1.100 is a bit ambigous as to who it's referring to, and *I've* never given the network a name.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    14. Re:Intentional doesn't mean criminal by noidentity · · Score: 1

      Except for one thing, you can't know if he neighbours INTENT was to share his open wireless connection for sharing. Thats the whole point of Open WiFi afterall, sharing. By doing this they're making Open WiFi illegal, because not only does your computer have to get permission to connect to the network (via the login) but now extra permission is needed too.

      Computers (and WiFi specifically) already have a protocol for getting permission: passwords (and other logins). If you want people to get permission before using your Wifi, you enable the password. If you want anyone to be able to use it, you don't enable the password. If a laptop can connect without a password, the WiFi access point is granting permission.

    15. Re:Intentional doesn't mean criminal by Thuktun · · Score: 1

      Why should it waste the judge's time at all? We just need some intelligent case law stating that any unsecured networks are equivalent to open networks. OS manufacturers have made it the de facto standard that unsecured networks are considered available networks.

      I'd prefer if the protocol supported something, from a bit flag up through a complex set of descriptors, that clearly indicates whether the network is intended for public use. Set the default configuration to be "private only" and ensure tools don't automagically connect to something marked private.

      Having court precident that equates insecurity to permission to use seems dubious.

    16. Re:Intentional doesn't mean criminal by blueskies · · Score: 1

      Having court precident that equates insecurity to permission to use seems dubious.

      Why? They've already done that with "hidden" urls. There was the case posted on slashdot (last year?) where someone got access to earnings results early because the people put it up on the web named the same way as the report for the year before--report2004.pdf instead of report2003.pdf or something like that. They lost their court case when trying to say they were violated because they didn't publish the URL, so it was trespassing to view the document.

      Would you call that "insecurity == permission to use or would you call that "permission to use" by design?

    17. Re:Intentional doesn't mean criminal by Thuktun · · Score: 1

      The server itself was public, served public documents, and they tried to argue that a file on that server, amid all the public information, was actually private?

      They didn't have a problem with the machine being remotely asked to provide something, just a problem with accessing that particular thing via the machine. That seems distinct from remotely-controlling a machine without expressed permission. If the web server in question had been a poorly-secured private intranet server, rather than a public web server, I think the ruling would have been different.

      It's hard to say for certain without any cites.

    18. Re:Intentional doesn't mean criminal by Sancho · · Score: 1

      There need not be, and I presume usually is not, an associated web page.

      It is possible to redirect all HTTP requests to a local server, which could forward requests to the correct host or not based on some form of authentication or at a minimum, clicking "Ok" to a user agreement. Or hell, just saying, "Hey, it's cool that you're using this, but be ready to be cut off if you start being a bandwidth hog." This would be an excellent way to have a legitimate open access point for the public to connect to.

    19. Re:Intentional doesn't mean criminal by Darth_Burrito · · Score: 1

      the guy messed up because, when the network owner approached him, he hid his laptop and acted, well, guilty. He clearly knew he wasn't authorised to access that point.

      Either the guy was authorized to use the access point or he wasn't.

      This would seem to be independent of the issue of whether or not he thought he was authorized to use the access point. If you think you might be speeding but are not speeding, you have committed no crime.

      It could also be argued that it is independent of whether or not he thought the person approaching him thought he was authorized to use the access point. Who knows who that guy is?

      It could also be argued that whether or not the owner thought the individual was authorized was irrelevant. Eg, consider the case where a person is unknowingly hosting a network share, ftp site, or web page. I am not guilty of a crime for visiting their site.

      My point is, either the access was authorized or it wasn't.

    20. Re:Intentional doesn't mean criminal by blueskies · · Score: 1

      link

      That seems distinct from remotely-controlling a machine without expressed permission. If the web server in question had been a poorly-secured private intranet server, rather than a public web server, I think the ruling would have been different.

      You're saying that sending through a publicly accessible router is "remotely-controlling a machine" and that it is different from "remotely-controlling a poorly-secured public web server?" The wide open AP is the same as a unsecured web server, serving up pages. Don't put pages unsecured on your webserver, same as don't put up unsecured APs connected to your cable modem. The wireless protocols, just like with http, have ways of making your device private.

    21. Re:Intentional doesn't mean criminal by HiThere · · Score: 1

      You seem to be implying that there actually IS a web page associated with each wifi logon. I know that I've seen macs wirelessly connecting to their printers without any web page showing up. (OTOH, you mention a way that it could be suppressed from appearing. If that's so, then that could be why I don't expect to see one.)

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    22. Re:Intentional doesn't mean criminal by Sancho · · Score: 1

      In the general case, we're not talking about someone printing, we're talking about someone using the web. But let's extend the concept.

      You could just as easily refuse to forward traffic from the unauthorized wireless device until it's visited your webpage and read your agreement.

      Clearly this is not for the casual user who wants to share wifi, but since this is in the subthread from http://slashdot.org/comments.pl?sid=157633&cid=132 15839, it's relevant.

    23. Re:Intentional doesn't mean criminal by HiThere · · Score: 1

      Yes, but what is the default behavior, if you don't take any action?

      I use macs connecting to printers, because that's what I've seen happening. I know that other things happen, but I don't know what they look like, so I was presuming that they are just as invisible. That one CAN lock things down, or require log-in or put limits on the bytes transferred is something separate from what the default behavior is, and what it looks like. From the comments of others (as well as the printer model) I had been presuming that one did a dhcp handshake and was connected to the net, with all the access a guest user on the local net would have...this didn't imply to me that the default action would include an http interaction of any sort...I thought that wifi was handled at a lower level.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    24. Re:Intentional doesn't mean criminal by Sancho · · Score: 1

      What does it matter?

      Original post: By doing this they're making Open WiFi illegal, because not only does your computer have to get permission to connect to the network (via the login) but now extra permission is needed too.

      He said: All the open network owner has to do is put access permission in his window or on a web page. (Which almost all of them already do.) Somebody accused of stealing access can then point to that permission. But you can't assume every open access point is permission to access, any more than you can assume an unlocked front door is permission to enter.

      You said: There need not be, and I presume usually is not, an associated web page.

      I said: But there can be, and if the point is to run a "legal" open wifi point (assuming that, based on this court ruling, connecting to a wifi point without direct authorization is illegal) then this is an option.

      Ultimately, the default behavior doesn't matter. The point is that if legality is a question, this is one way to ensure that authorization can be granted before the /internet/ connection on the wifi network is used.

    25. Re:Intentional doesn't mean criminal by Jaywalk · · Score: 1
      Either the guy was authorized to use the access point or he wasn't.
      Actually, under the law the important issue is whether he believed he was authorized. If he had to circumvent some kind of protection or read a "keep out" message, he would clearly have been unauthorized. With none of these things in place, there would have been no way to prove that he did not believe he was using a deliberately open connection if it was not for the fact that his state of mind was betrayed by his own actions.

      Currently, legal practice is undefined because the technology is new. I believe that, in time, it will be decided that transmitting an open connection into public areas without some form of security constitutes authorization to use the connection.

      --
      ===== Murphy's Law is recursive. =====
    26. Re:Intentional doesn't mean criminal by HiThere · · Score: 1

      The default behavior is important because those not knowledgeable will ONLY use the default behavior.

      If the default behavior is illegal, then nearly every wifi connection will be illegal.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    27. Re:Intentional doesn't mean criminal by Thuktun · · Score: 1

      You're saying that sending through a publicly accessible router is "remotely-controlling a machine" and that it is different from "remotely-controlling a poorly-secured public web server?"

      Huh? Where did you get "router"?

      You were referring to someone accessing an unlinked file on a PUBLIC web server. I'm talking about accessing a PRIVATE web server that was accidentally exposed to Internet traffic. I'm claiming they're different.

      The former is unsecured intentionally, the latter is not.

    28. Re:Intentional doesn't mean criminal by blueskies · · Score: 1

      Huh? Where did you get "router"?

      Presumely, the AP was routing packets from the air (wireless) to an uplink so i was calling it a router. I thought you were bringing the discussion back to the topic.

      If people setup a device in a way that follows a standard for public access, they shouldn't be suprised when someone accesses it. It's not like someone broke the spirit of the standard by accessing it. WEP is the easiest/first/lowest protocol designed for making your wireless network private, hence the "wired equivalent privacy". Whether or not it meets that claim is a different story, but this is your "privacy" bit (or use one of the more advanced standards).

      I don't understand how this is any more different then accessing a web server. People aren't using a bug to connect--they're using the protocol the way it is designed. Let alone the fact that one people are connected to an AP they still need an IP address so if the DHCP server gives them one they are on the net. It's another protocol that is a handshake. "May I have an IP address?" "Yes, i offer you this one: DHCPOffer" "DHCPACK - thanks". These problems are solved already. It's just that no one wants to take responsibility for themselves.

    29. Re:Intentional doesn't mean criminal by Thuktun · · Score: 1

      I don't understand how this is any more different then accessing a web server.

      This is precisely why I was using web server analogies, which you keep ignoring.

      In this regard, I think an unlocked car is a good analogy. There is no implicit permission to use it simply because it's unsecured. The courts and the vast majority of people agree on this.

      Pulling the handle on a car door is essentially asking the door for permission to enter. By unlatching the door and allowing it to open, it is accepting your request. I know of no one who legitimately thinks that this means you can enter and use the car.

    30. Re:Intentional doesn't mean criminal by Darth_Burrito · · Score: 1

      Yeah, that sounds right. That said, here's another perspective demonstrating why "suspicious behavior" should not necessarily be accepted as acknowledgement of unauthorized use.

      Many years ago in the dorms, I had a friend who was threatened with physical violence for accessing an open network share. All he was doing was browsing the network. The idiots had some tool that told them which computers were connected to theirs and one of them decided that the connected computers were trying to hack them. My friend's computer shared his name so they were able to form a possy and track him down.

      The point here is some people are really dumb. If I was using an open AP, and someone saw me with my laptop and gave me the evil eye but did not say anything, I might respond by quickly, suspiciously closing up the case and possibly moving on. However, I don't know that I'd consider an evil eye from someone who may or may not even be the AP owner as deauthorization.

      Well, you might say, why not just ask the person if it's ok to use the AP? I've personally seen the messenger killed far too many times to consider this a safe or desirable course of action. If someone has an open AP, and is giving you the evil eye for using it, they are already knocked down a few steps on the evolutionary flagpole of computer knowledge and that evil eye does not indicate a peacable nature.

      Anyways, I agree with you that an open AP will eventually be considered an OPEN AP. I would think this notion of knowing whether or not one was authorized would only come into play in situations when there was not a clear means of determining whether or not a person was authorized and wireless tech provides such a means. Today, even though such a method exists, it is apparently not yet clear to the public at large. Furthermore, court cases that decide against users of open APs probably go a long way to keeping the issue unclear.

  33. Re:Speaking generally, not about this particular c by SimilarityEngine · · Score: 1

    Are you saying this guy unconciously, repeatedly, hijacked the connection? If not then isn't he in the same kind of ethical position as someone who waltzes in through your open front door and takes the cookies?

    Okay, I know you're not his lawyer, I'm just asking for clarification on your position.

    --
    Those who can make you believe absurdities can make you commit atrocities. - Voltaire
  34. now I'm scared by jotux · · Score: 1

    Now when I see those little LCDs in the headrests of cars in front of me playing movies, I'm afraid if I look at them I'm stealing the movie from driver of that car. And if I happen to be behind that person playing other movies a few times a month(they live close, or drive similar roads) I'm conspiring to steal thier video!

    really though. When he signs on, the instant the router assigns him an IP the network has asked him on to the network. Since when is an unencrypted signal entering your private space(the guy was in his vehicle, on what I'm assuming was a public road) not yours to use?

    1. Re:now I'm scared by coofercat · · Score: 1

      Well, here in the UK we have this idea of "reasonableness".

      In this case, since there's no way for the WAP owner to stop signals reaching the road, there's no way they could be reasonably asked not to do it. Thus, your argument doesn't stand, because it is unreasonable of you to expect people to restrict their signals to their private property.

      Further, the guy in question was deliberately placing himself in a location with the specific aim to stealing wireless. If it had been the next door neighbour, the argument would be different. It would be different again if the neighbour also had a WAP, and his computer had selected the wrong one.

      Again, just because something occurrs, does not make it legal or illegal. It is only if there was a deliberate act, or if all reasonable steps had been taken (to stop it).

      So for all of us Brits, legally you don't have to secure your WAP, as it is (and always will be) illegal to steal your signals. However, if someone abuses your IP address and you get busted for something (perphaps because you have an apparent motive and no alibi), you should try to prove you took all reasonable steps to prevent the problem. Once you've done that, you're basically off the hook.

      In short: Securing your WAP is a prudent, sensible thing to do, but there's no legal reason to do it.

      PS. Watching a movie over someone's shoulder isn't illegal. However, doing something like a Tempest attack on their TV so that you can watch it is. Again, it's all about reasonableness and deliberate acts.

    2. Re:now I'm scared by gglaze · · Score: 1

      Since when is an unencrypted signal entering your private space ... not yours to use?

      Not that I disagree with your point at all, but just to point out:

      Clearly you don't live in the UK, where you have to pay a tax for watching "public" TV (via antenna). Not that everyone actually pays it, but technically they are supposed to...

    3. Re:now I'm scared by jotux · · Score: 1

      "In this case, since there's no way for the WAP owner to stop signals reaching the road"

      So encryption isn't considered a way to restrict a signal? I just think that if you set up computer hardware and intentionally configure(or refuse to properly configure) it to accept all unknown connection attempts, then you just volunteered that connection to anyone who wants it.

      If a government installation broadcasts a radio signal unencrypted from a base, and the signal spreads across a large area...and you turn on your radio and intercept it, does that mean you are maliciously trying to steal that signal?

      I agree the guy is stupid, and should get what is coming to him for being so stupid. But the fact that he was convicted for something like this wouldn't make me feel secure if I was a UK laptop user around open access points.

    4. Re:now I'm scared by coofercat · · Score: 1

      Correct - there's no law or mandate to use encryption (actually, almost the opposite).

      The thing protecting you is "reasonableness" and "deliberate act". If you fire up your PC and it chooses your neighbours WAP instead of your own, you're responsible for what you do, not your neighbour. Go ahead, threaten the PM, you'll (eventually) get busted (all things being equal), not your neighbour.

      On your side of "scared", you also have to make reasonable steps to avoid doing anything stupid. So, if you want to use an unencrypted WAP, then make sure your PC connects to your SSID, not your neighbours. That way, if someone threatens the PM and your neighbour blames you, you've got an "alibi" by demonstrating that for all intents and purposes, it wasn't from your PC. Now, unless someone else makes more deliberate attempts to make it look like you, you're in the clear (and at the end of the day, if you didn't do it, you should/could still be safe).

      So it all boils down to raising the stakes to whatever level makes you (reasonably) safe. Right now, tieing your PC to your WAP's SSID is probably sufficient. Give it a couple of years, and 64 bit encryption will be the min-spec. A few more years, 128bit, and so it goes on.

  35. Is it OK if I look through your window to watch TV by kt0157 · · Score: 1

    This idea of "theft" is one put about by RIAA and MPAA. Don't confuse things.

    A better analogy than stealing hifi would be if looked through your window and watched your TV that you left turned on. Is that illegal? Is it immoral?

    K.

  36. wireless hacking by chrisranjana.com · · Score: 0

    Theft is theft, wireless or otherwise

    --
    Chris ,
    Php Programmers.
  37. Re:Speaking generally, not about this particular c by a.different.perspect · · Score: 1

    No, I'm saying that a guy could unconsciously, repeatedly hijack a connection, and that the extent to which that process is automated complicates questions of guilt and ruins most analogies.

    With this guy it looks like it was intentional, deliberate theft. But generally speaking, the "waltzes in through your open front door and takes the cookies" image is completely imprecise, as you were placed inside the house and handed the cookies. No analogy supports that accurately.

  38. "hijacked" connections?! by tnmc · · Score: 2

    Note the inflation of rhetoric...now it's "hijacking" if some bozo's AP *gives* you an IP address over DHCP...!!

    1. Re:"hijacked" connections?! by t_allardyce · · Score: 1

      Well.. you see the router felt threatened and assigned the IP out of fear of retaliation - its similar to walking into a bank with a gun, you don't need to say anything.

      --
      This comment does not represent the views or opinions of the user.
  39. Compare it with a door... by Kjella · · Score: 3, Interesting

    ...the door is unlocked = no encryption, no security.
     
    ...turning the handle gives access to anyone that tries - the router hands out IPs to anyone that asks.
     
    ...the door can be locked very easily - the WiFi network can be configured to deny access easily.

    ...accidentally opening the neighbour's unlocked door = Windows automatically connecting to a WiFI network

    You know that most people do not intend to let everyone use their WiFi, any more than they want everyone to use their house when the door is unlocked. Most of them are poorly configured (typically, default SSID/password), and you know that 99%+ of all residential ISPs don't allow them to run a public hotspot.

    Consider it something like garden furniture, even though it's not under lock and key it is still mine to use. If I don't sit in it, you still don't have any right to the unused "bandwidth". And don't give me the "reading in your light" argument, because using my network consumes my bandwidth. If I have a download running, you are slowing me down.

