pen-test
[Top] [All Lists]

Re: Legality of WEP Cracking

To: "Morning Wood" <se_cur_ity@hotmail.com>
Subject: Re: Legality of WEP Cracking
From: DaKahuna <da.kahuna@gmail.com>
Date: Sat, 19 May 2007 15:39:43 -0400
Cc: <pen-test@securityfocus.com>
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:in-reply-to:references:mime-version:x-priority:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer; b=NVsiuvauQH2vaDjnjXEgzFqJATi2f9/3dKuDTEB7gDl5C35p4QrX0ynXd5R6CF61UF1HfNFwMbZtErVqdVMSshjCKy6RyAOIWZBNNeARyiNNxUDcLQQqR+dujCCDAYhiQfuXriCrOR9Y2fCy9xQ8bY+E1kISiEkLfG90LhUB5UM=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:in-reply-to:references:mime-version:x-priority:content-type:message-id:cc:content-transfer-encoding:from:subject:date:to:x-mailer; b=PPe3BvA9u+TApBUroGqunrDpakhltyoWHqT55I0Sbvh8w9HE0hFeuf28TEbT4VY8o7Y1P5HbHJy89jz5hzH0imlNdMcI+hCYql29MAobPyum5BmsFkgPbpvdhQUTmsLYApvDPkF4hulQc59kS4lSTsOeh9thfL5Kdq7WZapF5RM=
In-reply-to: <BAY124-DAV125844CF6E6E14E6011176D9320@phx.gbl>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA+QrJM2ZtvkGw8Q52cxvSusKAAAAQAAAAsHC7awQCw0eNjHkJX0gt7QEAAAAA@kanoo-uk.com> <464E3004.9040204@yahoo.com> <BAY124-DAV125844CF6E6E14E6011176D9320@phx.gbl>
Resent-date: Sat, 19 May 2007 13:35:01 -0600 (MDT)
Resent-from: pen-test-return-1078484205@securityfocus.com
Resent-message-id: <20070519193501.D6C2C2379FD@outgoing3.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com

On May 18, 2007, at 7:47 PM, Morning Wood wrote:

The UK law is clear, I quote from the UK Computer Misuse Act 1990
(http://www.opsi.gov.uk/ACTS/acts1990/Ukpga_19900018_en_2.htm):


from what I understand here in the US...

"sniffing the air"        is legal
"connecting to an AP you do not have explicit permission" is illegal
"possession of an access restriction device" eg: WEP key
that you are not explicitly allowed permission is illegal

capturing airborne packets "may" be legal, but the moment you begin to
"try" to "crack" a WEP key, you would be entering access restriction device realm instantly. ( do not pass GO! ) , as well, simply connecting to your
target AP is illegal from the get-go ( gimme your dice! )

but my understanding is only a perspective, which may or not be completely
askew...


 How about this scenario.

I am sitting in a Starbuck$ and am connected to the T-Mobile Wireless service.
I start Wireshark and capture all the packets I am seeing from the WAP.
Is this legal or illegal?



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>