Slashdot Mirror


Confessions of a Wi-Fi Thief

Michelle Shildkret from Time wrote in to tell us about a story about "the ethics of stealing Wi-Fi. Many of us been guilty of the same crime at one point or another — according to the article, 53% of us at least. But how guilty do we really feel? As it is officially a crime to steal wi-fi (Title 18, Part 1, Chapter 47 of the United States Code, which covers anybody who 'intentionally accesses a computer without authorization or exceeds authorized access')."

22 of 849 comments (clear)

  1. Not a thief by xtracto · · Score: 5, Insightful

    "intentionally accesses a computer without authorization or exceeds authorized access")."

    Then, I have never stolen WiFi. I have never accessed without authorization; as I have never cracked a WEP or WPA password scheme.

    Everytime I use an available wireless network, I instruct my computer to ask for permission to connect to the router and enter to the wireless network. And most of the time the router gives me such permit and assigns my router an IP. When it does not happen, then I assume the owner has instructed the router to give permission to specific machines (as in, machines with a specific MAC adddress) and hence I do not use such networks.

    Seriously, someone must create an interface in which a person is able to send the commands manually to the router (like the AT commants in a modem) to ask for connection permission (i.e., DHCP protocol). That way, when you are in court, you could use that program along the court's wifi to show them how you are indeed asking for permission and the software is granting you the permission.

    --
    Ubuntu is an African word meaning 'I can't configure Debian'
    1. Re:Not a thief by Rinisari · · Score: 5, Insightful

      Exactly the defense that anyone would should use. If the plaintiff says, "Well, I didn't explicitly grant you permission to use my network," then you can fire back, "You did when your router gave me explicit permission by assigning me an IP address and giving me a gateway by which I could access the Internet. Essentially, I asked if I could use the network, and, acting on your behalf since you set it up, it said I could when it gave me the information required to use the network."

    2. Re:Not a thief by palegray.net · · Score: 5, Insightful

      Then, I have never stolen WiFi. I have never accessed without authorization; as I have never cracked a WEP or WPA password scheme. That's the key to the whole debate. I've had a WiFi router at my home and various offices for years. If I enable features designed to limit access (MAC address checking, WEP/WPA encryption, etc) and someone tries to spoof and/or brute force their way into my network, that's theft of service and unauthorized access. If my router is set up for wide open access, I'm granting permission for anyone to use it.

      In general, laws are designed to work like this: that which is not expressly forbidden is permitted. We're talking about radio waves here; before anyone starts up with some dumb analogy to parked cars and leaving the keys in them, consider this: when you use a resource I have made freely available, you're not denying me access to it. Someone might make the argument that excessive use of my resource would degrade its usefulness to the primary (owning) party, but that's easily remedied using simple protection schemes (either block access entirely, or throttle access to unauthenticated clients). I've done exactly this in numerous cases, using various router packages.

      Here's a sad, but interesting article: Man charged with wireless trespassing from July of 2005. To quote a section:

      Wireless networks are becoming more prevalent with the spread of broadband Internet access, and many consumers are not aware of how to configure their networks to avoid unauthorized access. This man was charged with a felony because the owner of the connection failed to educate himself on how to use a point and click interface to secure a home wireless router. Was he up to no good? Maybe, but we don't know for sure, and it's beside the point. If someone were to use my connection for criminal activities, it becomes my problem to prove it was the third party's actions, and not my own that led to the violation of law. He's "innocent until proven guilty" the same as I am. This is why companies (at least ones that aren't interested in getting sued) track their network access and provide authentication schemes.
    3. Re:Not a thief by Animaether · · Score: 4, Insightful

      "as I have never cracked a WEP or WPA password scheme"
      Have you ever spoofed a MAC address?
      Have you ever connected to an access point that did not broadcast its SSID?
      Have you ever connected to an access point that says "private", "stay out", or otherwise?

      If 'yes' to any of the above; I don't know about the U.S. law, but in The Netherlands you would still be guilty of "computerhuisvredebreuk"; meaning so much as tresspassing on a computer network

      Then again, a great many people seem to think that even WEP encryption is an open invite to use the system, given the easy of cracking it.

    4. Re:Not a thief by Just+Some+Guy · · Score: 5, Insightful

      Does the law already consider an open, unencrypted network as implicitly giving permission, or is it written to say that if the person who owns that open, unencrypted network has not given permission then it's illegal?

      How does the law answer the same question about websites?

      --
      Dewey, what part of this looks like authorities should be involved?
    5. Re:Not a thief by Alex+Belits · · Score: 4, Insightful

      This is US -- we don't have real laws that get updated with precise description of what is and isn't a crime. "The law" is whatever the last time judge decided after hearing a shouting match between two attorneys.