    If you really are a free hotspot it is trivial to indicate that you are in your SSID. Otherwise the only thing you have is a very thin argument that since you can use it, it must be free. It certainly has no truth in the physical world, and hardly in the electronic world either. Just because I misconfigure a server to make an open relay/proxy/service, doesn't imply permission. Not if you have good reason to understand that this isn't intentional. You can play really stupid, but no court will let you get away with it.

    Kjella

    --
    Live today, because you never know what tomorrow brings
    1. Re:Compare it with a door... by PakProtector · · Score: 1

      The entire purpose of a door is to keep things out of the house that you don't want in. The lock is an 'extra' piece added on.

      The entire point of a Access Point is to mediate requests for use.

      What I do with my neighbour's access point is akin to me knocking on a neighbour's door and asking to come in. If they say yes, they can't later say I was trespassing.

      In a similar manner, if I send the Access Point a request to use it, and it allows that request, I am lawfully gaining entry.

      --

      Edward@Tomato - /home/Edward/ man woman
      man: no entry for woman in the manual.
      "Qua!?"

    2. Re:Compare it with a door... by Anonymous Coward · · Score: 0

      I have my wireless router as a public hotspot, and as you say it's not allowed by my isp, therefore I can't be quite as obvious as writing it in the essid field.

      What i have done is that I have essid = default and no password.

      I hope that noone will have second thoughts about using it.

    3. Re:Compare it with a door... by Sparr0 · · Score: 1

      Except that in the door analogy when you knock on the door a note slides out that says 'come in'. Turning the handle on a normal door is not a request, there is no communication involved. I *ASK* your AP whether or not I can have access. It *ANSWERS* yes. This is not an abstract concept (you might argue that turning the handle is 'asking' the door for entry, a horrible analogy), it is an actual series of communications involving a request and acknowledgement giving permission to access as well as the information required to extend access (to the internet).

    4. Re:Compare it with a door... by Masa · · Score: 1

      In a similar manner, if I send the Access Point a request to use it, and it allows that request, I am lawfully gaining entry.

      But an average user doesn't necessarily understand your intentions, when "knocking" on theirs door. It's like knocking on someones door, who is known to be an innocent retard who doesn't understand that not all strangers are friendly and should be let in.

      Society is full of loopholes, but it does not mean that we should always exploit them. It's common sense and courtesy, which are keeping our society a decent place to live.

      Instead of exploiting these people, let's try to educate them.

    5. Re:Compare it with a door... by YrWrstNtmr · · Score: 1
      No, you have not knocked on your neighbor's door and asked to come in. You asked a piece of dumb hardware if it is OK. You have assumed that his unlocked door is implicit permission for you to come in and walk around.
      "Hey...I sent his front doorknob a request, and it turned for me, so that must mean it's ok"

      Wrong. (IMHO)

    6. Re:Compare it with a door... by Kjella · · Score: 1

      What you observe is nothing more than the access method. Having an IP assigned is like the door swinging open. Not recieving an IP is like the door remaining shut. You didn't pass any authentication, there was none. You didn't ask anyone in authority for entry, you simply tried and weren't forcibly refused entry.

      An access point is an access point to the network, i.e. a means to get on the network. You know, like the door is an access point to the house. Both have authentication mechanisms, yet when neither is in use you manage to conclude that an unlocked (read: non-autheticating) door is not an invitation, but an open (read: non-authenticating) network is.

      Kjella

      --
      Live today, because you never know what tomorrow brings
    7. Re:Compare it with a door... by Ulrich+Hobelmann · · Score: 1

      Hm, doesn't about EVERY PC-magazine write about people surfing at their neighbors'? At least in Germany I assume it's common knowledge.

      Also, if your shiny now access point totally magically gives your laptop access, then it's common sense to assume that the same goes for other computers in the area.

      If every simple guide to WLANs says you should set a simple password for your access point, then why not do it?

      About the exploiting: sure, it's not nice to download large amounts of data, especially if you don't know if anybody has a flatrate going, but it doesn't hurt to check you email once in a while, IMHO.

      And if someone asks you a computer question, as usual, be nice and try to help ;)
      (for the education part)
      If people that don't even ask, that's their own business/problem.

    8. Re:Compare it with a door... by dr_d_19 · · Score: 1

      ...accidentally opening the neighbour's unlocked door = Windows automatically connecting to a WiFI network


      No, more in the lines of: ...looking for the house of a friend you gave you an inexakt location specification and then ending up inside his neighbors house.

      That should warrant an arrest for breaking and entering, don't you think?

    9. Re:Compare it with a door... by Anonymous Coward · · Score: 0

      I think the door analogy is perfect - execpt that they have built their front door in my kitchen! Or in the car analogy, they are parking their car in my garage. They are the ones brodcasting unsecured, unencrypted WiFi into my house!

    10. Re:Compare it with a door... by aaronl · · Score: 1

      As I've said so many times, physical trespass or theft is not the same thing. AP manufacturers configure their equipment to allow any station to associate by default. If my laptop associates when it's within range, then it is working as intended. If you don't like that, then change the settings. Don't complain when your device does what it's supposed to!

      The closest real world analogy I can think of is that of a public business. If I set up an area like a restaurant, put up a sign, and leave the door unlocked, is it OK for me to sue everyone that walks in the door? They're trespassing after all, I never told them that I intended them to come it. But established pratice is that in that situation it *is* OK for them to come in. The open AP situation is exactly the same. That configuration is inviting the public to connect. It's saying "Come in an have a seat. What will your order be?".

      Honestly, if the court doesn't let you "get away" with this, then the court is wrong. This happens; it's why the appeals process exists.

    11. Re:Compare it with a door... by Anonymous Coward · · Score: 0

      In order to be charged with breaking and entering you must first break something and enter. Merely wandering where you are not wanted (onto a farmer's land, in through the unlocked back door of a house, into the employee only section of a store) is merely trespass, a civil property matter. The owner can tell you to leave, they can use reasonable force to make you leave, and they can call the police to effect your removal if they don't have the means. But those are property rights, and you haven't broken any law by testing their willingness to enforce them.

      Of course, doing damage is a crime (so you can't trample a farmer's crops), and breaking and entering is a crime (so you can't get into the house if the doors are locked), and going equipped is a crime (so you can't walk around carrying house-breaking tools without good reason), but if you just like to wander around that's harmless enough and no law has been passed against it.

      As you can see, in the UK being unwanted is not criminal, only someone who is persistently where they are not wanted stands to be arrested, and only those who really work at it go to court.

      If I use some software that I know corrupts APs and overrides authentication, that might be analogous to breaking and entering (but it's not the same crime, the Law Lords of the UK over-ruled the High Court in the question of whether software could be an "instrument" in the sense that these laws use).

      But, the UK does have a specific crime of using a computer without authorisation, for which a defense would be that you had authorisation, or that you reasonably believed that you had such authorisation. Using a friend's AP while visiting them might give you reasonable belief, as might using an AP with SSID 'FreeWiFi', or using the wrong AP by mistake in a built-up area. But it's unclear how this person can justify their reasonable belief.

    12. Re:Compare it with a door... by a.d.trick · · Score: 1
      It certainly has no truth in the physical world, and hardly in the electronic world either.
      IANAL, but I don't think that's the case in the physical world. If I own a house with a yard, and I keep that yard open and do not put up any signs warning trespasers, than they are not breaking the law by trespassing (however, if I as them to leave, then they have to of course).

      In fact, if I have a policy of letting people on my yard (a consistently open network), than *I am (partially) liable for any damages*. In the case of an open network, if am testing viri on my network, and it is open, and someone connects and is infected *I would be liable*. It would also work the other way to an extent. If someone uses my open network to crack into another computer, I could be liable, particularly if it happens more than once.

      Remember, IANAL, I'm just an amature, but I think this is as good an analogy as any.
    13. Re:Compare it with a door... by hackstraw · · Score: 1

      ...the door is unlocked = no encryption, no security. ...turning the handle gives access to anyone that tries - the router hands out IPs to anyone that asks. ...the door can be locked very easily - the WiFi network can be configured to deny access easily. ...accidentally opening the neighbour's unlocked door = Windows automatically connecting to a WiFI network

      Analogies in general are a poor way to make an argument because most of the time after the analogy argument is made, the analogy is then nit picked and the original argument has been forgotten.

      However, one thing to add to your analogy:

      the neighbor's door is on my property

      Going around trying unlocked doors and entering a home is still trespassing and possibly breaking and entering. It also carries the risk of death. A stranger in my house when I'm there will not leave alive. Although I'm sure someone might kill another person for using their WAP, its not nearly the same as physical entry.

    14. Re:Compare it with a door... by Skidge · · Score: 1

      What I do with my neighbour's access point is akin to me knocking on a neighbour's door and asking to come in. If they say yes, they can't later say I was trespassing.

      How about you knock on your neighbour's door and ask if you can connect to their wireless network? If you did that, then there'd be no need for all of the crazy analogies.

    15. Re:Compare it with a door... by uncle_fausty · · Score: 1

      At CanSecWest last year, there was a great panel discussion on the legality of security testing, accessing secured and unsecured networks, and so on. Many of the audience raised similar metaphors comparing open networks to unlocked doors, cars, homes, etc; the lawyer on the panel then made one of the most astute points I've heard on the subject (which I can only paraphrase now): "Regardless of what they may be *like*, computers and networks are not cars. They are not doors, or houses. The law does not govern computers and networks the way it governs cars and houses; neither does it govern computers and networks based on an arbitrary moral sense of right and wrong." No matter your opinion on the law, it still exists; if you think it needs changing, you need to involve yourself with the government that creates it, or you're hardly in a position to complain about it.

    16. Re:Compare it with a door... by NeutronCowboy · · Score: 1
      If you really are a free hotspot it is trivial to indicate that you are in your SSID.

      And exactly how does that work? Someone else already gave some good examples on how SSIDs that sound good might be something completely different. Why do you think it takes a team of lawyers and 20 pages to lay out the terms of use of a forum that essentially amount to "Don't be a jack ass or we'll kick you"?

      English language is not precise - thankfully so. Therefore, don't require it to be. Instead, use technology standards, which have to be: if the WAP is open, it's open. If it's closed, it's closed. No if's, no but's, no legalese. If people abuse technology, it's their problem, not mine.

      Now it would be good karma if I'd ask my neighbor "Hey, do you really want your WAP to be open?" But I should not have to run his system for him.

      --
      Those who can, do. Those who can't, sue.
  40. Deliberately open by Fishtank · · Score: 4, Interesting

    Personally, I leave my wireless network deliberately open, and the login message (when seen) says "welcome to...". I do this in a public minded spirit, in the hope that if I need a public network in some other place, some other kind soul will leave one open as well.

    Fixed computers actually on my network are individually firewalled off.

    If I ever find evidence of massive bandwidth leeching, I may change my policy, but even then I would prefer to simply cap non-me connections.

    Morally, I don't feel it is wrong to borrow enough bandwidth off an open wifi node to read a few web pages or collect email.

    Massive bandwith leeching, copyright theft or invading someone else's samba shared files via an open network (that they probably intended to be network private) are off limits, of course.

    These days, I would hope that people are aware that these things are open by default - there have been enough articles in the major newspapers about it, and certainly I would prefer that hardware manufacturers shipped them in a default secure configuration, but I don't think this should prevent people leaving them open if they want to.

    If i leave a plate of biscuits (cookies) just inside the open gate to my garden with a sign saying "take one please", is it a crime for someone to take one?

    1. Re:Deliberately open by julesh · · Score: 1

      If i leave a plate of biscuits (cookies) just inside the open gate to my garden with a sign saying "take one please", is it a crime for someone to take one?

      No. But the situation being discussed is more akin to leaving a plate of biscuits just inside your open biscuit without a sign saying "keep your hands off my biscuits."

      You can't take absence of dissent to imply consent. The world breaks down if you do that.

    2. Re:Deliberately open by zakezuke · · Score: 1

      Personally, I leave my wireless network deliberately open, and the login message (when seen) says "welcome to...". I do this in a public minded spirit, in the hope that if I need a public network in some other place, some other kind soul will leave one open as well.

      This is lots of fun. I setup a simple open access point that resolved everything to a cached copy of goatex. Sitting on the front lawn drinking iced tea watching the war drivers go past, stop, surf, get disguested, and squeel away.

      --
      There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
    3. Re:Deliberately open by Darth_Burrito · · Score: 1

      or invading someone else's samba shared files via an open network (that they probably intended to be network private) are off limits, of course

      This seems logically inconsistent to me. Why should your open wireless be open but your open shares be closed? Password protect them or something if you don't want them to be open. There are many environments (like dorms) where people are used to seeing shares as deliberately public resources. If I was in a neighboring apartment, I might assume you meant your shares to be public especially if I knew you meant your wireless to be public.

      And of course there's this whole issue that often only a technically educated person will stop and think that maybe a person does not want me to access XYZ.

    4. Re:Deliberately open by Alsee · · Score: 1

      Correction: these biscuits reach out and tap people on the shoulder and invite a snack session. It's the biscuits initiating contact.

      I'd also like to note that I have not granted anyone authorisation to establish a connection with my laptop. If someone's WiFi point reaches out and contacts my laptop to initiate a connection and my laptop is configured to automatically reply to that invitation and establish a session, that WiFi point owner is STEALLING unautorized usage on my laptop's resources in estabishing that connection.

      So *if* anyone in engaging in unauthorized hardware access and usage, that it is the WiFi owner that is guilty because it's his device reaching out and initiating the automated handshake. Chuckle.

      You can't take absence of dissent to imply consent. The world breaks down if you do that.

      WiFi has perfectly well defined protocols for devices to broadcast connection INVITATIONS to other devices, and perfectly well defined protocols for restricting access. The world works perfectly fine. If you're BROADCASTING INVITIATIONS you should not be surprised when people accept them.

      What actually causes the "world to break down" is what you suggest. Aside from the fact that it makes it effectively impossible to put up and use open WiFi points, you are making it criminal to surf websites. Just because someone put up an unsecured website - an "absence of dissent" - that would not imply consent. You are stealling usage and access to that webserver. Maybe someone put up an unsecured WiFi point by accident or maybe they did it on purpose, and maybe someone put up an unsecured website by accident and maybe they did it on purpose. In neither case do you have any right to assume consent to access.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  41. Cowboy Kneels..... by Anonymous Coward · · Score: 0
    for browsing the 'net on his neighbour's wireless Internet conenction.

    Eye sea that slashdot is you zing cowboy kneels open sores speil czech are again.

  42. Obligatory overused metaphors... by Anonymous Coward · · Score: 0

    Can we go ahead and get these two tired metaphors (that come up any time a WiFi story is mentioned) out of the way?

    1) If I leave my door unlocked, does that mean you can just walk into my house?

    -or-

    2) If you're broadcasting music over the radio, can you sue me for listening?

  43. Several of These analogies are way off base by MonGuSE · · Score: 1
    Ah, right. So if you have your door open in summer, I'm welcome to walk into your house and help myself to some of the cookies that are on the kitchen table? Or print a few copies of the document you happen to have open on your PC? Just because something is easy doesn't mean it's morally justified.

    This is way off base, not only is it pretty clear that no one would want strangers in their house, but that you are also trespassing on someone else's property. No one specifically owns the airwaves. In addition I don't know of anyone that leaves their door open, in fact I don't know of anyone that leaves their door unlocked that often even when home. If your door is wide open that is actually somewhat suspicious and police patrols will actually look into it if driving by. The police also consider open doors fair game for entry and do not require a warrant if I remember correctly. I could be wrong but if I am lets not nitpick about that last one it is minimal.

    The analogy Rather like if a webserver is publicly accessible, then anyone can connect to it. If there's stuff you don't want people to see, then force people to authenticate. is pretty dead on. There are alot of people that provide open wifi usage for whomever wants to use it in the area, as well as coffee shops, libraries, bars, community centers, etc... The list is rather endless, so how can you differentiate what access points you are allowed to access? My answer is that it should be if the access point is open then it is open for public use. One good analogy is this is similar to the phone network, businesses especially pollsters and advertisers are allowed to assume that any phone number is fair game to be called unless it is on the federal do not call list. I interpret this as my phone lines are fair game to be used to contact my house unless I explicity require authorization or deny you to call them via do not call lists. The authorization part is that as an addon you can have white lists of phone numbers allowed to call you and people often will only answer phone numbers on their caller id that they know ignoring the others. Another analogy is potentially FM radio (FCC restrictions aside) the signal is open to the public unless otherwise restricted.

    In my area there are alot of newer development that end with circles and people put portable basketball hoops on the side of the road but do not care if kids besides their own use it as long as they don't break it. Sometime people play football or soccer in the yards but I and most other people don't care if they use some of my lawn as long as it isn't too close to the house. I paid for that land and pay taxes to own it and etc..., but I don't mind sharing.

    One of the churches in my area put up an open wifi access point for anyone to use, the only reason I know that is we were looking for a church to attend and the pastor happened to mention it when he found out I was into IT. How would anyone else know? but yet they want people to feel free to use it.

    I'm not sure what the law is right now in the US as far as using someone's open wifi AP. I would honestly feel that a decent attorney would get any charges thrown out of court unless the AP owner wanted to specifically press charges of theft. This is something that definitely belongs in the civil realm unless it is an actual hack to the AP or systems on the network.

    For those about to scream about the insecurity of my open AP and that I am a moron because of it I have an AP setup on its own supernet range firewalled off from the rest of my network and bandwidth limited for those that do want to use it. It also has some specific ports blocked like ftp, bt, and a few others. My other AP has WPA enabled and only I, some friends and the wife have access to use it.

