Slashdot Mirror


Could That Be The Wireless Police Knocking?

netbuzz writes "Should private-property owners be required to practice safe wireless? Are the wireless police about to come a-knockin' on the front door of your castle? Network World reports on a condo complex in Arizona that will monitor your wireless signal for security. Is this the way all condos and apartment complexes should go?" From the article: "'We just kind of kicked it around the table and everybody said that's a helluva good idea, (mandatory encryption) ought to go in the declarations,' says Welch. However, a lawyer warned that wireless technology could quickly overrun any specific covenants they put to paper, 'so we decided that instead of recording (declarations) at the county that we would leave it up to the hotel manager to put it in their rules and regulations.' Why bother at all? 'We just don't want to see anybody hurt with their wireless system,' says Welch. 'If someone (unauthorized) were accessing it and an owner's information, there could be damage and a potential lawsuit.'"

35 of 322 comments (clear)

  1. paper tiger laws by adam · · Score: 5, Insightful

    FTFA: "We just don't want to see anybody hurt with their wireless system," says Welch. "If someone (unauthorized) were accessing it and an owner's information, there could be damage and a potential lawsuit."

    absolutely ridiculous. maybe they should start digging through our trash to make sure we've properly shredded our monthly bank statements too.

    Furthermore, this rule would be a total paper tiger, as far as enforcement goes, since wep [which i do believe is the most common security protocol in use for wifi today] is widely known NOT to be secure. It will be ironic when the first whitehat captures a few days worth of packets from outside that guy's home and then published the unencrypted contents of his web traffic.

    --
    I am Jack's complete lack of surprise.
    1. Re:paper tiger laws by gnasher719 · · Score: 5, Insightful

      '' Lawyer "Mr. Doe, you left the SSID or 'name' of the network at the default value and didn't add any encryption or security?" ''

      Some manufacturers of wireless equipment are just clueless and make it unnecessarily hard for people to do the right thing.

      On my wireless router, there is a setup page with an html interface where all kinds of things can be changed. The problem is, it never tells you what these things are that you could change, and why you should change them, and what you could change them. One of the things to change was called "SSID" and the preset value was the name of the manufacturer.

      Now how am I supposed to know what "SSID" means? If you apply logical thinking, since it is set to the name of the manufacturer, it is probably meant to be the name of the manufacturer. So the logical assumption would be that it is used to identify the make of the router, like a processor having an ID of "IntelInside" or "AMDSomething" so you know who made it, and the only reason to change it would be to pretend to be a router made by some other manufacturer.

      If these idiots had set the preset field to "NameOfThisNetwork" or "TypeInNameOfTheNetworkHere" then it would have been much more obvious what SSID is for. One line change in the source code for the router software, and I guess 30 percent fewer people leaving the default name because they don't have a clue what SSID is supposed to mean.

      Now that is just one minor point. But consider that there are about hundred settings, and ninetyfive of them will stop the router from working properly if I change them, so how is an end user who is not a computer expert supposed to get this right?

    2. Re:paper tiger laws by penix1 · · Score: 3, Insightful

      "Now that is just one minor point. But consider that there are about hundred settings, and ninetyfive of them will stop the router from working properly if I change them, so how is an end user who is not a computer expert supposed to get this right?"

      Just like any other field where you are clueless....You hire an expert. I wouldn't consider doing heart surgery on my brother who had a heart attack for the same reason.

      B.

      --
      This is a sig. This is only a sig. Had this been an actual sig you would have been informed where to tune for more sigs.
    3. Re:paper tiger laws by walt-sjc · · Score: 3, Insightful

      Or you call support. People are unwilling to read manuals, but perfectly happy to sit on support hold for 30 minutes. An "expert" is not needed for home setups (which is what TFA is about.)

    4. Re:paper tiger laws by Fred_A · · Score: 3, Insightful

      I agree, couldn't each AP setup "wizard" just randomly generate a key during setup ?

      Step 1 : Type the name of your network here __________

      Step 2 : This is the generated WPA key of your network write it down and enter it in the gadgets you want to talk to this AP, alternatively enter your own key

      If you lose/forget the key, press the reset key on the AP and rerun the wizard.

      There is a moderate risk in this if the random number generator creates predictable keys.

      It's always seemed to me like a very simple way to solve the problem yet I've never seen a setup routine go that way.