      --
      Contrary to the popular belief, there indeed is no God.
    6. Re:Not a thief by palegray.net · · Score: 5, Insightful

      I've never done any of the things you describe, because I consider them to be highly unethical. In my mind, connecting to an unadvertised resource fails the ethics test because there's no way anyone could reasonably imply that consent was given.

      Those who crack networks by breaking WEP, spoofing keys, or other measures should be held legally accountable. People who merely access an open, advertised resource shouldn't be at risk of going to prison.

    7. Re:Not a thief by phoenix.bam! · · Score: 4, Insightful

      Bad analogy. I ring your doorbell and a ticket drops from the mail slot that says "You're free to enter the house and watch some tv."

    8. Re:Not a thief by gurps_npc · · Score: 4, Insightful

      1. The door does not act in your example, the router DOES act. A more accurate analogy would be: I asked your door to open for me AND IT DID OPEN. Not impossible, as many businnssess have doors that automatically open. 2. You had people STEAL things instead of simply enter the house and watch TV. We are describing someone enter the wifi connection and use it to connect to the internet, NOT take other things. Stop trying to ADD real crimes that we are NOT discussing. God, is it THAT hard to pay attention to our points or do you just ignore people that disagree with you and make up vile lies?

      --
      excitingthingstodo.blogspot.com
    9. Re:Not a thief by Just+Some+Guy · · Score: 4, Insightful

      Bad analogy. I ring your doorbell and a ticket drops from the mail slot that says "You're free to enter the house and watch some tv."

      That was even worse. More accurate analogy: you have a loudspeaker shouting "HI! COME IN!" to all passersby. I ring your doorbell, and a key to the house and a nametag pops out of the mail slot.

      Don't want me in your house? Don't advertise free admission then give me a key and a nametag.

      --
      Dewey, what part of this looks like authorities should be involved?
    10. Re:Not a thief by Anonymous Coward · · Score: 5, Insightful

      I liken using somebody's unsecured wireless network to listening to a neighbor's music that they play loud enough for me to hear. I didn't ask my neighbor to send wifi signals into my home.

    11. Re:Not a thief by McDutchie · · Score: 5, Insightful

      So it's more like entering an unlocked house to take a sip from the faucet. The only crime committed is that you didn't pay for bottled water.

      Except that you didn't enter any house. Your neighbour is transmitting their open-access signal into your own house for you to use. Your analogy is therefore broken.

    12. Re:Not a thief by eebra82 · · Score: 4, Insightful

      I hate the house analogy when used in these debates. What if someone sets up a WiFi zone that covers dozens of apartments? Are you basically saying that there is a house - that you may or may not enter - in my apartment? This is where that analogy fails, because a house is still property. My apartment is, however, my property and what's in it is rightfully mine.

      The WiFi, if not secured, is simply private space because there is no sign that prohibits trespassing. Why the hell should I be a criminal if someone penetrates my apartment with WiFi signals that are not secured by password?

      By breaking through the encryption, you're obviously doing something criminal. But that's something entirely different, too..

    13. Re:Not a thief by xtracto · · Score: 5, Insightful

      If you leave the network, the bandwidth will still be there.

      That could presumably be false if whoever is paying for the service pays for a limit GB/month allowance

      --
      Ubuntu is an African word meaning 'I can't configure Debian'
    14. Re:Not a thief by SeekerDarksteel · · Score: 4, Insightful

      An unsecure wireless network is NOT an invitation, and negotiating a network connection does not equate implied permission to use the network.

      Did you check your email this morning? If so, did you call up Google or Yahoo or your ISP or whoever provides it and ask them if you had permission to connect to their server?

      Did you call the person hosting TFA before clicking on the link asking if you had permission to access their server?

      Of course not. That's preposterous. Because the nature of a computer network is DEFAULT ALLOW. If it were not, the internet as we know it today would be impossible. Quite literally, the fact that I _can_ connect to a webserver makes it okay. The fact that I _can_ connect to an SMTP or POP3 server implies I have permission. And the fact that a wireless router grants my laptop an IP address is literally the router saying "Feel free to use me however you want."

      Just because people don't realize this fact doesn't make it any less the case. Otherwise, I could set up a webserver, buy a domain, then sue anyone who connects to my webserver for accessing my computer without my permission. I pay per GB of bandwidth the server uses, how dare you connect to _my_ webserver and use _my_ bandwidth.