    1. Re:Several of These analogies are way off base by CaptainFork · · Score: 2, Insightful
      To address your key points in turn:

      not only is it pretty clear that no one would want strangers in their house - It is clear to me that some people might not want strangers using their modem/router and possibly volume-capped broadband service.

      but that you are also trespassing on someone else's property - Trespass is a good example of a crime that is technically victimless but which most people agree should be in place. It is a precident for a "cyber-tresspass" law that would address this issue and others, like zombie networks.

      The police also consider open doors fair game for entry - I'd be surprised if this is true. I certainly don't want the police entering my house without a warrant!

      Rather like if a webserver is publicly accessible, then anyone can connect to it is a bogus analogy. A website is like a shop or a library. That is what the web was set up for. But that wouldn't ligitamise knowingly accessing a private corporate intranet just because the IT guy accidentally left it open one day any more than it is legitimate to enter a shop that is closed just because the owner forgot to lock up.

      how can you differentiate what access points you are allowed to access? - Questions like this arise with almost every property-related law. You must find out from the owner first either by direct communication or via a notice. If you cannot/will not do that then you will have many problems fitting into society quite apart from internet access.

      businesses especially pollsters and advertisers are allowed to assume that any phone number is fair game to be called unless it is on the federal do not call list - The problem is that many people would like to receive certain unsolicited calls eg from someone who found your lost cat, and you can't announce the fact that you will allow such calls in the case of telephones. But you can indicate that your WiFi is available by various means.

      Another analogy is potentially FM radio - That's not remotely close. FM broadcasting is purely opt-in by both parties. No-one is taking control of anyone else's communication equipment or consuming other people's pay-for services.

      I and most other people don't care if they use some of my lawn as long as it isn't too close to the house - And what if they do get too close to the house? You will ask them to stay clear of the house, then you will ask them to keep off your garden altogether, and finally you will call the police and get them arrested. All the while they may have done no damage at all. My point? No-one should assume they have a monopoly on what is reasonable in the context of sharing.

      I have an [blah blah] for those that do want to use it - I'm glad you're rich enough to be generous to people who own WIFI laptops but won't shell out for a broadband connection of their own.

      If there's one kind of champaigne socialist that really gets my goat, it's people in the top 0.1% of global earnings who can afford to make expensive but insincere and ineffectual gestures of generosity, and then snobbishly expect everyone else to do the same. I hope the neighbours' kids tread the f**k out of your garden, especially in the forbidden part right next to the house.

      Remember, it's easier for a camel to pass through the eye of a needle than for a rich hippie to get over his guilt complex.

    2. Re:Several of These analogies are way off base by TobascoKid · · Score: 1

      No one specifically owns the airwaves.

      That's not really that true - the radio spectrum is licensed. The UK regulator for radio spectrum auctions licenses and even wants to create a trading market for spectrum as well. So in many respects the airwaves are owned. And we're not really talking about the airwaves anyway, but on a network on top of the airwaves.

      If your door is wide open that is actually somewhat suspicious and police patrols will actually look into it if driving by

        That really is highly dependent on where you live - in some places it's pretty common to leave your front door unlocked and in the summer open as you assume that people won't come into your premises. And if what older gernerations say is true, the practice was at one point quite common in most places.

      There are alot of people that provide open...

      and

      One good analogy is this is similar to the phone network, businesses especially pollsters and advertisers are allowed to assume that any phone number is fair game to be called unless it is on the federal do not call list.

      But the phone network is meant to be publicly accessible. Just because an AP is open doesn't mean it's meant to publicly accessible. Yes, this is a fault of the router manufacturers who should have made them secure by default, in which case if an AP was open you'd know it was for public use. Instead, we're in a situation where it's not clear if it's meant for public use or not. As we are dealing with a private resource then I think it should be assumed to be private unless there are notices to the contrary. In much the same way as if I leave my door open, it's still not considered OK for people to come in and watch my TV, unless I put a sign saying "come in and watch my TV".

      Another analogy is potentially FM radio (FCC restrictions aside) the signal is open to the public unless otherwise restricted.

      As we're dealing with a case in the UK, it should be noted that FM radio is not open to the public. All those little transmitters for the iPod are illegal to use in this country.

      One of the churches in my area put up an open wifi access point for anyone to use, the only reason I know that is we were looking for a church to attend and the pastor happened to mention it when he found out I was into IT. How would anyone else know?One of the churches in my area put up an open wifi access point for anyone to use, the only reason I know that is we were looking for a church to attend and the pastor happened to mention it when he found out I was into IT. How would anyone else know? but yet they want people to feel free to use it.

      How about they put up a sign?

      --
      At some point, somewhere, the entire internet will be found to be illegal.
    3. Re:Several of These analogies are way off base by MonGuSE · · Score: 1

      You both are missing the point in its entirety. Let me spell it out, there are legitimate open access points out there that people want you to feel free to use as is similar with FM, VHF, UHF, phone network, www, ftp, gopher, email, EBN, shortwave ham, etc... etc... However the current thought process that even if the wifi point is open and the person wants to allow you to use it it is still illegal unless you have expressly written permission. This goes against the current standards practiced in our industry and conflicts with our way of life. Those of you with the but you wouldn't come into my house bs are missing the point in its entirety, people don't expect EVER ANYWHERE for strangers to come in and want to borrow some space in your house. It is mainly a personal bubble and affraid of malicous intent problem. If someone went in your house they could do any number of things like steal things, break things, see you naked, kill you and etc.. An Access Point or wifi on the other hand is an entirely different ball game. All it allows someone to do is gain access to the network in which it is connected. Some would again argue that you are stealing bandwidth and again they would be missing the ENTIRE point. There are numerous people and businesses out there that want you to use their wifi but now the current thought process is that unless you have written permission from the person that owns and pays for the wifi you can't use it. That is like asking someone to find the priest during the week and ask his permission to attend sunday mass. And putting up a physical sign is about as moronic as one can be since there is no physical limitation as to where a signal can be. You expect someone to run around a residential house looking for a sign that says ok use me this is even more stupid when you think about apartment dwelers downtown that want people to use their wifi. Am I supposed to walk into the building lobby, get buzzed in from some random person, up to the 3rd floor after I've managed to locate the exact location of the access point by calculating it from 6 distinct locations, and then look on their door to see if their is a sign posted? You are just retarded. I'll clear up some things since you felt it necessary to do so. The sole reason that the FCC liscences specturm is because and this is from their perspectus not mine.. The airways belong to everyone and therefore must be liscenced to serve the public. The 802.11 spectrum is not liscenced out to an individual corporation like the FM, VHF, and UHF ranges but instead has it opened up to anyone with limitations on the power and the way in which it can be used so everyone can use it. The other argument don't even merit review.

  44. You, for one, are wrong. by Anonymous Coward · · Score: 0

    If you walk into an unlocked house without being invited, it is still trespass. You cannot argue sanely or logically that since it is unlocked, you are allowed to use the house. The analogy is simple, as is the definition of theft. The courts have not let their brains take a holiday, you have.

  45. Re:Speaking generally, not about this particular c by SimilarityEngine · · Score: 1

    Sorry, I misunderstood your post - I thought you were countering the idea that this particular guy was culpable. Sorry!

    --
    Those who can make you believe absurdities can make you commit atrocities. - Voltaire
  46. His computer asked and was told it was OK by NigelJohnstone · · Score: 1

    "that under British Law you cannot just assume rights over another person's property (in this case a computer accessed via a wireless connection)."

    Except that his computer asked, it said "here - I'm an anonymous connector, is it ok to connect to your network" and the other guys WIFI said "sure".

    Think about the Internet, do you get permission to connect to someone website and download some files? Hell no, its a public network, and if you want to stop people visiting the website, you can password protect it.

    1. Re:His computer asked and was told it was OK by SimilarityEngine · · Score: 1

      As has been mentioned elsewhere in this discussion, the guy was aware that he did not have the owner's consent to use the connection. He knew he was stealing (in the eyes of the law).

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
    2. Re:His computer asked and was told it was OK by Xugumad · · Score: 1

      I'd argue that the WiFi said "Well, I'm not going to stop you". Equally, I should be able to put "Private website, do not enter" on the frontpage of my website, and that should be enough to stop people. WiFi unfortunately doesn't have a way of expressing owner's intent, only of blocking or not blocking systems.

      What we need is for WiFi to be set non-password protected, but clearly labelled as private, so that base stations can use that as a default. People are then left in no doubt as to the situation. If you want to share out your connection, let it be set as public.

      Here's another thought; we have a cordless phone. Ignoring difficulties getting the same handset model, it's theoretically quite possible for someone to find and use my phone line. Would this be right? I have no way of securing the phone line further, the hardware just doesn't provide for it, does that make a difference? Personally, I think it's reasonably obvious that you shouldn't be using my phone line...

    3. Re:His computer asked and was told it was OK by Dun+Malg · · Score: 1
      I'd argue that the WiFi said "Well, I'm not going to stop you".

      On what basis? A DHCP request is a request. Unless the router offers the configuration information and assigns the requesting user an IP address, there'll be connection. This is more than the router failing to get in the way, this is the router aiding and abetting. No matter how much you wish it to be true that the router is a passive bystander in the situation, it is simply not the case. Wireless routers come from the factory set to assist anyone and everyone trying to connect.

      --
      If a job's not worth doing, it's not worth doing right.
  47. Service theft by Timberwolf0122 · · Score: 2, Insightful

    In the words of Kosh truth is a thre edged sword;
    Your side
    there side
    and the truth

    Theft of bandwidth on a home internet conenction beacuse of an un-securt WLAN would be viewed thus.
    Every secong xMbit of unused bandwisth is wasted, I was simply using something that the owner was throwing away. Besides it should of been secured, its' like leaving your shopping on the front garden wall.

    It was my property and as it is part of my network you invaded my privacy, it is like walking into my house and decanting the hot water out of my kettle after I'd just made a cup of tea.

    You ARE stealing and you ARE gaining unlawful access to a private network. If you want to share bandwidth (I do so with my neighbours as they are very light users and I have a loverly fat pipe) then it should be done openly. Although you could argue it is the owners responcibility to secure there own network it is no different to seeing a house with an open window and going in to nick the biscutes.

    So Say'th lord Timebrwolf.

    --
    In the not too distant future, next Sunday A.D.
  48. Stupid by contro · · Score: 0

    This is the worst wi-fi case ever I mean come on it's like if I decided to make a wi-fi hotspot open and all and then someone connected to it Then I call the cops and say that you were stealing my wi-fi connection, hell it's my fault i left it open.

  49. Ignorance of the law is no excuse by panurge · · Score: 1
    Under English and Welsh law it is assumed that every subject of her gracious Majesty, Defender of the Faith, by the Grace of God Queen Elizabeth the Second (and not in any way the descendant of some dodgy German princes) has a total and accurate knowledge of the law and therefore ignorance is no excuse. The fact that Judges Appellate frequently decide that mere judges get the law wrong, and that the very senior judges appointed to the House of Unelectable Politicians Who Need Some Cash then decide that the Judges Appellate also got it wrong, does not alter the fact that Joe Doe knows the entire legal system from A to Z. (By the way, yes I do know that most judges are considerably more intelligent and sensible than most politicians, and frequently try and interpret silly laws in a sensible way. But that is beside the point.)

    However, there is another ancient principle of Common Law: De minimis non curate lex, which means "the law ignores small things". If this is applied, clearly someone occasionally getting their neighbour's wireless network because of signal strength variation is not worth worrying about. Finally, there is the CPS or Crown Prosecution Service. Whether or not they prosecute depends on the current level of terrorism paranoia, what the Daily Mail is screaming about at the moment, and whether the paperwork has been filled in correctly.

    The one thing in all this that does not matter is whether or not you were doing this on purpose. And, being completely serious for a moment, that is exactly as it should be because, in reality, it is almost impossible to prove intent.

    --
    Panurge has posted for the last time. Thanks for the positive moderations.
  50. Mens Rea by sdokane · · Score: 1

    Cant speak for US courts, but in the UK, except for some specific cases, a person is guilty only if they committed the Actus Reus (guilty act) with appropriate Mens Rea(guily mind). I've watched enough US TV to have heard these phrases used often enough, and since US law is generally based on English law, I presume the same applies.

    Preumably the chap was charged with some form of Theft; that usually requires proof of intent and dishonesty. "Oh, I though the other person wouldn't mind" might be enough of an excuse if a lawyer can make the court believe it.

    So granny is probably quite safe if she accidently connects, and any descent lawyer could get her off.

    1. Re:Mens Rea by sdokane · · Score: 1

      Must read article first....

      The Compture Misuse Act 1990 (available on the the Net) requires intention to secure unauthorised access, and knowledge that it is unauthorised.

      Granny is still safe. If she connects accidently, she has no intention - but she has to drop her connection as soon as she realises. 3 months use by a technical savy user really won't fly as accidental.

      "Unauthorised" is not defined so there's even potential for argument and precedent.

  51. Oh dear, not a junior vicar by panurge · · Score: 1
    I'm replying to myself before the language Nazis point out that should be "de minimis non curat lex". Completely off-topic I will now print the little verse that explains this:

    There was a young fellow named Rex
    With diminutive organ of sex
    When charged with exposure he replied with composure
    "De minimis non curat lex."

    --
    Panurge has posted for the last time. Thanks for the positive moderations.
  52. Knock knock by NigelJohnstone · · Score: 4, Funny

    " ...the door is unlocked = no encryption, no security."

    Man 1: "Knock knock",
    Man 2: "Come in",
    Man 1: Goes in.
    Man 2: Police arrest that man.
    Man 1: But I knocked and you said I could come in
    Man 2: But that was a misconfiguration, if I wanted you to come in I would have put a "FreeToComeIn" sign on my door.

    1. Re:Knock knock by DigitumDei · · Score: 2, Insightful

      A more accurate representation.

      Man 1: "Knock knock",
      Man 2: Door swings open by itself.
      Man 1: Goes in.
      Man 1 repeats this many times over a 3 month period. ...

      Man 2: Police arrest that man.
      Man 1: But I knocked and the door opened
      Man 2: But that was a misconfiguration, if I wanted you to come in I would have said so myself.

      A wireless router is not a person, and therefor cannot be compared to the person saying come in.

    2. Re:Knock knock by Kjella · · Score: 2, Insightful

      Man 1: *turns doorknob*
      Door: *swings open*
      Man 1: *goes in*
      Man 2: Police arrest that man.
      Man 1: But the door opened for me, and thus gave me permission that I could come in
      Man 2: I forgot to lock it, if I wanted you to come in I would have put a "FreeToComeIn" sign on my door.

      --
      Live today, because you never know what tomorrow brings
    3. Re:Knock knock by Ulrich+Hobelmann · · Score: 1

      An access point is NOT a door. Nor is it a person.

      But when you set up your access point, and it's magically auto-found by your laptop, then OF COURSE the same goes for your neighbor. How does the access point know which laptop belongs to whom?

      So if someone doesn't set a simple password, then that's telling the AP to let anybody connect. It's like "come in, we're open!" I switch my iBook on, and voilà, there's the network alright!

      Besides, EVERY guide to setting up your access point tells you about these basic security facts, and even regular newspapers have mentioned that it's possible to drive somewhere, turn on your laptop and go surf.

    4. Re:Knock knock by Anonymous Coward · · Score: 0

      Man 2: But, the manufacturer of the lock said it was safe. They didn't tell me why or how I should lock it.

    5. Re:Knock knock by Soul-Burn666 · · Score: 1

      Man 2's doorman: "EVERYONE PLEASE COME IN!!"
      Man 1: "Knock knock"
      Man 2's doorman: "Come in"
      Man 1: Goes in.
      Man 2: Police arrest that man.
      Man 1: But I knocked and your doorman said I could come in, he even invited everyone inside
      Man 2: But that was a misconfiguration, if I wanted you to come in I would have told the doorman to invite everyone in.
      Man 1: But you did!
      Man 2: Don't ruin my argument with the facts!

      --
      ^_^
  53. Me too! by samael · · Score: 1

    As someone who's been breaking into my neighbour's house to watch his TV for more than a year now, I really don't see a problem with doing it.

    He doesn't watch his living room except for ten to twenty minutes in the morning and an hour or so at night - and he usually watches bad TV.

    It's being wasted - why not use it?

  54. MOD PARENT UP by Anonymous Coward · · Score: 0

    One of the better analogies.

  55. Quit with the bad analogies. by KingJoshi · · Score: 1

    Why do we need to create analogies? We know what happened?

    Someone had a wireless router. They broadcast their SSID so everyone knows they exist. They could easily not do that if they don't want people to use their networks. Then, when you ask for an IP address, they oblige and say happy wireless networking. They don't limit entrance by MAC addresses. They don't use WEP security or anything.

    So, some guy goes around looking for wireless access to use (abuse). I don't thing most people thought of this as illegal. Some think it's immoral (and I'd only agree if it's abuse vs just use), but that issue shouldn't be very relevant when hardly anyone thought it was illegal!!

    The owner took no measures in discouraging or preventing the use. The AP broadcasts itself and allows access to all. To pay 500 pounds and lose your laptop over it?! What the hell is wrong with people? They talk about wanting people to be responsible over their networks, but then they don't force people to be responsible about the wireless router? geesh..