      --

      May contain traces of nut.
      Made from the freshest electrons.
    5. Re:paper tiger laws by rbochan · · Score: 2, Insightful

      Unfortunately, these devices are sold like they are toasters.

      --
      ...Rob
      The American Dream isn't an SUV and a house in the suburbs; it's Don't Tread On Me.
  2. oh thank you nanny state by kaufmanmoore · · Score: 5, Insightful

    i will never have to learn from my mistakes ever again.

  3. Potential lawsuit? by TheSpoom · · Score: 2, Insightful

    You're finding a solution to a problem that doesn't exist. People aren't going to sue you because their wireless network is insecure, and if they did, they'd be laughed out of court.

    Besides, maybe some people don't care if they open up their internet connection! As long as they keep their PC(s) reasonably firewalled, and perhaps use an alternate form of encryption at a higher level, it's possible to open up one's internet connection without opening up one's internal network.

    --
    It's better to vote for what you want and not get it than to vote for what you don't want and get it.
    - E. Debs
    1. Re:Potential lawsuit? by TheSpoom · · Score: 2, Insightful

      It's still my right to do what I want with my equipment.

      Whether or not you could say that I am responsible for what use people make of it is for the courts to decide.

      --
      It's better to vote for what you want and not get it than to vote for what you don't want and get it.
      - E. Debs
  4. Rediculous... by Xserv · · Score: 5, Insightful

    This is a waste of time and money. People should secure their own networks. If you don't know how then you pay someone to do it for you. If you can't afford it, then how are you able to afford a wireless network. Period.

    Why should any government, company or anyone else worry about someone else's network connection security -- unless they're being paid by that party to do so. And in the case of a government (city/state/local/federal) being responsible; don't make ME pay for it.

    Xserv

    --
    "I love lamp."
  5. should I... by Anonymous Coward · · Score: 4, Insightful

    get blamed when someone breaks into my house if I leave the door unlocked?

    Or should I be blamed when Windows automatically connects me to open APs?

    And...If we are going to go that far?

    Why not get these people in trouble for using WEP to begin with?

    Safe wireless? WEP is like using a condom that's been poked with holes.

  6. Why single out wireless protection? by ewireless · · Score: 5, Insightful

    This seems silly. If you want to protect your own private property or not, that's your own business. They don't require you to lock your apartment door when you leave. They don't require you to lock your car door when you park in your parking space. How is this any different?

    1. Re:Why single out wireless protection? by Zemran · · Score: 2, Insightful

      Of course, if it's against the law or contract to share your wireless connection with your neighbors (something that is true with some DSL contracts),

      You mean it is a breach of contract to share your 'DSL' connection with your neighbours but I can see no reason why a group of people cannot share a wireless network... So if I move into one of these blocks and am friends with my neighbour and want to collaborate on a project the 'management will come and shut us down? What if I get a business DSL connection that I pay extra for, and am allowed to share. and others in the block want to share? I have known villages to do a similar thing with satellite connections because they cannot get DSL in the wilds. Perfectly legally.

      --
      I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
    2. Re:Why single out wireless protection? by Tim+C · · Score: 4, Insightful

      So if I move into one of these blocks and am friends with my neighbour and want to collaborate on a project the 'management will come and shut us down?

      No, they'll tell you to enable encryption, which you'll do, and you'll agree on a shared secret, and all will be well and you'll realise that the sky isn't falling after all. That's assuming that they have the right to impose such conditions in the first place; that'll depend on your local tenancy laws.

    3. Re:Why single out wireless protection? by ivan256 · · Score: 4, Insightful

      And if I want random strangers passing by to be able to connect?

      What about systems that show you a gateway page unencrypted to help you gain encrypted access? Whould those be illegal?

      How about you go to hell and stop telling me how to live my life. I love how people are all about civil liberties until it comes to something that they like, and then it's OK to force people to behave that way.

      Here's another way for you to think about this: These rules are being put into place because the appartment complex is probably getting kickbacks from the local cable or DSL provider and they want to make sure they collect the maximum possible number of subscription fees. These rules are solely in place to protect the profits of the local monopoly. Congratulations on being a big business shill.

    4. Re:Why single out wireless protection? by asdfghjklqwertyuiop · · Score: 2, Insightful

      Just like how leaving your keys in the ignition could help a criminal steal it and commit a crime, leaving your wireless internet open could let a criminal do anything they want on the internet without being traced (eg. child porn).


      The local hardware store sell crowbars. They ought to stop. Those crowbars could help a criminal commit a crime (eg, breaking & entering).

