[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [Netstumbler] Browse Networks
Scott. There is no room for interpretation when it comes to legality.
Who is to say OPEN isnt Operations Point for Enterprise Network?
(it would be hypocritical here to tell me that an enterprise network
SHOULD be better protected)
The point being made by Mr Bond is that it the responsibility of the
owner to protect themselves. If they are open access and breached it is
more their fault than the 'assailants'. It would be foolish to stand by
an idealistic "wardrivers" ethic.
IMHO it should be stressed by the vendor to the buyer that security
should be enabled, and the implications of security breach.
Also, hacking tools available on the web could be monitored and if
necessary, their operations shut down.
> From: Scott Peterson [mailto:scott@xxxxxxxxxxxxx]
>
> "There's quite a strong argument that if you connect to an AP,
> it's unsecured, it's running DHCP and it gives you an IP
> address and a
> gateway and you can then get an internet connection, then you've been
> welcomed to use a free gateway."
>
> "they may be public networks"
>
> Who are you? The Amazing Kreskin? How can you deem an AP
> free for public use just because the SSID isn't the default
> one? If the owner has no qualms about drive-by surfing, then
> the AP will be clearly labeled as such.
>
> Ex:
> FREE NET
> stumblerswelcome
> surf_dont_snoop
>
> Find an AP like these, and you can connect without fear of
> repercussions. AP's with default settings or SSIDs you can't
> interpret? Then it is best to keep moving. Just because it
> hands you an IP doesn't mean you are allowed to connect.
> Like Thorn stated a few days ago, it's illegal, dumb, and
> just plain goddamned rude.
>
> I get the feeling that stumblers that "borrow" connections
> are the same people that drink other people's beer at a
> party, since they were too cheap to bring their own.
>
> "duh, it was in the fridge so it must be free."
>
>
> "Notice that I haven't once referred to any legal issues in
> this post.
> I'm really not interested in these, but rather in practicalities."
>
> You had better be interested in the legalities. If jokers
> like you keep accessing networks illegally, you will be
> moving the focus of WarDriving from raising security
> awareness to drive-by h4x0ring. This community does not need
> to be stigmatized because of cheapskates like you.
>
> -MrWhite
>
>
>
> -----Original Message-----
> From: Julian Bond [mailto:julian_bond@xxxxxxxxxxxx]
> Sent: Tuesday, June 24, 2003 8:48 AM
> To: netstumbler@xxxxxxxxxxxxxx
> Subject: Re: [Netstumbler] Browse Networks
>
> Headshot <headshot_001@xxxxxxxxxxxxxx> wrote:
> >Around my area there are some 802 networks. Some are secure
> - some are
> not.
> >I DO NOT want to break into the secure networks. I figure
> that if some
> are
> >unsecure (WEP not on) then they may be public networks. What I was
> asking is
> >how, using a WinXP machine, can I connect and browse files /
> services /
> >whatever to find out what they do.
>
> 1) Fire up netstumbler.
> 2) Look for non-WEP APs
> 3) If an AP has an obvious manufacturers SSID such as "linksys" it's
> highly likely to be a wide open AP put up by a clueless admin.
> 4) If the SSID looks like it might be deliberately open (eg
> "tmobile")
> use XP to associate with it.
> 5) If the AP gives you a DHCP IP address, open the browser and see if
> you can access any websites. If it's deliberate, then it's
> highly likely
>
> to take you to a sign in page
> 6) Login, sign up, pay your money and surf away.
>
> Back to 3) There's quite a strong argument that if you
> connect to an AP,
>
> it's unsecured, it's running DHCP and it gives you an IP
> address and a
> gateway and you can then get an internet connection, then you've been
> welcomed to use a free gateway. This argument is made
> stronger because
> Win XP (and some other OSs) will do all this for you without
> you raising
>
> a finger. And if you happen to have Outlook running at the
> time it will
> go and collect your email on it's own as well. The argument
> against this
>
> is that if you take a consumer grade AP out the box and plug
> it in, then
>
> this is what you get even if you never meant to share your
> connection.
> Hence 4). You shouldn't really take advantage of the "Default Linksys
> Community Network" just because it's there.
>
> Notice that I haven't once referred to any legal issues in this post.
> I'm really not interested in these, but rather in practicalities.
> Headshot raises a good point "they may be public networks".
> Indeed they
> may. So look for Non-WEP and a non-default SSID. If you get DHCP, I
> think it's reasonable to assume that the sharing is deliberate.
>
> --
> Julian Bond Email&MSM: julian.bond@xxxxxxxxxxxx
> Webmaster: http://www.ecademy.com/
> Personal WebLog: http://www.voidstar.com/
> M: +44 (0)77 5907 2173 T: +44 (0)192 0412 433
>
>
>
>
> --------------------------------------------------------------
> ---------
> List-Help: <mailto:netstumbler-help@xxxxxxxxxxxxxx>
> List-Unsubscribe: <mailto:netstumbler-unsubscribe@xxxxxxxxxxxxxx>
> List-Subscribe: <mailto:netstumbler-subscribe@xxxxxxxxxxxxxx>
> List-Archive: http://www.michinganwireless.org/archive
> --------------------------------------------------------------
> ---------
>
> ---
>
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.491 / Virus Database: 290 - Release Date: 6/18/2003
>
>
> ---
>
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.491 / Virus Database: 290 - Release Date: 6/18/2003
>
>
>
>
>
>
> --------------------------------------------------------------
> ---------
> List-Help: <mailto:netstumbler-help@xxxxxxxxxxxxxx>
> List-Unsubscribe: <mailto:netstumbler-unsubscribe@xxxxxxxxxxxxxx>
> List-Subscribe: <mailto:netstumbler-subscribe@xxxxxxxxxxxxxx>
> List-Archive: http://www.michinganwireless.org/archive
> --------------------------------------------------------------
> ---------
>
>
-----------------------------------------------------------------------
List-Help: <mailto:netstumbler-help@xxxxxxxxxxxxxx>
List-Unsubscribe: <mailto:netstumbler-unsubscribe@xxxxxxxxxxxxxx>
List-Subscribe: <mailto:netstumbler-subscribe@xxxxxxxxxxxxxx>
List-Archive: http://www.michinganwireless.org/archive
-----------------------------------------------------------------------