    --
    In times like these, it is helpful to remember that there have always been times like these. - Paul Harvey
    1. Re:Quit with the bad analogies. by Anonymous Coward · · Score: 0

      How do you who this weazle wasn't sniffing the owners network, downloading warez, kiddy pr0n etc?

    2. Re:Quit with the bad analogies. by CaptainFork · · Score: 1
      The analogies are only there to help people like you unserstand that broadcasting an SSID does not count as giving permission. That's all.

      If you believe it does then you misunderstand the concept of property and have an underdeveloped awareness of cultural norms.

    3. Re:Quit with the bad analogies. by KingJoshi · · Score: 1

      Troll? Flamebait? Stupid?

      Just to clarify for those that care, it's not broadcasting alone that counts as giving permission, it's broadcasting SSID AND giving IP addresses to anonymous persons that qualifies for giving permission.

      You want an analogy? I'll give you one. It's like someone leaving a babysitter at home. So the babysitter invites his/her friends. So, if they're nice, all they do is just hang out and possibly watch TV. If they're abusive, they watch Pay-Per-View or eat you out of house and home.

      But, can you fine the friends? No! Blame the babysitter, fine. But in this case, the babysitter is a router that's in your care! You give the rules that it's okay to invite friends. You put a freaking sign on your front lawn that a there is a party and the babysitter just allows everyone in. It's not a party for just invited guests, but anyone who stops by. Like a some house party on campus, anyone is welcome to join and get drinks.

      If you don't want that to happen, then don't put a sign on your lawn (broadcast SSID) and tell the babysitter, "ONLY THESE PEOPLE CAN COME IN" (limit to MAC addresses, use security)!

      This is not the same as people going around checking the knobs on each door to see if they're unlocked. This is not trespassing. It's someone inviting and allowing you in.

      If, this guy was sniffing or broke security barriers, then we have a different case. But we have no reason to assume that this is a special case of that, because in most instances, it's an open wifi access point.

      --
      In times like these, it is helpful to remember that there have always been times like these. - Paul Harvey
    4. Re:Quit with the bad analogies. by Fnord666 · · Score: 0, Flamebait

      You just don't get it, do you? Hopefully confiscation of your laptop and a 500 pound fine will clarify things for you. I bet it did for this guy. No amount of handwaving is going to change the facts or the precedents. Sorry about your luck. Go leech bandwidth somewhere else.

      --
      'The tyrant will always find pretext for his tyranny.' - Aesop's Fables
    5. Re:Quit with the bad analogies. by Anonymous Coward · · Score: 0

      Yup, as you say, all (current) laptop users should be chucked in jail. Back to pen and paper for me!

    6. Re:Quit with the bad analogies. by KingJoshi · · Score: 1

      Stupidity in this world is unending...

      BTW, I pay for Roadrunner broadband cable. What I do has nothing to do with the facts of the matter of this case (and those like it).

      --
      In times like these, it is helpful to remember that there have always been times like these. - Paul Harvey
    7. Re:Quit with the bad analogies. by Fnord666 · · Score: 1
      My post was uncalled for and I apologize. It was meant to be more of a generalization of my frustration with individuals in general who find it acceptable to park in someone's driveway and use their open access point just because it's there.

      Some of this frustration comes from the fact that

      1. Broadband ISPs are setting up wireless networks in a manner that generates the least support calls for them. (ie wide open)
      2. They are selling this service to anyone who owns a computer regardless of technical ability of the subscriber.
      It often boils down to the security v. convenience argument, where convenience wins out which irritates me no end.

      Regardless, that is no excuse and I apologize.

      --
      'The tyrant will always find pretext for his tyranny.' - Aesop's Fables
    8. Re:Quit with the bad analogies. by CaptainFork · · Score: 1
      it's broadcasting SSID AND giving IP addresses to anonymous persons that qualifies for giving permission.

      No. You just made that up. There's nothing about broadcasting either of those things that counts as an invitation.

      Houses often display their house number prominently near the door. That doesn't invite you to enter that property. Cars display their license numbers, but that's not a license to go for a joy-ride.

      An SSID is just that: an SSID. You are inventing the idea that something more is implied. And who are you to do that? Common culture and law both expect that permission is only granted when a human being gives it.

      A machine that broadcasts a numerical code to another machine might assist that machine in opening a connection, but no human being has sent a message of invitation, therefore no invitation exists and you shouldn't do it!

  56. Similar to mobile phones by NigelJohnstone · · Score: 2, Insightful

    "As has been mentioned elsewhere in this discussion, the guy was aware that he did not have the owner's consent to use the connection."

    Yet his computer asked for concent and was told it was OK.
    Your cell phone for example is a very similar device. You drive around, it gets a good connection to a nearby tower, and you make your call.

    You don't get extra permission to use that tower, you assume because your phone says its ok that its ok.

    You visit a website, its password protected so you don't use it. You visit a website and its not password protected so you do use it.
    Did you get extra permission? Internets also a shared public network, just like WiFi.

    1. Re:Similar to mobile phones by SimilarityEngine · · Score: 1

      Internets also a shared public network, just like WiFi.

      I think the difference is something like this: the Internet is a well-known public network, so you are (ethically speaking) okay if you assume that a non-password-protected web/ftp server is there for you to use (assuming there are no "KEEP OUT" signs or equivalents). Someone's home Wifi network is very much not a well-known public network, and in fact common sense/experience tell you that in most cases they probably don't want to share their private info with the world, but exposed it unwittingly.

      The convicted guy from the article knew this, and was aware that he was using resources without permission from the human owner. Regardless of the legal status of his actions, he was behaving unethically. This is quite different to the situation where my phone connects automatically to a nearby tower, (without me even being aware) provided by the mobile phone network company for that very purpose.

      IMHO :-)

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
    2. Re:Similar to mobile phones by NigelJohnstone · · Score: 1

      "I think the difference is something like this: the Internet is a well-known public network,"

      Its not just the Internet & Mobile Phone networks, and Mail servers talking to mail servers and and and...

      Its the problem that if you ignore the login as a proxy for the persons permission then you screw yourself whereever one computer talks to another.
      Because the computer can never read a signature on a contract or talk to the owner so can never get permission from the human operator.

      Its not the same as hacking, when a hacker goes into a network they are rejected by the login, and try to get in anyway.

      "and was aware that he was using resources without permission from the human owner."

      Actually the guys didn't say this, it was the arresting officer which said that he needed permission from the network owner.

    3. Re:Similar to mobile phones by julesh · · Score: 1

      Yet his computer asked for concent and was told it was OK.

      Err.. no, it didn't. To connect to an unsecured wireless network, you just start sending packets. No request for consent to join the network is involved.

      The only time a request for consent is involved is if you're joining a network that's protected via some kind of login system (i.e. a secure network that isn't using "shared key" security).

    4. Re:Similar to mobile phones by fmaxwell · · Score: 1

      Err.. no, it didn't. To connect to an unsecured wireless network, you just start sending packets. No request for consent to join the network is involved.

      No, what you normally do is request an IP address from the router first using the DHCP protocol. That is a request to join the network and a reply from the router with an address, DNS server address, etc. is an acceptance of your request.

    5. Re:Similar to mobile phones by julesh · · Score: 1

      Err... no. Giving a DHCP response is not authorisation to use a network. DHCP is a means to gather technical information about how to connect to a network, not a way of getting permission to use it.

    6. Re:Similar to mobile phones by fmaxwell · · Score: 1
      Err... no. Giving a DHCP response is not authorisation to use a network. DHCP is a means to gather technical information about how to connect to a network, not a way of getting permission to use it.

      No, DHCP is not a "way to gather technical information." It's not some static repository of information available to all. It's a two-way protocol where the client system requests a unique IP address with which to communicate over the network. The router (which can act as a DHCP server) either provides an IP address or does not, depending on whether the owner has decided to leave his connection open to all.

      Perhaps you should read RFC-1531, which defines the DHCP protocol:
      1. Introduction

            The Dynamic Host Configuration Protocol (DHCP) provides configuration
            parameters to Internet hosts. DHCP consists of two components: a
            protocol for delivering host-specific configuration parameters from a
            DHCP server to a host and a mechanism for allocation of network
            addresses to hosts.

            DHCP is built on a client-server model, where designated DHCP server
            hosts allocate network addresses and deliver configuration parameters
            to dynamically configured hosts. Throughout the remainder of this
            document, the term "server" refers to a host providing initialization
            parameters through DHCP, and the term "client" refers to a host
            requesting initialization parameters from a DHCP server.

            A host should not act as a DHCP server unless explicitly configured
            to do so by a system administrator.

      Did you see that "host-specific configuration parameters" part? That means that the router is giving a specific, and unique, IP address to a client that has requested network connectivity.

      My router is set up so that it will not give out IP addresses to random systems that attempt to connect -- only to specific MAC addresses which belong do systems that I own. If I had set it up to provide DHCP services and IP addresses to all who asked, then I would be giving those people permission to use my connection.

      An analogy:
      Me: I'd like to use your car. Can I have the keys?
      You: Sure. Here's a key I made just for your use.
      Some time later...
      You: Officer, he hijacked my car!
      Officer: What do you mean, "hijacked"?
      You: He told me that he'd like to use my car, so I had a key made just for him. Then, later, I discovered that he had been using my car!
      Officer: Are you on any medications?
    7. Re:Similar to mobile phones by julesh · · Score: 1

      Yes, I'm perfectly aware of how DHCP works. But the fact remains that it does not grant authorisation -- it merely provides information that is necessary to make the network work.

      From the same RFC you quoted, paraphrasing slightly for simplification, and adding emphasis:

      [A] network administrator, to retain stringent control over the hosts attached to the network, MAY choose to configure DHCP servers to respond only to [authorised clients].

      Note the use of the word "may" -- this is a clear indication that it is possible for DHCP servers to respond to unauthorised clients.

      An analogy:
      Me: I'd like to use your car. Can I have the keys?
      You: Sure. Here's a key I made just for your use.
      Some time later...
      You: Officer, he hijacked my car!
      Officer: What do you mean, "hijacked"?
      You: He told me that he'd like to use my car, so I had a key made just for him. Then, later, I discovered that he had been using my car!
      Officer: Are you on any medications?


      A more accurate analogy.

      A: I've just got this brilliant new piece of kit. You see I lend my car to so many people, and it always takes me ages to find out who's got the keys and where they left them, so I've got this key cutting machine. All you have to do is press a button and it cuts a new key.

      [Exit A]

      B: Hmmm. I want to borrow A's car. I know, I'll just get a copy of the keys from this key cutting machine he's left outside his front door.

      [Exit B with A's car; A returns]

      A: Where's my car...? D'oh! I should have put the key cutting machine locked away inside like the instruction manual told me to.


      OK, so A is incredibly stupid. But that doesn't mean that B has a right to "borrow" his car like that.

    8. Re:Similar to mobile phones by Darth_Burrito · · Score: 1

      common sense/experience tell you that in most cases they probably don't want to share their private info with the world, but exposed it unwittingly.

      Many people would not leap to this conclusion. For example, in some neighborhoods, it may be common for people to have open access points available to anyone who wants to use it. In my immediate area, there are three wireless access points. The one owned by the IT professional (me) is open. The other two owned by non-it students/young professionals are secured. Looking at this limited sampling, it would appear that it doesn't take an IT guy to secure a wireless network and if a wireless network is open, it is meant to be used. I don't know a lot of people with wireless, but those I do know tend to operate this way. The point isn't that this is a representative sampling, just that you can not assume people will not assume an open wireless point is misconfigured.

      If you have the knowledge required to buy an appropriate wireless router and set up a basic wireless network, it doesn't take that much more effort to add some kind of basic security if you don't want it to be available to the public. It's not as if some mysterious force magically set up a wireless network without the owner's knowledge. The person had to read up on access points, buy one, set it up, and then decide to leave it "Open".

      This whole stink reminds me of a few situations I ran into 7-8 years ago in the dorms. We had a great network in the dorms. On the second day of our freshman year, a group of 4 guys ran into our room angrily asking to know who/where my room mate brian was. He poked his head out and asked what the problem was. They accused him of hacking into their computers and were ready to start beating the crap out of him/calling the police/whatever. As it turns out, he had simply been browsing network neighborhood and looking at files people had shared. The thugs had somehow been smart enough to look at some tool that told you which computers were connected to your own computer, but stupid enough to not realize that this was ok. My room mate's computer was named after himself. The thugs eventually left after he talked them down, but it was a close call with stupidity.

      A year or so later, I was browsing the network and saw a girl in a neighboring suite, one of our friends, had shared several of her papers. I read through one. Half way through I found myself thinking, this seems a bit personal. I didn't think much of it, because I myself had put some of my papers on the web and some of them had personal content. Later that day, I complemented her on the paper. It turns out that she didn't mean to have the files shared. She was angry with me. I politely showed her what she was sharing and how to turn it off. After that, she didn't talk to me for a week, and she permanently lost some degree of trust in me.

      Keep in mind here, that virtually everyone who had a computer in the dorm was familiar with the notion of sharing documents on the network because they accessed other people's shares on a regular basis.

      In the above situation, people who didn't understand that they were sharing things routinely accessed other people's shares without getting permission. I imagine many people who own and maintain open wireless access points, yet do not intend for others to use them, often use other access points without getting permission. There is a common theme here where the "victim" often wants no accountability for themselves on both the receiving and providing ends.

      Also, there's all sorts of situations when it is impossible to determine whether or not you are supposed to be allowed to acccess a wireless network. If you walk into a coffee shop, how do you know if the wireless signal is coming from the residental housing above the shop or from the shop itself? If you are in a library, how do you know if the wireless is theirs or if it is bleeding over from a neighboring business. In a business lobby, how d

    9. Re:Similar to mobile phones by fmaxwell · · Score: 1
      Yes, I'm perfectly aware of how DHCP works. But the fact remains that it does not grant authorisation -- it merely provides information that is necessary to make the network work.

      The DHCP server decides whether to grant access, and the associated IP addressing information, on a request-by-request basis. It is actively assigning an IP address to the specific client.

      Note the use of the word "may" -- this is a clear indication that it is possible for DHCP servers to respond to unauthorised clients.

      No, it's an indication that you took "hosts that have been previously registered through some external mechanism" to be "authorised clients." The administrator can either authorize all clients or can be selective in who is authorized to use the network.

      It also says:
      The DHCP specification describes only the interactions between clients and servers when the clients and servers choose to interact; it is beyond the scope of the DHCP specification to describe all of the administrative controls that system administrators might want to use.
      That "choose to interact" line is important. There is a choice here. If you configure your DHCP server to hand out IP addresses to any who ask, don't complain when they use them.

      OK, so A is incredibly stupid. But that doesn't mean that B has a right to "borrow" his car like that.

      No, it really isn't a great analogy because the router is acting as your agent. Someone who stumbles into your WiFi zone and wants to use your network has no way to ask for permission other than through your router. Someone who wants to borrow your car can ask you directly.
    10. Re:Similar to mobile phones by julesh · · Score: 1

      The router is only your agent if you have given the router permission to act as your agent. This would have to be explicit somewhere.

    11. Re:Similar to mobile phones by DavidTC · · Score: 1
      You might just start sending packets, but I assure you, your computer talked to the WAP before hand. It first asked 'Can I join this network?', and after getting permission, asked 'Can I have an IP address?'.

      Unless, of course, you mean literally the first thing it does. Which, yes, is sending packets, before it even knows if there's a network there.

      And if that's illegal, it's illegal to use any wireless network, anywhere, even if you have permission, because your packets might hit another network, which will quite correctly ignore them.

      And if the router is broadcasting the SSID, it probably sent the first packet, anyway, which means it illegally accessed his computer.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    12. Re:Similar to mobile phones by DavidTC · · Score: 1
      No, that's what you do after you've gotten on the wireless network.

      Wifi has two layers. It has the basic TCP/IP one, and below that it has a 'radio' layer that is basically the 'wires'. You know, when the light on the router turns green because someone's plugged in?

      Wifi has that, but it asks permission at that level, also. Basically 'Can I plug into this network'. This is the level that WEP and WPA work at. It also is the level that controls who can talk when. (Just like ethernet, actually.)

      Actually, ethernet has this to some extent, where devices figure out if it's 10 or 100 Mb, and full or half duplex.

      And if you know how PPP works, it's the same thing. You dial up, give name and password and all sorts of protocol stuff like compression, and then you set up a TCP/IP connection on top of that.

      And, just in case everyone's forgotten, TCP/IP isn't the only game in town. You can negotiate a converstation with a WAP and start speaking Novell or Appletalk. In fact, if you do Windows filesharing over wireless, you're probably doing NetBIOS over it.

      So you're not wrong, it's just that DHCP is the second negotiation. Your computer already got permission to be on the 'wire'. Then it asks permission to be on the TCP/IP network.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    13. Re:Similar to mobile phones by julesh · · Score: 1

      Wifi has that, but it asks permission at that level, also. Basically 'Can I plug into this network'. This is the level that WEP and WPA work at.

      If this is true, why does my AP switch the link light on and apparently grant access to a machine that has an incorrect WEP key?

    14. Re:Similar to mobile phones by fmaxwell · · Score: 1

      The router is only your agent if you have given the router permission to act as your agent. This would have to be explicit somewhere.

      If I knock at your door and someone invites me in, then I'm not trespassing.

