pen-test
[Top] [All Lists]

Re: Legality of WEP Cracking

To: <pen-test@securityfocus.com>
Subject: Re: Legality of WEP Cracking
From: "Morning Wood" <se_cur_ity@hotmail.com>
Date: Fri, 18 May 2007 16:47:14 -0700
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA+QrJM2ZtvkGw8Q52cxvSusKAAAAQAAAAsHC7awQCw0eNjHkJX0gt7QEAAAAA@kanoo-uk.com> <464E3004.9040204@yahoo.com>
Resent-date: Fri, 18 May 2007 18:54:20 -0600 (MDT)
Resent-from: pen-test-return-1078484192@securityfocus.com
Resent-message-id: <20070519005420.3E0B5237702@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
The UK law is clear, I quote from the UK Computer Misuse Act 1990
(http://www.opsi.gov.uk/ACTS/acts1990/Ukpga_19900018_en_2.htm):


from what I understand here in the US...

"sniffing the air"        is legal
"connecting to an AP you do not have explicit permission"       is illegal
"possession of an access restriction device" eg: WEP key
that you are not explicitly allowed permission is illegal

capturing airborne packets "may" be legal, but the moment you begin to
"try" to "crack" a WEP key, you would be entering access restriction device
realm instantly. ( do not pass GO! ) , as well, simply connecting to your
target AP is illegal from the get-go ( gimme your dice! )

but my understanding is only a perspective, which may or not be completely
askew...

M.W

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>