      --
      The laws of probability forbid it!
    15. Re:Not a thief by Fast+Thick+Pants · · Score: 4, Insightful

      Wait wait, better -- you bulk mail out the invitation to "Occupant", but it doesn't include the key. Instead of getting the cars rekeyed, you just have a giant rack of keys, and you hire a guy, Vito Linksysio, to hand out the keys as needed. Now, you *could* give Vito pictures of people who are allowed to borrow the cars, but that's too much trouble. You *could* tell him that people have to know a password to get a car, but that's too much trouble. So you just tell him to hand a key to whoever shows up.

      And even though you've mailed the invitation to the entire zip code, you're still shocked, shocked to find that strangers are borrowing the cars. How forward of them!

  2. This can be argued, but... by idiot900 · · Score: 4, Insightful

    As it is officially a crime to steal wi-fi (Title 18, Part 1, Chapter 47 of the United States Code, which covers anybody who "intentionally accesses a computer without authorization or exceeds authorized access")." Would this apply to an access point which advertises its SSID and doesn't demand credentials from users? I would argue that it authorizes everyone to use it. To draw an analogy, it isn't just leaving your front door unlocked, it's leaving it unlocked and putting up a sign that says "Please come in!". So I don't see how accessing an open access point is a officially a crime.

    But then again, I'm not a lawyer.
  3. How Guilty? by stewbacca · · Score: 4, Insightful

    How guilty do I feel when my computer/phone/whatever connects to a wide-open wifi signal without even prompting me to do anything? How about, "not at all"?

  4. Broadcast = Permission by Toe,+The · · Score: 5, Insightful

    Indeed. I don't know how the law is interpreted, but I cannot imagine how anyone who broadcasts an unencrypted radio signal can complain if someone else picks up that signal. It would be like a TV station claiming that you are stealing their content because you tuned into their channel.

    You could say that a wifi router is different from TV because the activity is two-way: but the wifi router chooses to respond to me. If the owner of the router never bothered to tell their router not to respond to me, then is it my fault that it does? Am I guilty if my computer merely pings their router because it created a response on that router? They are the one who initiated the communication by broadcasting hello packets.

    1. Re:Broadcast = Permission by Just+Some+Guy · · Score: 5, Insightful

      Am I guilty if my computer merely pings their router because it created a response on that router? They are the one who initiated the communication by broadcasting hello packets.

      Complicating matters is that certain popular OSes (XP, I'm looking at you) tend to auto-connect to the strongest signal available, no matter how nicely you ask them to stop doing that. If you're closer to your next-door neighbor's WAP than your own, and Windows decides to use his without asking your permission or even telling you, then can you really be considered guilty of anything? And doesn't that mean that the world's largest OS vendor considers "default allow" to be the correct interpretation of WAP etiquette?

      As little as I'm a fan of MS, I think "that's the way Windows does it automatically" would be a pretty good defense against criminal intent, even if a jury disagreed with the legality of the actions themselves.

      --
      Dewey, what part of this looks like authorities should be involved?
  5. tsoat by Tsoat · · Score: 5, Insightful

    Encrypt your signal or expect people to use it. It's that simple folks

  6. California law by BasharTeg · · Score: 4, Insightful

    Just for everyone's entertainment, the california statute that applies is:

    California Penal Code Section 502(c)(3) and 502(c)(7).

    And for all of the idiots stating that the "router" gave them permission, give me a break. The router isn't a legal entity, and only works in the way you interact with it. Just like the door knob.

    I twisted the doorknob (initiated association with the accesspoint), and the doorknob gave me permission to enter by retracting the latch (allowing me to associate and giving me a DHCP lease). The owner of the door could have configured the door differently, by engaging the lock mechanism (using WEP or WPA), so since he didn't I'm free to enter and watch his HBO (use his broadband internet access). I'm not "stealing" from him, because it's not like he has less HBO (internet) now that I've viewed some of his HBO (internet).

    A big part of what a lot of people are missing is, even if you had a point regarding associating with his wireless network because it is open (which you don't), that only gives you authorization to access his LAN. You still have no right to use his paid broadband internet services. You don't have that right, because you aren't paying the ISP, and because the owner of the access point doesn't have the right to share or transfer his right to use his internet service with all of his neighbors, just like I don't have the right to share my HBO programming with all of my neighbors. It's called theft of service. Even if you claim the right to access the wireless owner's network, you certainly do not have permission to access the ISP's network. And even if I run coax down my lawn, and put a coax jack at the end of my property so that people on the sidewalk can screw into it and watch HBO, that doesn't mean I have any right to share my HBO or that you have any right to leech service that you're not paying for.

    Using someone else's wifi is a crime, because you're not just accessing their network, you're accessing their ISP's network without permission. Giving away your wifi by intentionally hosting open access points is very likely a breach of your contract with your ISP.