      If I knock at your router and it invites me into your network, then I'm not trespassing.

      You control the router. You're the one who decides whether it should give me out IP addresses, whether it should use encryption, whether there is a restriction by MAC address, etc.

    15. Re:Similar to mobile phones by Tim+C · · Score: 1

      Your cell phone for example is a very similar device. You drive around, it gets a good connection to a nearby tower, and you make your call.

      You don't get extra permission to use that tower, you assume because your phone says its ok that its ok.


      Actually I assume that it's ok for me to connect and use the tower because I pay Orange £25 a month for 'phone service and they've not informed me of any towers I can't use or areas that I can't use my 'phone in.

    16. Re:Similar to mobile phones by DavidTC · · Score: 1
      Because WEP drivers are very very stupid.

      I'm amazed every time I have to type a WEP key in, get it wrong, and Windows thinks the network is connected and tries to get an IP.

      I honestly don't know what the hell is going on there. All I know is that wifi devices talk to a WAP, the WAP says either 'You're good' or 'I have WEP', and if it's the later the encrypts using the key and tries again, and the WAP should respond 'You're good' or 'Huh?'.

      What the devices are actually doing is beyond me. It's like we're back to using CB radios or something, sending out signals and not knowing if the other end is there. It's crazy.

      But to be on the network required actual authentication. If your computer is just confused and thinks it's on the network when it's not, it would be rather hard to argue there was 'unauthorized access', or even any 'access' at all. There's just you broadcasting random undecodable crap at the same frequency as the WAP, which is perfectly legal.

      And the same thing if your WAP thinks there is someone there, but can't decode their packets. That's not 'access', it's just your WAP being an idiot.

      --
      If corporations are people, aren't stockholders guilty of slavery?
    17. Re:Similar to mobile phones by SimilarityEngine · · Score: 1

      Hello, sorry for the lateness of the reply.

      I feel that my point of view has been misunderstood somewhat. I had nothing to say about the general situation, and in fact almost completely agree with your stance on this. Quite simply, I believe that this guy knew full well, before taking advantage of the available connection, that the owner would be annoyed when the situation came to light - which makes it fundamentally different to the experiences of you and your friend Brian.

      For me, intent counts for a lot in this sort of situation. I have seen it argued elsewhere that this guy honestly thought he was doing nothing wrong, and found that implausible. However I could be totally wrong (I am not psychic after all).

      We both seem to agree that home users could be more careful in setting up wireless networking, but I think perhaps I disagree with this part:

      If you have the knowledge required to buy an appropriate wireless router and set up a basic wireless network, it doesn't take that much more effort to add some kind of basic security if you don't want it to be available to the public.

      It takes little effort, agreed. But it is not all that hard for someone with little expertise to make exactly that mistake. It is easy to insult them for being naive, but perhaps it would be better to target some of the people who provide this stuff. Shouldn't they explain some of the potential pitfalls to the customers, rather than assuming the customers are experts?

      Anyway, I'm getting dirty looks from my boss so I'll get back to work....

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
  57. Logging onto an unprotected network is hacking? by gearmonger · · Score: 2, Funny

    Wow...cool. I had no idea I was a hacker...will have to add that to the resume. Now to go get a lifetime supply of black t-shirts with obscure *nix jokes on them, throw away my shaver, and stock up on Mt. Dew.

  58. Wait..... by neonenergy · · Score: 1, Troll

    since when can windows do anything remotely magical!?!?!?!??!!!!

    1. Re:Wait..... by akeyes · · Score: 1

      When it can get you in trouble. -Connecting to "illegal" open networks -Sending out spam -Sending out virii etc

  59. Yet you do this regularly by NigelJohnstone · · Score: 1

    "A wireless router is not a person, and therefor cannot be compared to the person saying come in."

    But the Wifi login *is* the electronic proxy for the person. It *is* where the person gets to say whether its OK to come in or not.

    A mobile phone tower is not a person either, your phone connects to a tower. You do not have explicit permission from the owner of the tower that its OK to use it. You assume that because your phone connected that there is some permission via your provider to use it.

    The login from the phone to the tower is the *proxy* version of whatever contracts give you permission to use that tower.

    1. Re:Yet you do this regularly by Peyna · · Score: 1

      But the Wifi login *is* the electronic proxy for the person. It *is* where the person gets to say whether its OK to come in or not.

      Just because I leave my front door open, doesn't mean that I am implying that it is okay for anyone to come into my home and use whatever they want inside.

      Just because I leave my wireless router open doesn't mean that I am implying that it is okay for anyone to connect to it and use it whenever they want.

      An open network does not give implied consent to use anymore than an unlocked house or car.

      However, if you did leave your front door open, your insurance company probably won't pay you for any stolen goods.

      --
      What?
    2. Re:Yet you do this regularly by Qzukk · · Score: 1

      An open network does not give implied consent to use anymore than an unlocked house or car.

      So an open website with no encryption or authentication requires me to obtain in advance permission to use it? I wonder what CowboyNeal's phone number is, I think I'll need to get permission for every time I hit reload....

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    3. Re:Yet you do this regularly by DigitumDei · · Score: 1

      Apparently, a wifi login *isn't* the electronic proxy for the person.

      I can compare this to an open home, you to cell phones, another to bar with bouncers and yet another to joyriding a car.

      In the end wifi products are shipped from the factories without security features enabled. Setting them up is easy, securing them requires a bit more knowledge. People such as this man abuse this knowledge. He knows, *YOU* know that in all likelyhood the owner of the wifi would not let anyone join his network if he knew how to secure it. Lack of knowledge on how to secure something, does not make it legal for all to use. In fact when people walked past his car he'd quickly shut his laptop. He knew he was guilty.

    4. Re:Yet you do this regularly by Peyna · · Score: 1

      The purpose of a website is to provide information to the world; therefore it is impliedly open.

      However, a wireless network's purpose is to provide access to whomever its owner decides it wants to. It is therefore not impliedly open.

      Looking at website is like looking at a sign I have in my front yard.

      Connecting to my wireless network is like tapping into the telephone wires running into my home to make your own phone calls.

      --
      What?
    5. Re:Yet you do this regularly by Kintanon · · Score: 1

      Yes, and the owner has quite obviously decided to give access to anyone who tries to connect. Because that's the way his access point is configured.

      Kintanon

      --
      Check out JoshJitsu.info for Brazilian Ji
    6. Re:Yet you do this regularly by Asic+Eng · · Score: 1
      But the Wifi login *is* the electronic proxy for the person. It *is* where the person gets to say whether its OK to come in or not.

      I agree. However people don't configure their hardware correctly - we know this, right? So when our computer connects to their network we are not really sure that this is ok to them. In fact, this guy in the story apparently assumed that they didn't like it as he was trying to hide the fact that he was accessing their network when they were around.

      On the other hand when our phone connects to the mobile tower we are actually sure that this is ok.

      I don't think the internet has to change to accomodate all newbies. A certain procedure was agreed upon and newcomers ought to learn about this and follow it. However using something assuming that the owner doesn't want you to, is still morally wrong. I wouldn't use an AP assuming that the owner wouldn't want me to.

    7. Re:Yet you do this regularly by julesh · · Score: 1

      But the Wifi login *is* the electronic proxy for the person. It *is* where the person gets to say whether its OK to come in or not.

      There is no login to an unsecured wireless network -- you just start using it, that's the beginning and the end of it. There's no login to a WEP secured network either, but you need to get hold of the key.

      WPA supports network login (except when using WPA-PSK, which is equivalent to WEP except it uses better encryption and authentication), but no older protocol does.

    8. Re:Yet you do this regularly by Peyna · · Score: 1

      Yes, and the owner has quite obviously decided to give access to anyone who tries to connect. Because that's the way his access point is configured.

      But you know that your assumption is wrong, and simply make it to justify your actions, because many access points ship in this configuration and therefore the owner may or may not have decided to give access to anyone who tries to connect.

      --
      What?
    9. Re:Yet you do this regularly by Kintanon · · Score: 1

      But I don't know that my assumption is wrong. That's the point. If I see a sign in front of a house that says "Free Lemonade, come on in!" I assume that the owner of the house put it there and he doesn't mind if I come get some lemonade. But I don't know whether I'm right or not. The access point is designed to allow you to choose who you give access to. Someone chose to give access to everyone on this WAP. I don't know if that was intentional or not. But I'm going to assume the owner meant to do it, just like I'm going to assume that the Free Lemonade sign is legit. Otherwise I have to rethink my entire trust framework and start calling the 7/11 to ask permission to come inside.

      Kintanon

      --
      Check out JoshJitsu.info for Brazilian Ji
  60. Finally by NanoWit · · Score: 2, Funny

    Finally Americans can make sarcastic comments about the police state across the pond. Sure, we're in the same situation but at least someone else is now too.

    IN YOUR FACE, UK!!

    1. Re:Finally by CaptainFork · · Score: 1

      In due course we (the UK) will restore soverignship over the north American terratories. Think about that before you mock our great institutions of power.

  61. Re:Is it OK if I look through your window to watch by fyonn · · Score: 1

    A better analogy than stealing hifi would be if looked through your window and watched your TV that you left turned on. Is that illegal? Is it immoral?

    well, if this was in the UK, and the ownder of the house did not own a TV licence, then it would be a crime on the part of anyone who watched it, whether they knew about the licence or not, whether they were inside the house or not.

    dave

  62. Leave my open network alone.... by sykjoke · · Score: 1

    Look, I have unlimited ADSL account. I leave my WIFI Open for anyone who happens to be in range to connect to as a public service, if that's someone parked in there car acting shifty then so be it.
    If I wanted to block access to others it's easy I can hide my router, put in a security key and only allow certain mac addresses to connect, but I don't and anyone else who doesn't is 'asking' for people to use their WIFI point.

    10% of the male population dies in the English civil war so that we didn't have to rent world+dog from the landlords and that includes open WIFI networks.

  63. First UK Punishment? by thegrommit · · Score: 1

    Wireless Hijacker Dealt First UK Punishment

    I'm fairly sure the UK legal system has punished people before. Just not necessarily for unapproveed use of a wireless network.

  64. Sorry I forgot to deal with your other point by NigelJohnstone · · Score: 1

    "This is quite different to the situation where my phone connects automatically to a nearby tower, (without me even being aware) *provided* by the mobile phone network company for that very purpose."

    Not so, its provided by *a* mobile phone network, for *a* user. There is some chain of contracts that stretch from that tower operator to your service provider and to your headset seller and to you, the login is the proxy for that chain of contracts.

    The WiFi is no different, it is there for some purpose, to provide network to *a* user by some entity. The login is a proxy for that.

    What they're saying here is that the login can't be taken as a proxy for permission but then you can't have open wifi because you can never know if the intent of the person providing it was to permit open wifi or not.

    The login was the way they give permission or not and they've just discounted that!

    1. Re:Sorry I forgot to deal with your other point by SimilarityEngine · · Score: 1

      I just submitted a reply to your previous post, but it got lost somehow in the ether - apologies if it unexpectedly turns up.

      My basic point is simply this: although your arguments are perfectly valid, I don't see how they ultimately affect the guilt/innocence of this particular person.

      I have said that he did not have the owner's permission - a point which you have addressed fully (for me anyway). However, even had permission been sought, it would not have been given - the guy knew this and I think this is what makes the ethical difference between him and me-on-my-mobile. If he did not know, then why the suspicious behaviour? Why didn't he ask permission?

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
    2. Re:Sorry I forgot to deal with your other point by asdfghjklqwertyuiop · · Score: 1

      Why didn't he ask permission?


      As mentioned several posts up, he did. His computer said "hi, can I connect", and the AP said "sure, here you go".

      If that wasn't the intention of network operator due to their own incompetence, then that is their fault not the fault of the guy who connected.

    3. Re:Sorry I forgot to deal with your other point by SimilarityEngine · · Score: 1

      Is this fair: you are saying that it is always perfectly okay to assume that a computer reflects the intentions of the owner as far as allowing/disallowing connections goes.

      If so, then we differ on that point, hence perhaps the length of this ever-expanding thread ;-). It is my personal belief that, in the case of an unsecured home wifi network, there is a significant chance that the owner is incompetent, and doesn't want to share with me. Therefore I would not take advantage of the offer made to me by his computer.

      Shall we agree to disagree?

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
    4. Re:Sorry I forgot to deal with your other point by SimilarityEngine · · Score: 1

      Oops, sorry, just noticed you're not the same person I was corresponding with before. Never mind, same point can be made, hope I haven't offended anyone......

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
    5. Re:Sorry I forgot to deal with your other point by NigelJohnstone · · Score: 1

      "If he did not know, then why the suspicious behaviour? Why didn't he ask permission?"

      If the Brazillian man was not a terrorist then why did he run from the armed plain clothes police officer? Why the suspicious behaviour? Why didn't he ask permission to run away?

      Sorry, but he either hacked into their network or not. To me hacking involves more than a computer automatically connecting to a network. I don't like these guilty unless you can prove otherwise laws.

    6. Re:Sorry I forgot to deal with your other point by SimilarityEngine · · Score: 1

      If the Brazillian man was not a terrorist then why did he run from the armed plain clothes police officer?

      I don't know. If you're asking me to speculate, it was because he was being chased by a plain clothed man with a gun.

      I don't like these guilty unless you can prove otherwise laws.

      Nor me, but there is no indication in the article that he was convicted without a fair and proper trial. If he has been, I'm sure we'll hear about it soon.

      Sorry, but he either hacked into their network or not

      The court decided that he hacked into their network. Sorry, that's the best answer I can give in the circumstances. I wasn't there.

      --
      Those who can make you believe absurdities can make you commit atrocities. - Voltaire
  65. This is very bad because... by Anonymous Coward · · Score: 0

    This is a really bad precedent.

    How do I know when a WiFi AP gives me an IP if I am a hijacker or allowed to use it.
    I leave my WiFi open, around town (Edinburgh) there is so much open WiFi that if you can't connect on 1 street you can on the next.

    This case sets the precedent that there is no way of knowing if an AP is for public use.

    Public WiFi Lockdown.

    Please stop droning on about cookies and open windows and cars and HiFi's - WiFi is none of these.

    This judgement is totally wrong, the guy did nothing wrong, this is a fallback law, we think you did something wrong although we have no crime, no body, no murder, but you look the type

    1. Re:This is very bad because... by Peyna · · Score: 1

      First of all, afiak, there is no such law in the United States (except maybe a few really anal locales).

      Secondly, if such a law did exist, it could approach the issue one of two ways.

      First, the law implies that all AP's are private unless specifically shown to be otherwise (i.e. a public welcome message before allowing access stating who is allowed).

      The other way would be that the law imples that all AP's are public unless specifically shown to be otherwise (i.e. you need some basic form of authentication before being able to access the network, or there is some form of notice).

      The first option (assumed private) has the following benefits:

      1. Majority of networks are not intended to be public access.
      2. Many APs are sold in an open configuration.
      3. Most users are not smart enough to otherwise secure their network, even though if they knew anyone could access it probably would want to know how to stop that.

      Therefore, it would protect a lot of people; and once you knew about the law, you would know that you can no longer connect to any access point without permission first.

      The second option (assumed public) has the following benefits:

      1. There will be more networks available to freely connect to.
      2. If you want to open your network to the public you don't have to do anything.
      3. It removes any burden of the end user of having to determine if the network is open.

      However, I feel the first option is probably the better one, and the attitude you should probably take if there is no such law.

      Most people that willingly want to open their network to the public know enough to be able to put some kind of message out to those connecting to it that it is open to the public.

      Most people that don't want to open their network to the public probably don't know how to do much more than plug their AP in and use it.

      There's more to it than that, but it does make good public policy sense to assume all networks are private until proven authorize. Just like any other kind of property.

      Just because there isn't a fence around that lot on the corner, doesn't mean it is public property, or that the user wants you to use it.

      This case sets the precedent that there is no way of knowing if an AP is for public use.

      Simple, if you want your AP for public use, you simply force them to "login" through a web browser first, at which screen you provide an anonymous login and a message stating that it is for public use.

      It is just easier to imply all networks are private, than it is to imply all are public. Especially when you consider that in most cases a private network is preferred, and in most cases the person running the network won't know how to make it private.

      --
      What?
    2. Re:This is very bad because... by JackDW · · Score: 0, Redundant

      > How do I know when a WiFi AP gives me an IP if I am a hijacker or allowed to use it. Well, you're a techie user, so you know that most access points are left insecure by accident. It is up to you to either seek permission to use it, or not use it, as you are perfectly aware that by using it you are using someone's bandwidth, etc., without their permission. > This case sets the precedent that there is no way of knowing if an AP is for public use. Yes. What's the problem? The judgement is not wrong. The man is a thief, because he deliberately sought an insecure access point and used it for free Internet access without permission. This is a crime: there is a victim (AP owner), a perpetrator (the thief), and malicious intent.

      --
      You're an immobile computer, remember?
    3. Re:This is very bad because... by Anonymous Coward · · Score: 0
      First of all, afiak, there is no such law in the United States (except maybe a few really anal locales).


      Nationwide, RICO is used about 10,000 times a year. Many times it is used by law enforcement agencies against innocent people (who have been 'fingered' by a jail house snitch trying to cut a deal) and before the raid the cops discuss how they are going to divide their 'loot', i.e., the 'guilty property' they are going to confiscate and sell later so they can buy new police enforcement toys. I saw this scenerio take place on an episode of "Cops" featuring the ex-sheriff who now markets police persuit videos on TV. At least half of the stops and arrests viewed on "Cops" are illegal and blatant violations of civil rights.