  7. People too dumb to use computers by PingXao · · Score: 2, Insightful

    They shouldn't be using computers at all. No amount of rules and regulations is going to turn a computer-illiterate user into a savvy one. If someone is too dumb to figure it out or ask someone for a little help they deserve whatever they get. It really is that simple. All this "we need to protect people from themselves" stuff is nonsense. It won't work. Leave it alone. The threat of someone using your open wifi network to download kiddie porn is what, about 0.0000001? "Oh we need rules to protect unaware people from that risk!" Bull fucking shit.

  8. Ludicrous by z_gringo · · Score: 4, Insightful

    That is just nuts!

    I run mine wide open because that is they way I want it. I secure my machine of course, but if someone is within range and wants to use my connection, I don't have a problem with that. Hell, my SID is actually "WideOpen".

    I used my neighbor's DSL for over a year, but I eventually got my own. There is no reason every house on a block should purchase their own Internet connection, and wireless network. Apartment buildings are in an even better situation. All that money that people are spending on individual connections could purchase a lot higher speed connection for everyone and still save money.

    --
    -- -- Warning. Do not stare directly at the sun.
    1. Re:Ludicrous by erexx23 · · Score: 2, Insightful

      Awesome!

      As a potential hacker I launched 4 viruses and downloaded 4 gigs of MP3's using your network.
      All traceable back to you.
      I spoofed my mac address
      thank you.

  9. ridiculous by thdexter · · Score: 3, Insightful

    I know several people who leave theirs open for neighbors and friends to use without encumberance. It's a nice gesture, one in which a private good becomes a public good via goodwill. Even with bittorrent running I'm not using all of my bandwidth at all times.

    Besides this, do we mandate that folks lock their car and house doors? Are there laws against leaving a key under the rug, on the door frame, or below your car door?

    --
    I'm on a road shaped like a figure eight; I'm going nowhere but I'm guaranteed to be late.
  10. In other news. . . by LunarCrisis · · Score: 2, Insightful

    In other news, it is now illegal to give money to the poor.

    "Imagine what could happen. Someone could give someone some money, go home, and realize that they needed that money! Just imaging the potential lawsuits! Everyone is much better off this way."

    --
    Mr. Period: Nine is the one that's right by ten!
    Nine: One day I will kill him. Then, I will be Ten.
  11. FCC by Detritus · · Score: 3, Insightful

    I'd argue that their rules are preempted by the FCC's regulations on spectrum use. The FCC usually takes a dim view of people who trespass on their turf.

    --
    Mea navis aericumbens anguillis abundat
  12. Here is what you should think about by zoomshorts · · Score: 3, Insightful

    Suppose a known sex offender began moving child porn over YOUR wireless network.

    I would love to see you explain that away as an "oops, I forgot to turn encryption and
    authentification on" to the police following the pervert. They will FIRST get you for
    aiding and abetting the crime.

    This stuff, security, only makes sense in today's world.

    1. Re:Here is what you should think about by Mantrid42 · · Score: 3, Insightful

      Oh no! I better never do anything nice for anyone because of the tiny, tiny chance that someone might possibly maybe do something bad with it one day!!

  13. NOT a big-government issue by neatfoote · · Score: 2, Insightful

    Before the discussion slides predictably towards vague diatribe on governmental encroachment and abuses of state power, I just wanted to point out that this is not something that's being proposed or enforced by the government at any level; it's strictly a question of managers of private condo complexes making "secure" wireless one of the many (arguably draconian) regulations already in place for people who wish to live there.

    We may still not think it's a good idea, of course, but the fact that it's being implemented by private individuals makes a big difference-- I'd get stroppy if my state governor said I couldn't own a dog, but I'll accept the same restriction from my apartment super with no objections.

  14. Damned if you do, damned if you don't by MikeRT · · Score: 2, Insightful

    Look, you cannot force people to play it safe. There are so many examples of that sort of thing failing that it should just be taken as a fact of life. Most people simply don't value safety, like they don't value natural rights, until it's too late and the evil people, criminal or government agent, are hurting them.

    Wireless safety is part of that. Part of the problem is that Windows has a very clunky user interface for specifying a strong encryption key. Something as painless as PGP would be very nice.

