Penetration Testing mailing list archives

Re: Where is the Wireless line?


From: Noah <focushacks () gmail com>
Date: Wed, 5 Sep 2007 12:26:26 -0500

I'm pretty sure this old horse has been bludgeoned to within a micron
of its life a few times over.

If you use it, it's not advertised with physical "free WiFi" signage,
and it's not yours, it's immoral.

If it's wide open, they probably won't have the slightest clue that
it's being abused. Therefore, they probably won't catch you.

If you see it and bring it to their attention with a "by the way..."
business offer, that could be extrapolated as extortion.  Not only
have they "caught you", but you could get in more trouble than just
illegal access.

As a general rule, I leave open access points alone unless they're
advertised (not just broadcasting) or they're within the scope of a
sanctioned test.

--Noah

On 9/4/07, Barry Fawthrop <barry () ttienterprises org> wrote:
Hi All

Where does the wireless line being and end with regards to "illegal access"

Concept:

If company A has a wireless network (unprotected) No Encryption,
Broadcasting SSID, Default Acesss point user_name and password.

You know they need security. So is it wrong to
access the network and print to their printer a document
saying "You need security, I just accessed your network"

Or would one have to have permission first!.
I'm not talking about accessing data and files, but using the printer
and printing on their paper that they need help!!!.
And then going in and asking for a security contract having proved
beyond doubt that they need it.

Otherwise before hand it is just your word & experience against theirs
and obviously they are not going to admit they need help without being
shown?

Curious to hear your comments, or possible solutions to the same/similar
problems??

Thanks
Barry

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: