Judge Rules Sniffing Open Wi-Fi Networks Is Not Wiretapping
An anonymous reader writes "Ars reports on a decision from a district judge in Illinois, who ruled that sniffing traffic on an unencrypted Wi-Fi network is not wiretapping. In the ruling, the judge points out an exception in the Wiretap Act which allows people to 'intercept or access an electronic communication made through an electronic communication system that is configured so that such electronic communication is readily accessible to the general public.' He concludes that 'the communications sent on an unencrypted Wi-Fi network are readily available to the general public.' Orin Kerr disagrees with the ruling, saying that the intent of the person setting up the network is important: 'No one suggests that unsecured wireless networks are set up with the goal that everyone on the network would be free to read the private communications of others.'"
It's wireless tapping... D'oh.
...because listening to unencrypted cellphones is illegal.
I think that the difference between your conversations and pizza ordering on an analog transmission and on a digital one WRT 4th amendment protection should be zero.
I've fallen off your lawn, and I can't get up.
Open networks are just that. If your intent is to keep your transmissions private, you should be using something better than an open network. Intent may be applicable in a pre-trial hearing on the validity of not having a warrant, but requiring insight in to the intent of an open wifi is highly unlikely at the warrant stage without some pretty strong inside information already.
If it's wiretapping than anyone in the last 20 years who owned a scanner should be fined for listening in on their neighbors telephone calls because their wireless household phones weren't encrypted.
IFF the extent of it is to scan the wireless broadcast, not join the network and access the internet, their private network, files, printer(s), etc. then I think this is an amazing case of common sense. Joining their network and using the internet or anything similar to that is akin to going into someone's house and sleeping on their couch while they're not home. Sure, "you may not be harming them" and they're "not using it right now" but that's not relevant to whether you can jump in and use their resources.
Wireless broadcasts without encryption, however, are akin to a neighbor who yells loud enough for everyone to know their family's business. I don't see any difference between my neighbors having a heated conversation that I can hear inside my house and them sending unencrypted packets into my house. The criminality should only come in if and when they are used maliciously.
It isn't the function of government to protect your "intent" against your own stupidity.
If you want to keep your communications private, encrypt them.
and why does his/her opinion matter so much in the case? (it maybe does, just seeing the name in the summary made me ask the question)
More on point... if you are going to broadcast open packets for everyone to peruse freely... even outside your house, it is like doing something illegal in public and complaining about being caught for it and any witness is illegally watching over your privacy. If it was a secured network, then yes, it would be illegal snooping
Never antropomorphize computers, they do not like that
I'm not on the side of law enforcement but in this case the ruling is fair game. If you use an open, unencrypted wireless access point you do not have a heightened expectation of privacy.
There are many open wifi access points set up with the intent of giving internet access to anyone who happens to be there. How am I supposed to know that the owner of an open network wants to share it or not?
Wireless broadcasts without encryption, however, are akin to a neighbor who yells loud enough for everyone to know their family's business. I don't see any difference between my neighbors having a heated conversation that I can hear inside my house and them sending unencrypted packets into my house.
The difference is that each packet is keyed to the recipients address and to listen in you need a device explicitly made to intercept packets going to others. If you have tenants and offer them internet service and set up a dump of their traffic, are you doing a wiretap? Hell yes. If you are on a cable loop and modify the cable modem to dump all packets for everyone on the loop, are you doing a wiretap? Hell yes. Note that in an earlier case they found the exception didn't apply to cordless phones - the intent was obviously that it was designed to only be received on the handset it belonged to. Wifi packets are the same, you only intend to communicate with that one card and not the world. That it's unencrypted is mostly irrelevant, if you go through a door marked "staff only" you're trespassing even though it was unlocked. The intented user was clear.
Live today, because you never know what tomorrow brings
Interesting analogy of a 'yelling' neighbor. Unfortunately it's not helping your point.
-You can't stop but to hear a yelling neighbor.
-Is your personal network interrupted by theirs?
-Do they have a reasonable expectation of privacy?
Sending an "unencrypted" love letter to a girlfriend by postal mail offers me adequate expectation of privacy... and anyone can just simply intercept that letter many ways.
You are trying to make a point that because you CAN do something from the comfort of your own home/car/bike you SHOULD be able to do it.
The general public doesn't "readily have access" to interpret unencrypted wifi networks any _more_ than we have access intercepting personal wireless phones (which is also easy).
We dont have any _less_ access to DVD decryption software (which is illegal, I'm told) than we do to wifi monitoring tools.
Orin Kerr is wrong. Intent matters, but only up to the point where it's reasonable. If you decide to discuss a sensitive private matter with your SO by yelling at each other at the top of your lungs in a crowded lobby, you can't possibly reasonably expect that conversation not to be overheard by everyone in the lobby. The same with unsecured WiFi: you're broadcasting your traffic in the clear to anyone who has a receiver and you know this. It's up to you, if you intend a communication to be private, to take at least some reasonable steps to make it private. Choosing a method that's so blatantly exposing the communication to the public is decidedly not such a reasonable step. If you don't like it, sorry but the rest of us didn't agree to plug our ears just because you find it inconvenient to go somewhere private to have a private conversation.
The problem with your analogy is that they are transmitting beacons frames without the privacy bit set. This frame basically says: "Hi I am a WiFi network, here is my name and all the other info you need to connect to me if you want to!" If you set the privacy bit it basically says: "Hi I am a WiFi network, here is my name and all the other info you need to connect to me if you are authorized!"
In the case of your analogy, the beacon frame sans privacy bit is the eqivalent of posting a sign that says: "Feel free to sleep on my couch if you want to!"
Whether or not the default mode should be open or private is another debate, and I understand that most new consumer wifi equipment has been addressing this from the should private point of view for quite a while. (see WPS)
How about a common converse issue person A has a smartphone setup to connect to his linksys wireless network he walks down the street and the phone connects to his neighbors linksys network. Was he wiretapping or ortherwise hacking there network? Common sense tells me no they did nothing to keep there signal contained within there property or to keep people out of there network. As a network eng I know that basic troubleshooting involved sniffing traffic. From the case they were not spoofing the gateway IP or otherwise gaming the network, just listening to what they could see. This is no different than you shouting next to me and then complaining that I overheard.
No sir I dont like it.
doesn't matter who is listening, in an age where encryption is standard, if you don't use encryption, or if you don't limit your transmission radius, then you have not indicated that you which your wi-fi to be private. A transmission via radio is open to 'listening' under laws in many countries, it is what you do with the material that is usually restricted.
There was an unknown error in the submission.