      But, theft of service is theft of service, regardless if the wifi connection is unsecured. If you use an open AP to access the Internet services of another person without their permission you are stealing services purchased by another. Even if their contract for those services requires them to keep access secure, it merely means that they are violating their contract. It doesn't mean that you have rights to free access.

        You are a thief, and your assertions to the contrary are mere sophistory.

    4. Re:This is very bad because... by Anonymous Coward · · Score: 0

      You are a thief, and your assertions to the contrary are mere sophistory

      Your attempt to sound intelligent failed the moment you misspelled "sophistry."

  66. Re:Is it OK if I look through your window to watch by ajs318 · · Score: 1

    Not true. Ignorance of the facts is a defence. If the person watching TV from outside the house can show they did not know that the set was unlicenced, they are not committing a crime.

    --
    Je fume. Tu fumes. Nous fûmes!
  67. Then you can't have open WiFi by NigelJohnstone · · Score: 1

    "In the end wifi products are shipped from the factories without security features enabled....., does not make it legal for all to use. "

    Its not that they have security features switched off, they have 'allow everyone' switched on. If you ignore the login as the proxy for permission then you can't have open wifi.

    Likewise you can't walk in the open forest because forests are open by default, or swim in the open sea because sea is open by default, or walk through an open square because the square is open by default.

    "*YOU* know that in all likelyhood the owner of the wifi would not let anyone join his network if he knew how to secure it"

    I know nothing, I select "This Network", I make no attempt to disguise who I am, my computer requests a connection and the remote wifi says "sure, here have ID 1847565". If I walk in the open forest and the intention wasn't that it was supposed to be open isn't that just trespass?

    Can I asked, if I said that it was the equivalent to 'trespass' would you accept that as true?

    1. Re:Then you can't have open WiFi by DigitumDei · · Score: 1

      You say you know nothing, that its just your PC automatically connecting.

      The guy didn't just accidentally get connected to the wifi network just once. He repeatedly returned to the area and sat outside the guys house in his car. When people walked past he would close his laptop.

      So now slashdotters are trying to claim that because the network was not secured, the fact that this guy went out of his way to use/abuse isn't wrong.

      If you walked into a forest every day for 3 months, and everytime the owner or one of his neighbours came past you hid or ran away (acting suspiciously), you definitely could end up paying a fine for trespassing.

  68. unbelievable by Anonymous Coward · · Score: 0

    How about free wireless community networks? I use other peoples' access points all the time whenever I go places and I keep my access point open for everyone to use. Its all about sharing and not about an illigitimate totalitarian government coming up with reasons to arrest people.

  69. IT WILL NOT! by bradleyland · · Score: 2, Informative

    "Any Windows machine with a wireless card will automatically connect to any unsecured wireless access point. Period. Allow me to repeat this. Any Windows machine with a wireless card will automatically connect to any unsecured wireless access point." I'm so sick to death of hearing this. Windows will NOT connect to an unsecured wireless network automatically with the SP2 wireless tools. The connection will show up in your list, but you have to click the connect button before it will actually connect you. Once you've connected, the network shows up in your profile, and the OS will continue to use the network until you delete it. The fact is you must actively select the unsecured wireless network in order to use it.

    1. Re:IT WILL NOT! by Anonymous Coward · · Score: 1, Interesting

      So, John "Idiot" Doe tells Windows to connect to his "linksys" or "WLAN" network. Other than plugging the damn things in, that's the only required step to wirelessly connect his computer to his network, right? Do I have to tell you what the net effect of that is? Yes, from then on, Windows, SP whatever, will happily connect to every access point by the same manufacturer which hasn't had its configuration changed. The fact that one specific operating system doesn't actually connect to any and all open networks is irrelevant. There are operating systems (and drivers under XP SP2 too) which do that, plus normal behaviour by exactly the idiots whom you're trying to protect causes the same situation on all operating systems, even those which have some inhibitions.

    2. Re:IT WILL NOT! by Creedo · · Score: 2, Informative

      I think it depends on the level of service pack you have. My laptop auto-connected until SP2. Now, it behaves as you say.

      --
      All that is necessary for the triumph of good is that evil men do nothing.
    3. Re:IT WILL NOT! by Anonymous Coward · · Score: 0

      802.11 is designed to allow "roaming" between access points with the same SSID and different BSSIDs. Any driver following the official spec will do what you describe. That this could result in a criminal violation is the fault of overzealous governments, not drivers or the design of 802.11. A criminal violation should require at least some attempt at subverting an authentication mechanism. Even the former head of the FBI's computer crimes division said something to this effect, that current laws are getting in the way of widespread wireless internet access.

    4. Re:IT WILL NOT! by ltbarcly · · Score: 1

      Yea, and since everyone patches there systems regularly, you make a valid point.

      You moron. This is like saying "SUV's DON'T ROLL OVER because new ones come with active stability control."

      Windows DOES automatically connect to unsecured access points. Especially considering that many many people don't use the SP2 wireless tools even if they have them, they use the linksys or Dlink connect tool that comes with wireless cards.

    5. Re:IT WILL NOT! by TheLogster · · Score: 1

      What happens if your laptop can't run SP2*. I put in my wireless card, and "pop" - a nice message appears saying that I have connected to my neighbours AP. So - I have to go "no - bad wireless card, connect to this AP with this wep key" (* I have a 600Mhz, 256mb, 40GB laptop - with SP1 on the system take ~180 of ram, with SP2 it is close to 250mb. No - I can't put in more ram, cause the hardware won't let me)

    6. Re:IT WILL NOT! by jack_csk · · Score: 1

      You probably haven't seen more than a couple of wireless network cards. Most of the manufacturers have their built-in tool that automatically search and connect for the best signal available.

    7. Re:IT WILL NOT! by julesh · · Score: 1

      My laptop auto-connected until SP2. Now, it behaves as you say.

      Whereas my desktop didn't at any point. Neither did it do so under Win2K. To get auto connections you have to either check the relevant box in Network Connections/Wireless Connection/Properties/Wireless/Advanced (which has existed since the very beginning of wireless support in windows), or install a 3rd party network connection utility. My experience with these has suggested that most don't connect automatically: I've used utilities supplied by Belkin, LinkSys and D-Link, and none have autoconnected.

      It might be that your card's installer is setting the option for you, in order to help you install it more easily, and the SP2 install deselected it.

    8. Re:IT WILL NOT! by Lehk228 · · Score: 1

      do you have to run XP on that laptop? try installing 2k, 256megs is not enough for XP to run well but 2k should run nicely if all your hardware works.

      --
      Snowden and Manning are heroes.
    9. Re:IT WILL NOT! by Bent+Mind · · Score: 1

      Though 2k is a good OS, I'm a little confused as to why XP wouldn't work. I've used XP SP2 on a 266MHz laptop with 64MB RAM. Granted, you can do much with it. However, my current system is a 2.4GHz Athlon XP with 256MB RAM. I have no problems running several programs, including Doom 3. 256MB of RAM is ample memory for XP to run.

      --
      Request a Linux Shockwave player here: http://www.macromedia.com/support/email/wishform/
    10. Re:IT WILL NOT! by Bent+Mind · · Score: 1

      Minor mistake... Granted, you CAN'T do much with it.

      Don't know how I missed that in the preview.

      --
      Request a Linux Shockwave player here: http://www.macromedia.com/support/email/wishform/
  70. WIFI stealing different twist by Anonymous Coward · · Score: 0

    Ok I agree it is wrong what he did and yes the average user knows nothing about their wireless equipment. Everyone keeps talking about my door has a lock I leave it unlocked you are not allowed to come in and help yourself... This refers to physical property and should not be used. This case refers to radio waves if you do not wish someone to listen, do some reasonable effort to stop them (WEP in this case). If you do not it could be construed as open for use like FM radio and TV signals. Think of this as CB radio open for all to use.

  71. Free Public wireless by the city -Dayton by chadbailey · · Score: 1

    Downtown dayton provides free wireless. I guess the first person there that uses it is going to get arrested? http://www.harborlink.net/news/04-07-05.html

  72. Can I use it? Yes, here have ID 198675 by NigelJohnstone · · Score: 1

    "An open network does not give implied consent to use anymore than an unlocked house or car."

    Can I connect to your network? I am foo bar.
    Yes, "foo bar", here have ID 198675 and IP address 192.111.111.111

    What do you mean '*implied* concent'? Surely 'explicit concent'!

    1. Re:Can I use it? Yes, here have ID 198675 by Peyna · · Score: 1

      Can I connect to your network? I am foo bar.
      Yes, "foo bar", here have ID 198675 and IP address 192.111.111.111

      What do you mean '*implied* concent'? Surely 'explicit concent'!


      The problem is that you KNOW that just because it gave you an IP address does not mean that the owner wants their network public. More than likely, they're not smart enough to figure out how to add any access controls to it.

      In fact, Joe Bob User probably doesn't know his computer is out there handing out IP Addresses, or even know what one is. So how could you possibly reasonably conclude that his AP giving you an IP Address amounts to him giving you access to his network anymore than him leaving his front door unlocked amounts to him giving you access to his house?

      You're playing by a different set of rules than the owner of the network, so of course your way makes sense to you.

      --
      What?
    2. Re:Can I use it? Yes, here have ID 198675 by NigelJohnstone · · Score: 1

      "In fact, Joe Bob User probably doesn't know his computer is out there handing out IP Addresses, "

      But I don't know Joe Bob, from Smart Alec.

      "More than likely, they're not smart enough to figure out how to add any access controls to it."

      Yet they're smart enough to run a home network and more than one computer? Yet they're using shared public broadcast signals.

    3. Re:Can I use it? Yes, here have ID 198675 by Peyna · · Score: 1

      Yet they're smart enough to run a home network and more than one computer? Yet they're using shared public broadcast signals.

      Step 1: Go to Best Buy and ask a sales rep what you need to buy.
      Step 2: Go home and connect the right wires to the right places (pretty simple).
      Step 3: It works, but your network is insecure.

      Wireless networks are VERY easy to setup, which is a "good thing" and a "bad thing."

      --
      What?
    4. Re:Can I use it? Yes, here have ID 198675 by NigelJohnstone · · Score: 2

      My computer is setup to connect to the nearest WiFi connection at the library down the street.

      My next door neighbour:

      Step 1: Goes to Best Buy and asks a sales rep what he needs to buy.
      Step 2: Goes home and connects the right wires to the right places (pretty simple).
      Step 3: It works, but his network is insecure.

      Now my WiFi connects to his WiFi instead because its nearer. Am I now a hacker?

  73. Here's my story by Himring · · Score: 1

    I moved into a new neighborhood where the front part has broadband cable, but the back part does not. The cable company ended their rollout about 200 feet from my house. DSL is also not available. I've had broadband for years, and found myself going nuts that I could not get it. I tried everything including cellular wireless internet access, which was too expensive and sucky. A neighbor told me about several wireless APs in the "good" side of the neighborhood and that he surfs everyday, broadband, by using a cheap, linksys usb wireless adapter. So, I bought my own and did indeed see the two or three APs and was able to use the one that was unsecured.

    I began looking into what I was doing was illegal or not as I do not wish to break the law. It seems only lately have things really ramped up with these news cases. Before, I wasn't sure and even felt it was ok so I've kept doing it. I also call the cable company all the time inquiring as to when they will finish their rollout, but they keep saying it's not available and lying about the time when it will be.

    According to what I'm reading here, I am indeed breaking the law and should stop immediately. So, I will have no broadband now and no way of getting it even though the signal is coming straight into my house and XP attaches automatically.

    (Sigh) My kingdom for broadband....

    --
    "All great things are simple & expressed in a single word: freedom, justice, honor, duty, mercy, hope." --Churchill
    1. Re:Here's my story by saintlupus · · Score: 1

      According to what I'm reading here, I am indeed breaking the law and should stop immediately. So, I will have no broadband now and no way of getting it even though the signal is coming straight into my house and XP attaches automatically.

      Leave your house. Talk to your neighbors. I'm sure that at least one of them will give you permission to use their wireless network.

      --saint

  74. Money! by Anonymous Coward · · Score: 0

    Maybe I should unsecure my WiFi, and sue the first one that uses it with Windows autodetection..

    Profit!

  75. Re:Is it OK if I look through your window to watch by kt0157 · · Score: 1

    In the UK a TV licence is required to operate a television receiver (a television receiver being a device that receives television, television being moving picture signals broadcast from afar, afar including cable and satellite but not CCTV cameras). Neither ownership nor watching TV per se require a licence. Someone outside a house peering in through the window cannot reasonably be said to be operating a television. K.

  76. so this means... by ZapTheDingbat · · Score: 2, Interesting

    OK so given the outcome of this case does this mean that if that if a connection was War Chalked it is then OK to use it or does that require the provider of the connection to have chalked it and if so how do you know the provider made the chalk.

    maybe we need another kind of mark to denote that the chalk was made by the provider... but then we would need a further mark to denote that that, previous, mark was made by the provider...

    Or we could make the AP advertise that the advertisement of an open network is advertising an open network...

    Or we could assume that people are capable of logical thought and therefore if they are advertising an open network, then you can use the open network.

    Given the assumption that is it OK to use a AP if there is a notice advertising its presence. However, it is illegal to use it if there is only the SSID. To see a notice outside someone's house, informing you that there is a network you can use, requires nothing more than perceiving the light emitted (reflected) from the sign and this means it is OK to use the network. Yet receiving a notice outside someones house, a bit further down the electromagnetic spectrum, informing you of the open network doesn't make it legal.

    Does anyone know exactly what parts of the electromagnetic spectrum are legally binding?

    On an entirely different point If it is legal to use a network if there is a Visible notice denoting its presence. If i write on the Side of my car my intention to use available networks does that make it legal?

    --
    ZapTheDingbat http://www.zapthedingbat.com
  77. IP != Person by Riskable · · Score: 2, Insightful

    Repeat after me:

    An IP Address is not an identity
    An IP Address is not an identity
    An IP Address is not an identity!

    If a crime is committed and it is traced back to an IP, that is A START of an investigation and should NEVER be the end of it! Far too often do we instantly assume that just because the crime came from a certain IP address, the person who owns the machine is the person who committed the crime.

    All an IP gives you is the "place" part of the puzzle. Worse than this is the fact that it is virtual and multi-dimensional. The "place" where the crime occurred actually exists in many physical locations at once and can be nearly limitless in scope.

    More important in these types of investigations is the "means" and the "motive". If neither exist for the person behind the IP, it is likely that his machine (or connection) merely acted as a proxy.

    It just seems *WAY* too easy to frame someone for an Internet-related crime. Just find some motive and place "the means" on their machine.

    If I were on a jury for any sort of Internet crime, the amount of evidence against the accused would have to be ENORMOUS for me to even consider a "conclusion beyond a reasonable doubt".

    --
    -Riskable
    "Those who choose proprietary software will pay for their decision!"
    1. Re:IP != Person by mwvdlee · · Score: 1

      RIAA:
      -Identity: IP can be traced.
      -Motive: Free music.
      -Means: They have an IP, thus also a computer.

      Yes, the same RIAA that sues dead people for using P2P. (http://www.theregister.co.uk/2005/02/05/riaa_sues _the_dead/).

      You're defending the way it _should_ be (morally right), not the way it _is_ (morally wrong but legally right).
      You may be correct in assuming no jury would ever accept such evidence, but do you really want to be at the money-stricken side of a lawsuit because somebody thought it would be okay to download terabytes of MP3's and movies over his/her WiFi connection, even if you'll win?

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
  78. Windows doesn't automatically connect by Malc · · Score: 1

    "Perhaps I should secure my neighbour's wireless connection for him before Windows automagically connects to it and gets me arrested!"

    Windows doesn't automatically connect. It warns you when you try to connect to an open network. Maybe older versions doesn't, but Windows XP SP2 does, and that's what the majority of people are using with wireless (or at least the majority of people are on XP, and should have SP2 installed.)

  79. FFS by JackDW · · Score: 0, Flamebait

    FFS. There is a really simple principle here. IT IS WRONG TO STEAL. Using someone else's network, someone else's bandwidth and someone else's electricity without permission is stealing.

    I can only assume that this kind of thing is now so common amongst Slashdot users that it is now assumed to be morally justifiable. In fact, it seems that most of the people who think that this thief should not have been prosecuted are actually blaming the owner of the insecure hotspot. Yes, that's right - you are saying that theft is the fault of the victim, not the thief.

    I agree that the hotspot should have been secured, just like front doors should be locked. But an unlocked front door is not an invitation to come in and take whatever you want, and neither is an insecure hotspot.

    --
    You're an immobile computer, remember?
    1. Re:FFS by JackDW · · Score: 0

      Flamebait, eh?

      I think that my response is well written and accurate. It states a clear and unambiguous moral principle, ignoring irrelevant arguments about how people should secure their hardware, etc., and cutting straight to the heart of the matter.

      I stand by everything I said. If you disagree, then I would like to know why! Perhaps the moderator disagrees with me and thinks that it isn't stealing to use someone else's property without their permission?