    The police have a valid concern that criminals could exploit these holes and frame ordinary people. However, technical solutions don't work except in simple cases. In fact, in non-"high tech" cases, it wouldn't be a real concern. Where are the laws requiring people to lock up their home so that someone cannot break in and use their bedroom as a sniper post? The lock is hardly a hindrance to these sort of people.

    In most crimes, the wireless security is beside the point. People can crack it with enough time and dedication. Worrying about wireless security problems is akin to worrying about a hershey's kiss making you fat while you have a bucket of fried chicken, a bucket of gravy-slathered mash potatos and a 2 liter bottle of coke for your own consumption.

  15. Could there be a darker design? by Marko+DeBeeste · · Score: 2, Insightful

    1) Become cable company 2) Offer high(nyuk-nyuk) speed internet at an already inflated price 3) Kick back to condo associations 4) Make it illegal to share internet access 5) Profit!

    --
    Faith: n. -- That human impulse that drives them to steal appliances when the power goes out
  16. Not a law, it's a condo rule. by Tetravus · · Score: 4, Insightful

    There is a difference between laws and condominium covenants you know...

    So, the owners decided to implement access point security and pool their resources to provide monitoring (I guess, the article isn't too clear on enforcement methodology). Why isn't the /. crowd applauding end users for not only caring about their networks but actually taking pro-active steps to prevent break ins? Sure, it's not a perfect solution, but it's certainly better than the status-quo and it keeps over zealous government types from being able to create actual laws to enforce this behavior ("Look, we've already got encryption. No need to legislate it.").

  17. Re:this is absolutely necessary by RoboRay · · Score: 2, Insightful

    Good job! You managed to include both "What about the children?" and the "war on terrorism" in a single post. The nebulous comment about hackers/identity theft was good for some bonus points as well. You should run for political office. Just make a few remarks about "tubes" and you're in!

  18. The real reason... by Joce640k · · Score: 4, Insightful

    The real reason is "plausible deniability".

    If you have an open connection then you can't be found guilty in court of any cybercrimes comitted via your Internet connection. The thought police can't bear the thought of that.

    --
    No sig today...
  19. Some Perspective by Fnord666 · · Score: 5, Insightful
    Let's get some perspective on this please. Despite the gratuitous use of the word "police" in the posting headline, this has nothing to do with the police or the law. No one is trying to pass any laws. This is one condo association setting up the covenants under which purchasers of the condos must live. This isn't any different than a restriction that condo owners can't put a fence in their front yards.

    According to the article

    "Bryan Welch is sales manager and designated broker for Canoa Ranch and he takes credit for first broaching the wireless security mandate with the developers of the project, which will provide each condo unit/hotel room with wired broadband, telephony and cable TV service."
    In summary, the condo developers are providing the broadband connection and want to make sure that the condo owners secure their endpoints. Open access points have some risks that the developers are apparently not willing to accept. As a goodwill gesture they could retain a local networking firm to help owners set up their wireless networks properly though.
    --
    'The tyrant will always find pretext for his tyranny.' - Aesop's Fables
  20. Experts by Presence1 · · Score: 4, Insightful



    "I wouldn't consider doing heart surgery on my brother who had a heart attack"

    This is not heart surgery, it is a consumer product. It performs commonly used functions in a standard way, within standard capabilities. One should not need to hire an expert for common consumer grade functions (even when there is an incredible amount of technology 'under the covers').

    In the early days of automobiles, it was necessary to hire a driver because driving was complicated and dangerous -- you could break your arm if you got it wrong starting it, and you had to manage spark advance and several other long-since-automated controls in addition to the throttle, brake and clutch. Now, hardly anyone even knows what is under the hood.

    In early networking, there were many protocols, and IP addresses were set by hand. It is now approaching the point where it is a plug-and-play product, and this is GOOD.

    Progress is not only making the previously impossible, possible -- progress is also making the previously difficult, easy.

    Technologists who understand this will have more and happier customers. Technologists who don't are almost as bad as Luddites in holding back technology.

    The GP post is absolutely right -- the top-level UI should hide functions that are not commonly changed, and make clear what should be changed ("YourNetworkNameHere" is a GREAT idea). Uncommon, expert level functions should be available, but only via deeper UI levels.

  21. Re:this is absolutely necessary by repvik · · Score: 3, Insightful
    1. Unprotected wireless access points are one of the main ways illegal porn, illegal software and various other data gets uploaded to the internet
    Please say you're kidding. Cite any reliable source for this.

