Ok i know this is nothing really to do with the dell axim, but i do need some serious advice.
Ok here goes, i loaded my laptop up with a wireless card and drove down my local high street where i very quickly picked up a completely open wireless network.
This network was so bad! i was given an ip address, gateway etc, i was even able to get out onto the net! by this time i was really curious. A quick run of a network mapping tool quickly gave me the address of a few printers and a system called "server". I am guessing all other systems are switched off for the night. I try running a terminal services session on this "server" and there it is a logon screen (must be a small business cuz "server" is an xp pro system).
So basically i am able to access this companys server (just a password stopping me from getting there data) use the internet (they could be getting charged for this) and access any system on the network just by driving up outside there building.
Ok here is the dilema, do i tell them? i don't know exactly what building the signal is coming from but i could easily do a net send message to the server asking him to call me or whatever. or do i keep quiet and leave it wide open, possibly for someone who isnt so white hat to come along and completely trash the system.
What sorta trouble could i get in if he takes offence and doesnt realise i am just trying to help. Argh give me advice!
Originally posted by janine248 ditto...and I don't think too many would find that offensive...they would most likely be glad someone cared enough to let them know.
Although.. Some people might let ego get the better of them. It's their problem, but technically what you did was illegal so I would keep my nose clean AND do the right thing by maintaining anonymity.
By reading your post it's obvious a complete novice set up the wireless network. I would go ahead and provide a net msg to the server explaining how you were able to access the server. It appears you're explaining the problem with sincerety and no malicious intent, so I don't think they could come after you because of their "open" system. Bad publicity alone would create mistrust for the buisness on how confidential data was handled. A good system admin wouldn't of let it happen. Personally, I would thank you and correct the problem immediatly.
Originally posted by Howard2k ...but technically what you did was illegal so...
A few months ago there was a thread discussing wardriving and accessing wireless networks and one of your countrymen suggested the Canadian laws were quite clear in allowing access to open networks as long as no attempt was made to usurp encryption or access personal data. The U.S. law is less clear on it and probably varies by state, but I've never seen a case prosecuted where someone accessed an open network such as brywebster found. I have no idea what the British law says on the subject but as cabarle suggested, the company has a lot more to lose than the little bandwidth he used if they let their inept administration of their network become public knowledge.
__________________ -Ike-
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. and To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
FWIW (there is a London in Canada too) there is a ruling in Canada called the Mischief to Data act and in the UK there is the Misuse of Computers Act.
Depending on which London I was in I'd take a look into both these articles (and other relevant ones I could find) before any attempt at claiming glory, expecting even a thank you etc.
If someone comes into my house and then tells me that my fire detector is broken, I'm not sending them a xmas card.
Different analogy I know. But gives you an alternate viewpoint.
__________________
Always read stuff that will make you look good if you die in the middle of it.
If I was driving down a road to get somewhere, And that road was not marked as private property and didn't have a gate, should I get a ticket for trespassing? I don't think so. How can you know its private property if its not marked. Its just a road and could be public.
By the same token; Unless the wireless network is secure, passworded or closed off somehow then how do you know its NOT a public network access?
In fact their network is broadcasting I'm here, here is my name and here is an IP address for you to use. If thats not an open invitation then I don't know what is.
Thats like me saying my house is here, Here is the door, and here is the key so you can open it. But then turn around and complain when someone uses it?????
Good analogy. And the whole DHCP defence has merit too.
Like I said in my second or third post on the thread. I should have said that legally it's shaky ground, not that it's illegal.
Since we don't know which London this guy lives in and I'll bet that none of us are lawyers that specialise in computer security and data protection, I'm thinking that we should not be putting our fellow board member in a potentially bad situation.
What if it's a smaller firm that has been hacked before and has put up a honey pot to catch repeat offenders?
In all likeihood it will be fine. But at the end of the day if it's not fine and he gets in trouble then we're that sit on the sidelines. It's a gray line and I'd play it safe... I'd stay anonymous.
__________________
Always read stuff that will make you look good if you die in the middle of it.
hi there, thanks for all the advice so far. i live in london in the UK, so i have no idea where i stand legally.
I think i have decided what to do, i am going to say that i was surfing the net and found a website listing open networks, and they were listed, and because they were just at the bottom of my road i decided to give to see if it was true. Then say when i realised they were wide open i decided to tell them.
Or tell them that i live really close and always pick up there signal from my house. Anyway i sent a message to there server basically saying, your network is wide open please give me a call on this number.
We will just have to wait and see what happens now tho.
ok i did not get any response from this company, and to be honest my curiosity really got the better of me so i setup camp outside their offices again. This time i ran the network mapper and got the address of the server again. This time i hit start -> run and then typed in \\192.168.201.200\
This gave me a password screen asking for logon box, and guess what all i had to do was log on with the guest account and a blank password and there it was, all this companys data just waiting there to be copied and sold to there nearest competitor.
I am leaving this well alone now! its there problem that they are so stupid.
P.S i found out that this company are involved in security products!! smart cards and stuff.
Follow Us
RSS Feed
Follow on Twitter
Facebook
YouTube
Serious Advice Needed!
Addicted Member
Elite Member