      --
      You're an immobile computer, remember?
  80. WEP should be required by radarsat1 · · Score: 1

    perhaps its time that companies stopped selling routers that allow WEP to be turned off. Make it a requirement that users secure their own networks. This can be made very easy by just asking users to supply a password when they're setting up, you know, by reading the instruction manual. It isn't more difficult than programming a VCR, for example. If it was a required step, then all this talk of "if you leave your network open you should expect people to use it" would be moot.

    1. Re:WEP should be required by stinerman · · Score: 1

      Well if I wanted to run an open access point, I'd have a hard time doing so if WEP cannot be disabled. A much better solution is to have 64-bit WEP enabled with a default key out of the box. Your average Joe wouldn't ever change the key, but it lets any passersby know the AP is private.

  81. Nearly right.... by Anonymous Coward · · Score: 0

    Stop it earlier:

    However, a wireless network's purpose is to provide access

    That is all.

    AP controls are there to do the remainder of your sentence.

  82. Vendors need to fix this by laffer1 · · Score: 1

    I have used my neighbors wireless network in the past. After several stories like this, I'm starting to get nervous about it. I think the solution is that vendors need to ship routers with a unique WEP key (or whatever security method) and include that key in the box. Then joe sixpack comes home with one of these babies, he has to add the key to his pc/mac/whatever before he can use it. Sure it will increase tech calls a bit, and they will probably need an easy method to reset the device to no security in case the key is lost.

    If someone goes to the trouble to reset it or turn it off then I should be free and clear to use it.

    My neighbor knows that someone with a Mac laptop is using his network. He knows the hostname and a rough guess at the operating system because he scanned me. He even knows it might be me. It hasn't stopped him from using wireless with no security of any kind. All my other neighbors are smart enough to use WEP or MAC address protection but him. Did I mention he's taking network security and system administration courses? My wife had a class with him this summer and he talked about it during class. She was using my laptop at the time. After he found out where she lived, he asked her the hostname but wouldn't say. :)

    1. Re:Vendors need to fix this by stinerman · · Score: 1

      It makes for an interesting scenario:

      1) Set up open access point
      2) Wait for someone to connect
      3) Sue for unauthorized access and theft of services
      4) PROFIT!

      You don't even need a "???"!

  83. One more useless analogy! by Anonymous Coward · · Score: 0

    My wireless network doesn't depreciate in value with use, my car does.

    Thank you, drive through. Now.

  84. Re:IT WILL TOO! (sometimes) by Anonymous Coward · · Score: 0

    In cases where it's a router default SSID that you've already connected to previously (linksys, netgear, belkin, etc.) it will be in the list of "friendly" APs that will be connected to automaticly and without confirmation in order of preference.

  85. Objects CAN be the standard by Apotekaren · · Score: 1
    When on earth did "This object let me do it" become a standard of legality?!
    Well, take a subway-gate. What if the mechanism for the tickets hasn't been activated. You walk to it, and it lets you through. You haven't jumped a gate, and as such not broken any rules. No-one could fine you for that. But I guess that this is very much the same as with a WLAN; if you know it's not supposed to work like that, and you still do it, it's wrong. But accessing a Open AP cannot be seen as a criminal act if you did not know you weren't allowed to do it. Just like stolen goods, I doubt no-one would imprison you for buying it, if you honestly thought it was clean.
    --
    She: Hey, are you a traitor? Me: No, I'm atheist.
    1. Re:Objects CAN be the standard by 16K+Ram+Pack · · Score: 1
      I think context is important here.

      If you are sitting in a hotel and detect an open hotspot, you could well assume it is the hotel's and not the house down the road.

      However, in a predominantly residential area (particularly when you are sat in your car outside), it's safe to assume that someone isn't making an accidental hookup.

    2. Re:Objects CAN be the standard by Anonymous Coward · · Score: 0

      I disagree. I think everyone on the subway is aware that it costs money to ride the subway, don't you? Simply because the gate was broken doesn't mean the people with authority over the subway intended for it to be a free ride day.

      It's the same with when you go to the supermarket...you KNOW the beer costs money, and just because it hasn't got a price tag on it because the stock clerk was lazy doesn't mean you can assume it's free (as in beer).

    3. Re:Objects CAN be the standard by Apotekaren · · Score: 1

      I counter-disagree, atleast on the subway issue. I know of cities where public transportation IS in fact free. But what is of question, is that can the "free gate" be seen as a invitation to ride for free? Yes, since it might be just counting passengers on that day, or it might be a kind of a "relic" from the time they DID charge for the fare.

      A price tag is different. You can only assume it's free if it has a pricetage with 0.00 on it. Just like a WLAN with no encryption. Both have they're chances of being mistakes, or for real.

      So I still think that a Open WLAN can be seen as an open invitation, but only within the borders of logic and reason. Use your brains out there!

      --
      She: Hey, are you a traitor? Me: No, I'm atheist.
  86. Huh? by setzman · · Score: 1
    Windows automagically connects to it

    Please tell me what "Windows" you have that automagicaly connects to a wireless network. I have PCs with XP Home (SP2) and XP Pro (SP2) in which it takes approximately 30 minutes each to configure/test/reconfigure before I'm able to get them on the wireless lan. Also, would you tell me whether or not your "Windows" drops the wireless connection at least once every half-hour and wastes a minute trying to reconnect?

    --
    C:\>
  87. Maybe I'm tired by Buskaatt · · Score: 1

    ...but sometimes /. submissions seem totally senseless.

    "Perhaps I should secure my neighbour's wireless connection for him before Windows automagically connects to it and gets me arrested!"

    Perhaps instead you should buck up.

  88. Bleh by Anonymous Coward · · Score: 0

    Wow.. this has really got me pissed. I'm going home and make a public AP no matter what my ISP says...

  89. Mod parent up! by Kurisuteru · · Score: 1

    Except for the fact that every bouncer would know not to let underage people in. (insert lame joke about bouncers' brain capacity here.)

    I for one also support the car analogy, as do most insurance companies - at least to a degree. If you leave your keys in the car - and some dude drives off in it and "exports" it to another country - you either get nothing from the insurance company, or you get a fraction of the cars' worth. Don't leave your keys in the car! All new cars I know of have a remote control for the locks. The instruction manual explains how to use this.

    People do read the instruction manual for a new car, don't they? Sadly, fewer actually read the instructions for a new computer device - such as a WiFi router. They're supposed to be so easy to use it's not necessary (as far as the user is concerned). If they'd care to read the manual, it will explain that the network is open by default, and go through procedures to make your wireless network private.

    I don't want a mandatory "driving license" for using a computer, but If a user haven't studied the capabilities and configuration of a device, the user shouldn't... use it. At least until someone with the know-how sets it up.

    Or, simpler yet, if manufacturers turn *on* WEP by default, with a default access key, and then forces the user to change the SSID and key the first time the equipment is set up, they could just add a couple of pages to the manual explaining how to connect to it in Windows. No more difficult than using it anonymous. Just a couple of fields to fill in.

    --
    Blogs are mainly just the Geocities homepage of the 2000s.
    - j-joshers
  90. If you think this is theft you're an idiot by Anonymous Coward · · Score: 0

    By leaving the AP open you are GIVING away the signal. No buts about it. If you can't be bothered to use the very very simple tools that come with your AP then you have no business owning one. Why is this so hard for some people to understand? I just don't get it. My AP is open because I really DON'T CARE if anyone happens along and picks up my signal. However, I live in a cul-de-sac in an upscale neighborhood and my signal doesn't reach past my property. If I had hardcore bandwidth restrictions or sensitive data I would enable encryption and take other steps to secure my network. What's sad from my point of view is that the guy could probably have gone to a local coffee shop and used their system for free with no fuss and probably had somewhere more comfy to sit than his car. I just think it's an asshole thing to do to sue this guy. Because he probably just wanted to check his email. The problem with the unlocked door analogy is that IT ISN'T A DOOR. Making it illegal to log on to an usecured AP you don't own is the height of stupidity. The world gets dumber everyday. Paranoia is rampant. We should be enjoying the fact that we are the most priviledged generation ever to live with access to mind-blowing technology that our ancestors would have called magic. But no, we have to have frivolous bullshit lawsuits that destroy freedoms.
    Calling me and others like me "morally bankrupt" is a sham and a cowardly thing to say. Again, if you DO NOT UNDERSTAND YOUR EQUIPMENT, YOU SHOULD NOT OWN/USE IT.

  91. Thanks, Trespass is fine by me by NigelJohnstone · · Score: 1

    "If you walked into a forest every day for 3 months, and everytime the owner or one of his neighbours came past you hid or ran away (acting suspiciously), you definitely could end up paying a fine for trespassing."

    I'll settle for that.

    If you have explicit or implied concent then trespass is only a crime if you refuse to leave when concent is removed. So you can walk in the open forest, even every day for a year if you like and it only becomes a crime if you refuse to leave when you're told its private property.

    You can argue whether he thought he didn't have permisson by his behaviour, fine. But hacking should be more like 'breaking and entering' a much more serious crime.

    There's a world of difference between connecting to an open network and hacking. Just as there is between common trespass and breaking and entering.

  92. what you can do? by v1 · · Score: 1

    I have an open WAP. No strings attached. I even have my SSID changed to "call (my phone number)". Nobody's called yet, though I've seen several dlinks and other adapters tag the AP, and once or twice obtain an IP address.

    The more legitimate open WAPs we have scattered around, the more difficult it will be for the law to judge any unapproved access to an open access point as a de facto illegal activity.

    --
    I work for the Department of Redundancy Department.
  93. Not sure what the crime is... by dick+johnson · · Score: 1

    I know this story comes out of the UK...

    But in the United States, the FCC allows public use of the 2.4 GHz band for wireless.

    The wireless network is unsecured and broadcasting on the 2.4 GHz band.

    The 'hacker' is either on a public street or on his or her own property. (it would be different if you parked in the driveway of the home providing the Access Point)

    The same 'hacker' is accessing a radio spectrum from which the FCC has allowed public access.

    I just don't see the crime here. The only real aggrieved party would be the company providing the broadband.

    --
    - dj
  94. The problem with the door analogy..... by z0idberg · · Score: 0

    is that with a door it is obvious:
    *who owns the door
    *where the door leads to
    *if have permission to enter or otherwise regardless of whether there is a "keep out" or "everyone welcome" sign.

    It is not that easy with a wireless access point.

    This is mainly because:
    1) the wireless network can extend well beyond the physical limits of the property that it is based on.
    2) The only indication of what the network is for is the SSID which is not usually very helpful at all.

    If you turn on your computer and a wireless connection becomes available how do you know if this is a free and open wireless network from a local starbucks or soem freewireless organisation/council (eg http://bayareafreefi.com/article.php?id=96&title=L ondon+gets+a+mile+of+free+Wi-Fi)? or if it is a private network? The SSID most likely will not help and you would most likely have some trouble finding exactly where the signal originates from.

    So IMHO an open (unsecured) network is just that. Open for all to use.

    If you dont secure your network then you are leaving it open for others to use. If you dont want this to happen then secure it in some way (or stop it from transmitting outside your property - not an easy task).

    If there is any security at all then it is closed and private.

    Whether you agree with that or not I dont think the door anaolgy can be used to argue this case one way or the other, it just isnt the same thing. The door doesnt extend way out past the property, you can easily see what the door is connected to and who it belongs to, there arent "free doors" available in the same area. doesnt work.

  95. Improper comparison by SenorChuck · · Score: 1

    The comparison used in TFA is inappropriate. Taking a joy ride in someone's car without permission is being likened to using their WiFi without permission? Unless you're using all of their bandwidth, you're not depriving them of anything.

    I believe a more fair comparison would be passing by someone's home and being able to see what's on their television. You didn't pay for access to see what's on there, and you almost certainly were not granted permission to look in their window to see it.

    Would it be suspicious to have someone standing outside your window watching your television? My vote is on "yes, creepy as hell." I'm pretty sure other laws or ordinances already cover that sort of thing in most localities though... There's no need to prosecute the guy for "stealing internet" unless his use is causing a drain on resources.

    I wouldn't care if people used my WiFi if they weren't hogging it or otherwise using it improperly... which is why I have at least secured it with WEP-128. If you want in badly enough to crack my WEP key, more power to you ;-)

    --
    A wise person makes his own decisions, a weak one obeys public opinion. -- Chinese proverb
  96. Surrounding issues by Goose3254 · · Score: 1

    IMHO, using my neighbors un-secured wireless connection is fair game. I have as much right to the frequency band as they do. If I use that connection to sniff their traffic and get credit card information, logins, etc, all the better. If I use any of that information in a fraudulent manner, then I'm guilty of something. Snatching someone elses email off an unsecured network as they download it is akin to listening when someone reads thier mail aloud. Shut up if you don't want someone else knowing your business. But if you use someone elses login to access thier mail server then you are guilty of fraud, as you just represented yourself as them, even if it's only to a machine.

    The water gets murky when you use someone elses wireless rig to commit a crime, like kiddy porn or GASP! the evil FILESHARING. The owner of the unsecured wireless should be as guilty of criminal facilitation as anyone who rents a warehouse to goodfellas to store stolen goods, perhaps moreso since they're just too lazy to learn how to secure the AP.

    Cracking an encryption scheme or MAC spoofing are different balls of wax though. Even the most simplistic method is akin to a locked door, and breaking it is like breaking and entering.

  97. Re:Deliberately open -- A great legal defense. by fmaxwell · · Score: 1

    I've always thought that it would be a great legal defense if the RIAA/MPAA/BSA/SIIA sued for copyright infringement. If your wireless network is open, how do they prove whether the person uploading/downloading the copyrighted material was you, a neighbor, or some guy in a van outside of your house?

    The downside is that a criminal prosecution could mean the confiscation of every computer in your house and some computer forensics guy combing over every file and e-mail looking for something to implicate you. It could be months, or even years, before you got the systems back. Under this administration, they might just hold them forever without filing charges under some obscure provision of the PATRIOT Act.

  98. Neighbour's wireless by sapped · · Score: 1

    Perhaps I should secure my neighbour's wireless connection for him before Windows automagically connects to it and gets me arrested!"

    True story: I recently got broadband installed at home. After the cable guy left, I whipped out the wireless router I had bought, hooked it up and secured it.

    I head downstairs to access it from my wife's PC. whoa! Unsecured connection available! I figured I must have screwed up so go ahead and resecure the router with password and all again. 30 seconds later my router pops up on the screen. Oops! I just "secured" my neighbour's router. Time to go and introduce myself and explain some router fundamentals...

    1. Re:Neighbour's wireless by Anonymous Coward · · Score: 0

      I did that myself once. I was working for a neighbor, and another neighbor had the same router on default. His config was hosed, and I had to reinitalize his router. Somehow, I enabled WEP on his neighbor's router instead of his. I was, however, able to go in and remove it again.

  99. Re:Knock knock - flawed by Anonymous Coward · · Score: 0

    Broadcasting of the SSID is that "'FreeToComeIn' sign" for the network.

  100. All these analogies suck.. by kiddygrinder · · Score: 0

    A better one would be: You search your neighbourhood for an unsecured wireless network, you find one and piggyback off it ignoring the dollars that you are causing to flow out of your unwitting host's pockets and into his isp's. I don't really see how anyone can defend this as moral, unless you decide that taking advantage of stupid people is moral.

    Just because it's (very) easy to do doesn't make it right.

    --
    This is a joke. I am joking. Joke joke joke.
  101. He must've had an incompetent lawyer. by gblues · · Score: 1

    While the article doesn't mention if the owner of the network was aware of the security features, here's how I would have argued the so-called theft of service:

    Suppose I am a homeowner, and I've got a fancy-dancy sprinkler system. It can be configured to only spray certain parts of the yard. I'm a DIYer, and while I've read the manual, I can't be bothered to finely tune each sprinkler. I've got one in the front yard that happens to spray the sidewalk and some of the street in front of my house.

    Now it gets pretty hot, and let's say a homeless guy walks past and notices my misconfigured sprinkler. He decides to take advantage of it and sits on the curb in front of my house, letting the sprinkler hit him as he passes. He makes a habit of this, and can be seen regularly.

    Would it be proper for me to have the homeless guy arrested for "theft of services" from my misconfigured sprinkler system, even though fixing the sprinkler system is within my means?

    I mean, maybe you could get the guy for loitering or something, but the presence of the laptop and usage of the network are irrelevant. There's simply no theft of service if I'm sitting in a public area (the sidewalk) and the router (sprinkler) gives me a valid IP address (water) when my laptop asks for one. Like the fictitious homeowner, the plaintiff should SECURE THEIR DAMN NETWORK because *then* if the "homeless guy" uses the sprinkler he has to tresspass to do it!

    Sigh, but IANAL.

    Nathan

  102. This should be silly, but it isn't... by t()ybox · · Score: 1


    So if you are sitting in a public place, and you make use of a broadcast signal in that public place, you are a hijacker...
    I suppose, to be fair, that people who use cell phones and experience crossover and don't immediately hang-up, should be convicted also...
    and if my television experiences interferrence can I file a complaint?
    This kind of cavalier judgement sets a dangerous precedent that will only get worse if it starts here in the US, which it will.

  103. better chance if your in your hime by E8086 · · Score: 1

    I've read a few articles on people charged with stealing someone else's internet connection. Two were of that guy in Florida parked in from of someone else's home with a laptop. One was of some kid connecting to his neighbor's connectionn that he setup and had the pword to, another was the guy posessing a cantenna, possibly pointed at someone else's house, now this one.

