Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Security-Basics
[Top] [All Lists]

Re: Wireless Security (Part 2)

Subject: Re: Wireless Security (Part 2)
Date: Wed, 17 May 2006 02:45:35 -0400
On May 16, 2006 02:47 pm, David Gillett wrote:

2.  Can you post a sign on your driveway, giving yourself the right to
search any cars that park there that you don't recognize?  I don't
think so.  You have the right to report them to the *police*, who in turn
might determine that a search warrant (or one of the few exceptions) is
appropriate, but simply arrogating that authority to yourself is risky
at best.

People confuse "rights" with what governments limit one in doing. The only 
"rights" that I know are those "natural rights" which include ownership of 
property.

With this in mind, I would have every right to do anything with any item found 
on my property without my permission or knowledge. In my jurisdiction, I 
don't have to call the police to have the property removed.  I can remove the 
vehicle myself without any permission from the State or its representatives.  
I may also have reason to search the vehicle myself before removing it for 
any number of reasons.  So, this analogy is false.

As someone who has a number of computers on a network, and include computers 
with multiple IP addresses, I believe i have every right to attack an IP I 
find on my network to discover what it is that is using that IP address.  I 
don't always have time, nor is it always convenient for me upon discover of 
the use of an IP address that I don't have a record of, to call all my 
customers and ask if they perhaps configured their computer with an IP 
(accidents can happen) incorrectly.

This applies to both wireless and wired components.

Depending on the circumstances, I may choose not to attempt to gain access to 
the computer or whatever it is that is on my network - if for example, one of 
my clients' boxes appears to have been hacked itself, and is sending out 
spam, I won't bother trying to access the box.  I'll simply walk over and 
unplug it.  One could argue that my actions of removing the ethernet cable 
from the box is some form of "trespass" against that box - the male end of 
the cable is inside the female end of the ethernet card inside the box.

They can argue that all they want - with whatever analogies they want.  It's 
my network - the resources that make the network possible, regardless of 
whether it is wired or wireless, are my resources.  It's my property - and I 
have every "right" to know what or who is on my network - and there may be 
times when I simply can't ask - I have to do something else to find out.



Attachment: pgpgz9abRyeOS.pgp
Description: PGP signature

<Prev in Thread] Current Thread [Next in Thread>