Feeds

Wireless insecurity: do not use the cheerleader defence

Don't try this at home, folks

High performance access to file storage

Comment The message boards are alive with misguided advice about wireless networks. Switch off your security, they say: you’ll get away with murder.

It follows the news that the music industry has dropped a lawsuit against Tammie Marson of Palm Desert, California. Marson argued that the fact that her computer contained illegal music files downloaded over her internet connection was not proof of a crime. As a cheerleader teacher, she said, hundreds of girls passed through her house, any one of whom could have used her PC. She also ran a wireless network without security – so anyone outside her house could have used her net connection.

Observers in homes without cheerleader traffic were fascinated by the wireless defence. "I’m going to open my network to the neighbourhood,” was a typical comment. "Screw the RIAA [Recording Industry Association of America]!” But think this through: suppose someone outside your house uses your connection to download child porn to a laptop, hack into a bank or launch a denial of service attack. Unless you change your router’s default settings, you’ll never know. But the police might. So they’ll impound your computer and, if they find no incriminating files, they might give it back; or suspect that you knew how to cover your tracks. It's your word against theirs. So keep your home network secure. For criminals, accessing an insecure network is as easy as putting on a balaclava.

Your office wireless network is more likely to have good security – but perhaps you should check. A quarter of business networks are unsecured, according to a recent wireless survey by RSA Security. Its tests in London this year found that 22% of access points still had default settings that put networks at risk. RSA points out that these offices are at risk of data theft and virus infection. It follows that they could also face difficult questions from police tracing terrible crimes. They might not prove anything against your company; but nor is it an investigation your business wants.

We don’t hear of such investigations today, but that could change. While the percentage of vulnerable networks is falling, it is falling slowly – and the total number of networks is rising fast. RSA reports a 73 per ecnt year-on-year rise in the number of wireless hotspots in London.

The police don’t like anonymity breaking evidential chains. Will they push for new laws that make unsecured networks illegal, or grounds for a claim that the operator is aiding and abetting the commission of a crime? After all, our Data Protection Act already has certain expectations of office networks that hold personal data. While the police don’t care about extending these expectations to protect movies and music, they do care about hacking and child porn; and right now they probably care even more about terrorist communications. At a time when air travellers can’t carry toothpaste, it doesn’t seem quite so far-fetched to foresee the banning of safe havens for criminal communications.

That may or may not happen. But for now, if nothing else, fix your wireless security. Otherwise you could find yourself reported in the press as helping the police with their enquiries in connection with a terrible crime. Nobody wants that.

Copyright © 2006, OUT-LAW.com

OUT-LAW.COM is part of international law firm Pinsent Masons.

This article was orginally published in Issue 15 of OUT-LAW magazine. Register with OUT-LAW to get a free subscription.

High performance access to file storage

More from The Register

next story
Audio fans, prepare yourself for the Second Coming ... of Blu-ray
High Fidelity Pure Audio – is this what your ears have been waiting for?
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
Zucker punched: Google gobbles Facebook-wooed Titan Aerospace
Up, up and away in my beautiful balloon flying broadband-bot
Nokia offers 'voluntary retirement' to 6,000+ Indian employees
India's 'predictability and stability' cited as mobe-maker's tax payment deadline nears
Apple DOMINATES the Valley, rakes in more profit than Google, HP, Intel, Cisco COMBINED
Cook & Co. also pay more taxes than those four worthies PLUS eBay and Oracle
It may be ILLEGAL to run Heartbleed health checks – IT lawyer
Do the right thing, earn up to 10 years in clink
France bans managers from contacting workers outside business hours
«Email? Mais non ... il est plus tard que six heures du soir!»
Adrian Mole author Sue Townsend dies at 68
RIP Blighty's best-selling author of the 1980s
Analysts: Bright future for smartphones, tablets, wearables
There's plenty of good money to be made if you stay out of the PC market
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.