Re: Defcon 19: [So tell me about the Rio] (recon and intel)
Laws vary from state to state, country to country, but in the U.S., a common "test" with wireless work is:
* Is there expectation for privacy?
* Is the a "conversation" between two parties, where you were not invited to be a part of it?
* Are you using a resource you were not authorized to use?
Privately receiving and logging Access Points "names" MAC addresses and what encryption access points support is likely not going to be considered illegal in many places, but publishing this information with where you found it could lead to legal problems in the civil courts with respect to privacy. The World Wide Wardriving contests/events did this for many years, but google has encountered trouble when trying to make such information publicly available, especially in countries outside the US, like France or Germany:
* http://www.computerworlduk.com/news/...ng-wi-fi-data/
* http://www.macvideo.tv/editing/news/...pe=allchandate
Unless you are the government, in many/?most? places it is illegal for you to "eavesdrop"+record on conversations that you are not a part of. There are exceptions to this. For example, it is legal to "listen" to CB conversations that you are not a member of, because there is no expectation of privacy, and maybe because of the band/frequencies used. (Check with a licensed HAM or someone more familiar with the FCC for how licensed, vs. unlicensed or open/public frequencies can be legally observed. For example, it may be legal to listen to 900 MHz broadcasts (not conversations) but illegal to listen to microwave frequencies licensed (non-public) to service providers.)
Intercepting and recording conversations that you were not invited to participate in would likely be illegal.
Using/Stealing Internet access from a person running a wireless access point would almost certainly be considered a crime, like, "theft of service," even if it is difficult to document and enforce. It might even be possible to prosecute someone under the Computer Fraud and Abuse Act, as it may be possible to effectively argue that an access point is a "computer" -- though I don't know how effective that would be. Google might help you there.
Sorry to be vague, but the laws that cover what is legal or illegal in the realm of recording wireless will be different from state to state and country to country.
Originally posted by mwerte
View Post
* Is there expectation for privacy?
* Is the a "conversation" between two parties, where you were not invited to be a part of it?
* Are you using a resource you were not authorized to use?
Privately receiving and logging Access Points "names" MAC addresses and what encryption access points support is likely not going to be considered illegal in many places, but publishing this information with where you found it could lead to legal problems in the civil courts with respect to privacy. The World Wide Wardriving contests/events did this for many years, but google has encountered trouble when trying to make such information publicly available, especially in countries outside the US, like France or Germany:
* http://www.computerworlduk.com/news/...ng-wi-fi-data/
* http://www.macvideo.tv/editing/news/...pe=allchandate
Unless you are the government, in many/?most? places it is illegal for you to "eavesdrop"+record on conversations that you are not a part of. There are exceptions to this. For example, it is legal to "listen" to CB conversations that you are not a member of, because there is no expectation of privacy, and maybe because of the band/frequencies used. (Check with a licensed HAM or someone more familiar with the FCC for how licensed, vs. unlicensed or open/public frequencies can be legally observed. For example, it may be legal to listen to 900 MHz broadcasts (not conversations) but illegal to listen to microwave frequencies licensed (non-public) to service providers.)
Intercepting and recording conversations that you were not invited to participate in would likely be illegal.
Using/Stealing Internet access from a person running a wireless access point would almost certainly be considered a crime, like, "theft of service," even if it is difficult to document and enforce. It might even be possible to prosecute someone under the Computer Fraud and Abuse Act, as it may be possible to effectively argue that an access point is a "computer" -- though I don't know how effective that would be. Google might help you there.
Sorry to be vague, but the laws that cover what is legal or illegal in the realm of recording wireless will be different from state to state and country to country.
Comment