    2. it is one of the ways terrorists can communicate safely without any chance of being tracked
    Kind of true. But they can also do this with encryption, public payphones, prepaid cellphones, wireless networks with WEP-encryption, etc, etc.

    3. unprotected wireless access is an open invitation to hackers to steal important personal information (including financial info)
    Having sensitive personal info on your PC has always been an "invitation" for someone to steal it. Ever heard of malware? If you can't take care of your sensitive data, shame on you.
    In this day and age, having unprotected wireless access is akin to having your home telephone line available to public. Imagine your surprise when police knocks on your door and tells you your home phone was used to call a remote cell phone to trigger a bomb and you please ignorance saying well it is available to everyone.
    Again, you've gotta be braindead. Ever heard of "payphones"? Does it make the phone company liable?

  22. Re:When Leftists Attack!!! by An+Onerous+Coward · · Score: 2, Insightful

    Well, it's not like Lieberman is doing much for the Democrats anyways. I think he's much too kind to big business.

    You say "nanny state" like it's a bad thing, but in fact, it describes exactly what our government was set up to do: promote the general welfare. People like you naively assume that all the government has to do in order to accomplish this is to get out of our collective way, and let the free market generate all the blessings of prosperity. There are times when this works, and times when it doesn't. Monopolies harm the free market. Extreme differences in wealth and power harm the free market. Unequal access to information harm the free market. When any of these things occur, it is to the benefit of the people for the government to step in.

    I'll provide just one example to illustrate my position: unequal access to information. Assume that you live in a free-market utopia. You're shopping for just one of the many hundreds of things you have to make decisions about in your life: a car seat for your one year old. Assume you're at Wal-Mart, because you really don't have any alternatives within a fifty mile radius. That part isn't really relevant to the story, but I thought I'd point it out.

    You're faced with the decision of which of twenty car seats to buy. Each of them claims to be very safe, but since the government doesn't have a role in ensuring the safety of carseats or ensuring that product claims be truthful, these claims don't help you. The twenty models run the gamut of prices, from $20 to $400, and the $20 looks incredibly flimsy, so one down, nineteen to go. Four of the seats are certified by the "Safe Baby Coalition," five of them are certified by the "Independent Safety Auditors of America," and six are certified by the "Safe Consumer Product Association". You've never heard of any of these groups, and have no idea what it takes to get their certifications, so they're absolutely no help.

    So you put off the decision, and hit the Internet. Which, being the Internet, is no help whatsoever. You find all sorts of message boards with all sorts of opinions, some obviously written for hire.

    This is a case where each of the manufacturers knows exactly how safe their product is, and since consumers are willing to pay a premium for safe car seats, the unsafe ones try like hell to appear safe.

    How much easier would this decision be if the government simplified the decision by saying that all car seats must pass a minimum, acceptable standard of safety before they can be sold? Infinitely easier. Now, instead of thinking, "Okay, which one won't snap my kid's neck," you can start thinking in terms of "the blue one is just darling." Less stress for the consumer, fewer dangerous products on the market, and--most important--a higher rate of crash survival. All this because the government steps in and closes the information gap between manufacturers and consumers.

    No voluntary system could have the same effect, so long as there was money to be gained by gaming the system. If one group of manufacturers decides to create an independent certification board, to prove once and for all that their products are safe, then less scrupulous manufacturers can create their own certification board with lower standards.

    You have the same principles in play when it comes to things like worker safety and food and water quality. Smart regulations can bring value to the market by eliminating uncertainty. If you're going to buy a house, it's a complicated enough decision without trying to figure out whether the tapwater in this neighborhoods will give you cancer, or whether you're better off going with the house that has 25% less benzene but 30% more lead. Safe food and drinking water allow people to spend their time worrying about other things, but someone has to guarantee that safety. If that's "nanny-statism," then I'd like to see more of it.

    Oh, and despite what I think is a rather calm and collected rejoinder to your mindless, dittohead caricat

    --

    You want the truthiness? You can't handle the truthiness!

  23. are you serious? by juan2074 · · Score: 2, Insightful

    Is this the way all condos and apartment complexes should go?

    Yes. Let's have everyone in condos and apartments monitored, to make sure no one is doing something stupid.

    Can they watch to make sure we don't smoke cigarettes, eat junk food, drink too much, light off fireworks, grow pot, smoke that pot, watch dirty movies, etc.? And please keep us from catching any STDs.

    But back in the real world, do people want to take personal responsibility for their own actions, and accept the consequences too?