    NONE are simple cases of WinXP accidentally connecting to the wrong open connection, these people went in search of free internet. If you're driving around in a residental area then chances are the wireless connection is coming from a home, not something given away by a business with a big "FREE WiFi" sign in their lobby.

    It's like stealing electricity. Someone's house may have electrical outlets on the exterior but that doesn't mean you can walk up and recharge your laptop. Correct me if I'm wrong, but doesn't the AP use more power the further away the connecting device is? A laptop in the next room requires less power than a laptop in a car parked in front of the house. By connecting to someone else's wireless work, even an open one, is also using their electrical power through the ap, router, cable/dsl modem and can't forget the led on the ups and/or power strip.

    If you and your neighbor have home wireless networks that overlap. Your AP is in the back of your house and your neighbor's is in the front. It is possible that your neighbor's signal is stronger than yours in your home and XP might accidentally connect to it at times. This might be able to work as a defence if you live in a packed urban area, apt/condo building or houses with 5' between them and if you also have your own network so you can tell the court under oath that you have your own wireless network and broadband connection and because of the placement of the APs your neighbor's connection is stronger in YOUR home and your XP laptop sometimes accidentally auto connects to it.

    I've seen visiting friends with laptops with XP connect to my neighbor's unsecured network, I know because they didn't have to ask for my WEP key.

    --
    F7 doesn't work, ignore spelling and grammar
  104. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  105. my experiences. by Anonymous Coward · · Score: 0

    I was working in West Yorkshire and travelled by train from Todmorden to Leeds every day. One day I missed the train so I opened my Laptop and was composing a few emails to send later when a totally open Airport network appeared. totall open. SSID was airport.
    Naturally, I took advantage of this free connection. But now I could be convicted of theft. Yes the analogy of leaving your door open and me waling in and helping myself is correct. The law in this case is an Ass. A total donkey. They are broadcasting a signal. I have a bit of kit that is equipped to receive it so why should I not be able to do so? If I was to 'break' in then fair enough but if you leave a network totally open then I say fair enough.
    Perhaps someone should devise a standard that says "Set your network name to XXXXX and you are inviting people to share your network and they are absolved of the risk of prosecution"
    If this is not done then the law could be applied to people who have IMHO done nothing wrong.
    In this case they guy was a plonker to be secretive like he was and probabbly deserves the fine.

  106. Uh-huh... by Anonymous+Cowpat · · Score: 1

    I can see our court system is going down the swanny. How can they justifiably confiscate a laptop that may be used many other things (for all we know his kids could do their homework on it) as part of the punishment - that's not a £500 fine, that's a £1500 fine not including the value of the data on it.

    It's like customs confiscating people's cars for having brought too much wine home with them from France - £12,000 fine and the inconvenience of not having a car for the next decade for bringing back too much alchohol.

    Since when did Britain do draconian?

    --
    FGD 135
  107. No lawyer - go to jail by HermanAB · · Score: 1

    My guess is that he didn't have a lawyer, unless he actively cracked the network, which is pretty unlikely. My point being that DHCP amounts to asking permission to use a network.

    --
    Oh well, what the hell...
  108. Seriously, anyone who gets "caught" doing this... by Anonymous Coward · · Score: 0

    ...deserves to go to jail for simply stupidity, if anything. Only an absolute mongoloid moron would be caught doing this. This is like being caught masturbating in your own house.

  109. In the US, there's the "fuck you' factor by wsanders · · Score: 1

    For us 'Merkins, there's the "fuck you" factor (we don't bother with all that Latin stuff.) What this means is that if you grovel appropriately defore the authorities, you will be given leniency. If you're response to everything is "fuck you", you will be treated harshly. An extreme example of this was when, some years ago, two yahoos shot up LA in a botched bank robbery, spraying hundreds of rounds of AK-47 fire everywhere. One of the yahoos was shot in the femoral artery, and his responses to police help consisted of repeated "fuck you"'s. So he was cuffed and left to bleed to death on the sidewalk, even though his partner has been killed minutes earlier.

    I'm sure there's a Latin expression for this, something to the effect that "the law can always be a bigger asshole than you can."

    --
    Give a man a fish and you have fed him for today. Teach a man to fish, and he'll say "WHERE'S MY FISH, YOU IDIOT?"
  110. And for the spelling Nazis - by wsanders · · Score: 1

    - sorry about that "you're". Its Monday morning, and my typings not fully connected to my brain's.

    --
    Give a man a fish and you have fed him for today. Teach a man to fish, and he'll say "WHERE'S MY FISH, YOU IDIOT?"
  111. This happens all the time by AmiMoJo · · Score: 1

    I fix computers for a living, and recently went on a call-out to this blokes house. He was having trouble with his wireless connection, turned out that because his router's wifi was not switched on he had accidentally connected to his neighbours (unsecured) network, and had full net access.

    He didn't even realise, because his internet worked okay, he just couldn't access his ISPs SMTP servers with outlook (i.e. "couldn't send any email").

    --
    const int one = 65536; (Silvermoon, Texture.cs)
    SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
  112. Please post the name of the hospital by Anonymous Coward · · Score: 0

    I want to make sure I *never* go there for surgery. You have vital patient records that can be accessed and deleted by just anyone? You have surgeons who know nothing about the person they are cutting on? Who rely on a computer screen and not a printed out patient record to check for allergies? What, pray tell, do they do if the power goes out? Or the network goes down? Or someone drops the laptop?

  113. The reason it applies to WiFi by Honest+Man · · Score: 1

    Have you ever turned on your TV and watched anything broadcast over the air instead of using paid cable TV? You have? THIEF!! Oh the shock?!!

    People leave their lines wide open all the time, on purpose, so who's responsibility is it to know the difference? The end user, who's a lamer and shouldn't be allowed to use WiFi without reading the instruction book or the guy who uses the wide-open network to browse the internet?

    If people are going to bitch, it needs to be because some 'real' cracking has occured... The headers of a protected network can be captured and decrypted... then the real hijacking can occur - as they use the 'protected' key they snatched out of the air... THAT's wrong and THAT should be punished..

    but....not using something that 'any one of us' would use if available...... If you leave your network open, I'm going to use it - so will the rest of your geek neighbors... Thanks for the gift of your bandwidth.

  114. Re:Deliberately open -- A great legal defense. by Anonymous Coward · · Score: 0

    I've always thought that it would be a great legal defense if the RIAA/MPAA/BSA/SIIA sued for copyright infringement. If your wireless network is open, how do they prove whether the person uploading/downloading the copyrighted material was you, a neighbor, or some guy in a van outside of your house?

    I think (usual disclaimer...) you might be partially liable under some form of criminal negligence law. And let's not forget that there are worse things than copyright infringement, like spamming, phishing, hate speech, etc. Also, a good legal defense usually comes into play when you are in court (or well on the way there) and that's probably a lot less fun than it sounds ;)

  115. Just Be Considerate by SnoopyZ · · Score: 1

    Using up someone's bandwidth may not be polite. However, I use my connection at home for downloading, web browsing, etc. But when I am out and I need to download something, I jump on the closest network and remote into my computer at home to download whatever it is that I want. That way once I start it and disconnect from my home computer, I am no longer using there bandwidth. Using someone elses network is just a convenience thing for me like checking my email on the go. If you are causing problems by using the open network, such as hacking, then yeah, put them away, but if you just need to check a last minute auction on Ebay, or your email, I can't think of anyone that I know who would care if you use their open network. And if they do care, they probably have it locked anyway.

  116. Flying poop. by coolGuyZak · · Score: 1

    It seems to be that it would be better for the analogy to have some form of processing happening in the middle, then send "return packets"...

  117. Doing time... by CrashRoX · · Score: 1

    What are you in for?

    Surfing the web...

    // Anal Rape Begins Now

  118. your analogy does too, actually... by Anonymous Coward · · Score: 0

    Unlike old-school dial-up per-minute usage charges. As a consumer, your 'host' is paying a fixed monthly fee for broadband access, regardless of traffic volume. Nothing extra is coming out of his wallet.

    1. Re:your analogy does too, actually... by kiddygrinder · · Score: 1

      Actually, a lot of less frequent users have cheaper data-limited plans in Aus and a preliminary search shows these types of plans are also quite easy to obtain in the UK, maybe you should do some fucking research before you get on your high horse.

      --
      This is a joke. I am joking. Joke joke joke.
  119. Re:Deliberately open -- A great legal defense. by fmaxwell · · Score: 1

    I think (usual disclaimer...) you might be partially liable under some form of criminal negligence law.

    Then why isn't Earthlink liable under a criminal negligence law when they let their users have open access to peer-to-peer services? The fact that I don't charge for access should not prevent me from being shielded by the same "common carrier" defense that they use.

    And let's not forget that there are worse things than copyright infringement, like spamming, phishing, hate speech, etc.

    You could block block every common port (21, 22, 23, 25, 80, 110, 443), leaving open others, including those used for peer-to-peer services.

    Also, a good legal defense usually comes into play when you are in court (or well on the way there) and that's probably a lot less fun than it sounds ;)

    An excellent point.

  120. Re:Deliberately open -- A great legal defense. by Anonymous Coward · · Score: 0

    Then why isn't Earthlink liable under a criminal negligence law when they let their users have open access to peer-to-peer services? The fact that I don't charge for access should not prevent me from being shielded by the same "common carrier" defense that they use.

    ISPs don't just claim to be common carriers - they are - it's some kind of legal status conferred on them by law, not just a legal defence. Not only that, but it comes with all kinds of strings attached: Earthlink is protected from certain kinds of claims by virtue of being a common carrier, but it incurs certain obligations as well.

    You could block block every common port (21, 22, 23, 25, 80, 110, 443), leaving open others, including those used for peer-to-peer services.

    I think (once again... disclaimer) that part of the common carrier thing controls to what extent you can limit what your customers do. I remember some discussions about how phone companies that provide internet connectivity aren't allowed to block VOIP traffic precisely because of the common carrier rider. I know that more and more ISPs are disabling port 25, but I believe you can legally get them to ennable it on simple request.

  121. CRIMINAL negligence by Anonymous Coward · · Score: 0

    HIPPA makes leaving a patient's records open a CRIME. The hospital could face a very large fine, followed by a lawsuit from its patients.

    1. Re:CRIMINAL negligence by uqbar · · Score: 1

      HIPPA is a USA law - so UK hospitals aren't covered. Health seems to be one of the few areas where the US has better privacy laws...

  122. Obligatory Futurama Quote by R3d+M3rcury · · Score: 1

    "Femputer sentences them to death... by snu-snu!"

    Amazon Women in the Mood

  123. Its really just another tech failure.. by 3seas · · Score: 1

    Develope a technology and if anything goes wrong with it blame the users.

    I didn't really much know about wireless stuff until recently when a friend wanted me to fix his computer. After much debugging I was able to determine it was his wireless card, not being compatable with a PII, etc..

    But to determine this I tried it on another computer I had gotten as a toss out (this whole thing inspired me to finally take a look at this a nd a few other toss outs I had collected but did nothing with).

    So It fire up and connects with "access4free" in teh title bar of firefox... go figure as I had done alot of cleaning of that systems drive including something along the lines of access4free...

    grabage ontop of garbage in this case would have lead anyone to think it really was free...

    But I know nothing is for free and questioned it, where many people wouldn't have...

    Its a tech failure, plain and simple, not a user fault.

  124. How to create a sharing culture by ConfusedVorlon · · Score: 1

    When I set up my wireless network, it will be open and I will be happy for others to use it. I consider this a social good - and had assumed that most folks who left their networks open were just being good neighbours.

    Given that the law is moving in a different direction - it would be great to have a more formal way of sharing.

    How about a google overlay of open (intentionally) wifi spots, or a register, or a protocol?

    Thoughts?

  125. People leave their cars unlocked . This ok? by zakezuke · · Score: 1

    People leave their cars/houses unlocked. This doesn't mean it's perfectly acceptable to steal/rob them!

    Is it acceptable to steal them? No!

    Is it legal to steal them? Not really.

    Could you procucute a someone for taking off in your car you left unlocked with the keys in it? This would be hard. If they got the keys... the person who "borrowed" you car could say "He lent it to me". And according to my local police in that situation you have to send a certified letter asking for the return of the car before they'll even declare it stolen if they don't respond after 14 or 28 days (don't remember exactly). The point is this, while it's not legal to steal someone else's car but if you left your keys in it and they took off it's possible for them to get away with stealing your car cause you were a dumb ass.

    "It ain't stolen, I got the keys" works very well from what i've observed.

    --
    There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
  126. How do you know your network is hijacked ? by managedcode · · Score: 1

    How do i know that my network is hijacked? Any windows tools ? Thanks, MC

  127. Curious legal inconsistancy by Anonymous Coward · · Score: 0

    Here's another bit of UK law for you to mull over.

    If instead of using an open and unencypted AP, I had walked through my neighbours front door (that he forgot to lock) and sat down in front of his TV I would have committed no crime.

    I can sit in his back garden and lay on his sun lounger... No crime.

    There is no crime of trespass in the UK.

    I can only get in trouble if I force entry or cause damage, or drink a beer from his fridge. Although I'd expect the judge to laugh at a charge of stealing one beer.

    I'm curious to know if I could be charged with anything if I'd happened to take my laptop with me and plugged into his router with a bit of cat5.

  128. While your at it by Anonymous Coward · · Score: 0

    assume your neighbour is doing it on purpose, and delete his router's settings!

  129. Re:First post! by Kawahee · · Score: 0

    It's funny because I download at 32mbit/s

    --
    I'll subscribe to Slashdot when I see a month without a dupe, a typo, or an article the "editors" didn't read.
  130. Whither Wifi by xdaydreamx · · Score: 1

    Someone has written a bit more on this story: http://www.londonreporter.co.uk/index.php/main/com ments/wither_wifi . Seems like the poor chap got his laptop crushed too. Personally I think that if he'd been doing anything more serious than using someone else's network, they would have done him for it. As it is, they simply wanted to make an example of him to show that their crazy law is being applied. What a waste of police time.

  131. summary of lots of the posts by murdocj · · Score: 1

    I was amused at how many posts could be boiled down to "People who don't know that they have to configure the 'plug and play' router that they bought are really dumb" followed by "why do people care if I'm on their network".

    Or to put it another way:

    SlashDotNerd = TechKnowledge + CompleteSocialIneptitude

  132. Broken Analogies and such by Crumplecorn · · Score: 1

    I've head a great day today reading through the comments on this subject, I have an affinity for idiotic arguments, and they are not in short supply today.
    I also have an affinity for pointing out the limited areas of such arguments I know to be fact: (I started a new thread as the idiocy is quite widespread in the comments, there was no one comment to respond to. This is aimed squarely at anyone who thinks this guy deserved more than a slap on the wrist)

    The AP is like a house, with talking doors and cookies to steal.
    No. Your computer is the house, with cookies (files) to steal. Your computer's shares should be secured, but even if they aren't, as with houses, in many circumstances it would be considered immoral (possibly illegal) to wander around someone's unprotected file system without 'real' permission. The network is the medium by which houses are connected, which is to say air. If the air around your houses is blocked by a gate/moat/forcefield, I will probably not consider entering, but if you have no gate, I may consider walking through said air to your house and knocking on the door to see if I can come in (authenticating to view shares).
    In adaptation for increased accuracy, this analogy starts sounding very strange .... but the point is that the house cannot be the network.

    The AP is like a car with keys in it
    Only in that the owner deserves whatever happens (well, to some extent anyway). Besides that, a distinctly puzzled 'huh?' sums this one up.

    [Insert any analogy where the onus is on the connecting party to find a way in, inviting doorways and lack of 'keep out' signs etc.]
    Transport-Layer and lower protocols (at least the ones in use on the Internet and on wireless networks) at most require the connecter to ask (to everyone, not anyone in particular) 'can someone give me an IP address/access to a network/a route to this host?'. Something on the network will then answer if they can offer this service. This is the basic model of networking. If it's available, it's there for you to use. This applies all the way up from ARP through DHCP and up to the level of a person with an AP. Computers (except in cracker's hands) do not search for ways into a system, they ask to be let in.
    One comment puts an opposing view well: 'You can't take absence of dissent to imply consent.' But what must be kept in mind is that computers, by default, consent if they can, and if they can't, you know it. The fact that a real person doesn't consent every time is irrelevant. In the example of the above quote, the analogy of cookies with a note saying 'take one please' is compared to the analogy of cookies lacking a sign saying 'hands off' (followed by the aforementioned quote). But the lack of a sign isn't an open network: It's a lack of one. Computers either consent or don't, or they don't even hear the request, so your computer (AP in this case) says either 'take one' or 'hands off', but if it is on a network it has to say one or the other. No cookies for guessing which one unsecured routers say.
    So, people do not find a way in, they ask to be let in, and are let in, just like in the misinformed doorman scenario, people you don't want may get let in, but it's your fault, and they didn't break in.

    There are also some misconceptions about the nature of a few things:
    It has to be assumed that in a residential area that unsecured networks are unintentionally so
    Wrong. Some people just don't mind sharing bandwidth with anyone who can connect. The idea being the free sharing of information (or access to information), whenever feasible, is a Good Thing. Such networks have already had some success.
    Also, this is the assumption the Internet works on. While changing the assumption in law for wireless networks will not really affect the Internet a some people think, it would slow down the spawning of an ad-hoc wireless Internet in areas which would potentially support it, and would no longer be con