Feeds

Wireless insecurity: do not use the cheerleader defence

Don't try this at home, folks

Application security programs and practises

Comment The message boards are alive with misguided advice about wireless networks. Switch off your security, they say: you’ll get away with murder.

It follows the news that the music industry has dropped a lawsuit against Tammie Marson of Palm Desert, California. Marson argued that the fact that her computer contained illegal music files downloaded over her internet connection was not proof of a crime. As a cheerleader teacher, she said, hundreds of girls passed through her house, any one of whom could have used her PC. She also ran a wireless network without security – so anyone outside her house could have used her net connection.

Observers in homes without cheerleader traffic were fascinated by the wireless defence. "I’m going to open my network to the neighbourhood,” was a typical comment. "Screw the RIAA [Recording Industry Association of America]!” But think this through: suppose someone outside your house uses your connection to download child porn to a laptop, hack into a bank or launch a denial of service attack. Unless you change your router’s default settings, you’ll never know. But the police might. So they’ll impound your computer and, if they find no incriminating files, they might give it back; or suspect that you knew how to cover your tracks. It's your word against theirs. So keep your home network secure. For criminals, accessing an insecure network is as easy as putting on a balaclava.

Your office wireless network is more likely to have good security – but perhaps you should check. A quarter of business networks are unsecured, according to a recent wireless survey by RSA Security. Its tests in London this year found that 22% of access points still had default settings that put networks at risk. RSA points out that these offices are at risk of data theft and virus infection. It follows that they could also face difficult questions from police tracing terrible crimes. They might not prove anything against your company; but nor is it an investigation your business wants.

We don’t hear of such investigations today, but that could change. While the percentage of vulnerable networks is falling, it is falling slowly – and the total number of networks is rising fast. RSA reports a 73 per ecnt year-on-year rise in the number of wireless hotspots in London.

The police don’t like anonymity breaking evidential chains. Will they push for new laws that make unsecured networks illegal, or grounds for a claim that the operator is aiding and abetting the commission of a crime? After all, our Data Protection Act already has certain expectations of office networks that hold personal data. While the police don’t care about extending these expectations to protect movies and music, they do care about hacking and child porn; and right now they probably care even more about terrorist communications. At a time when air travellers can’t carry toothpaste, it doesn’t seem quite so far-fetched to foresee the banning of safe havens for criminal communications.

That may or may not happen. But for now, if nothing else, fix your wireless security. Otherwise you could find yourself reported in the press as helping the police with their enquiries in connection with a terrible crime. Nobody wants that.

Copyright © 2006, OUT-LAW.com

OUT-LAW.COM is part of international law firm Pinsent Masons.

This article was orginally published in Issue 15 of OUT-LAW magazine. Register with OUT-LAW to get a free subscription.

The Power of One eBook: Top reasons to choose HP BladeSystem

More from The Register

next story
BBC goes offline in MASSIVE COCKUP: Stephen Fry partly muzzled
Auntie tight-lipped as major outage rolls on
You! Pirate! Stop pirating, or we shall admonish you politely. Repeatedly, if necessary
And we shall go about telling people you smell. No, not really
Airbus promises Wi-Fi – yay – and 3D movies (meh) in new A330
If the person in front reclines their seat, this could get interesting
UK Parliament rubber-stamps EMERGENCY data grab 'n' keep bill
Just 49 MPs oppose Drip's rushed timetable
There's NOTHING on TV in Europe – American video DOMINATES
Even France's mega subsidies don't stop US content onslaught
Samsung threatens to cut ties with supplier over child labour allegations
Vows to uphold 'zero tolerance' policy on underage workers
Dude, you're getting a Dell – with BITCOIN: IT giant slurps cryptocash
1. Buy PC with Bitcoin. 2. Mine more coins. 3. Goto step 1
ITC: Seagate and LSI can infringe Realtek patents because Realtek isn't in the US
Land of the (get off scot) free, when it's a foreign owner
prev story

Whitepapers

Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.