pen-test
[Top] [All Lists]

Re: Legality of WEP Cracking

To: Richard Brinson <richard@kanoo-uk.com>
Subject: Re: Legality of WEP Cracking
From: John Mason Jr <john.mason.jr@cox.net>
Date: Mon, 21 May 2007 13:51:30 -0400
Cc: pen-test@securityfocus.com
Delivered-to: sp-com-lists@consult.net
Delivered-to: pentest-list2@consult.net
Delivered-to: mailing list pen-test@securityfocus.com
Delivered-to: moderator for pen-test@securityfocus.com
In-reply-to: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA+QrJM2ZtvkGw8Q52cxvSusKAAAAQAAAAsHC7awQCw0eNjHkJX0gt7QEAAAAA@kanoo-uk.com>
List-help: <mailto:pen-test-help@securityfocus.com>
List-id: <pen-test.list-id.securityfocus.com>
List-post: <mailto:pen-test@securityfocus.com>
List-subscribe: <mailto:pen-test-subscribe@securityfocus.com>
List-unsubscribe: <mailto:pen-test-unsubscribe@securityfocus.com>
Mailing-list: contact pen-test-help@securityfocus.com; run by ezmlm
References: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA+QrJM2ZtvkGw8Q52cxvSusKAAAAQAAAAsHC7awQCw0eNjHkJX0gt7QEAAAAA@kanoo-uk.com>
Reply-to: john.mason.jr@cox.net
Resent-date: Tue, 22 May 2007 00:32:32 -0600 (MDT)
Resent-from: pen-test-return-1078484223@securityfocus.com
Resent-message-id: <20070522063232.2CA46143733@outgoing2.securityfocus.com>
Resent-sender: listbounce@securityfocus.com
Sender: listbounce@securityfocus.com
User-agent: Thunderbird 1.5.0.10 (Windows/20070221)
Why not sponsor a luncheon or security workshop through your local
chamber of commerce?

This way you get assistance getting the word out and everything is above
board.

Make the presentation short but show examples of how this is relevant to
the businesses

John



Richard Brinson wrote:
> During an internal business development meeting yesterday we were discussing
> new ways of picking up pen testing clients. One of our junior engineers
> suggested that we go war driving, crack some WEP keys and then approach each
> company offering services to make them more secure. The idea was put down
> straight away on the basis that without prior approval we would be breaking
> the law. However, upon further discussion a case was made that (moral issues
> aside) provided we only captured traffic passively, and as long as we did
> not try to connect or send any packets to any devices - would the law be
> broken?  
>  
> Does the law state anywhere that we can not analyse air traffic that is
> broadcast into the public domain? (if so surely we would all be breaking the
> law every time we picked up a network other than our own) and is it against
> the law to know someone else's WEP key when they have not made that
> information available to you?
>  
> What are your thoughts on this?
>  
> Kind regards,
>  
> Richard Brinson
> Kanoo Ltd
>  
> This message contains confidential information and is intended only for the
> individual named. If you are not the named addressee you should not
> disseminate, distribute or copy this e-mail. Please notify the sender
> immediately by e-mail if you have received this e-mail by mistake and delete
> this e-mail from your system. E-mail transmission cannot be guaranteed to be
> secure or error-free as information could be intercepted, corrupted, lost,
> destroyed, arrive late or incomplete, or contain viruses. The sender
> therefore does not accept liability for any errors or omissions in the
> contents of this message, which arise as a result of e-mail transmission.
> 
> 
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
> 
> Are you using SPI, Watchfire or WhiteHat?
> Consider getting clear vision with Cenzic
> See HOW Now with our 20/20 program!
> 
> http://www.cenzic.com/c/2020
> ------------------------------------------------------------------------
> 
> 
> 



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------


<Prev in Thread] Current Thread [Next in Thread>