3 ms·

Yes, it is generally understood that the FCC rulings on WiFi jamming continue to permit WIPS/WIDS systems that actively mitigate rogue APs that appear to pose a

Yes, it is generally understood that the FCC rulings on WiFi jamming continue to permit WIPS/WIDS systems that actively mitigate rogue APs that appear to pose a security threat, and broadcasting your SSID without authorization would be a good example of this. There was quite a bit of talk about this in the WIPS industry after these fines, and while I don't think the FCC has really made a clear clarification on the issue, the vendors have all put out statements that are similar variations on "it's okay for matching SSIDs" and I don't think there has been any contest to this. Vendors do recommend that you be careful that active mitigation will not impact APs operating off your property, implicitly even if they are broadcasting your SSID. In general I think the FCC is taking an intent approach to this, from the security side - their rulings on WiFi jamming cases have generally specifically mentioned the lack of a reasonable security justification.

closeparen 10y ago
This is interesting, because SSIDs are not callsigns and not allocated or registered anywhere. Who's to say the enterprise network's claim on the SSID is more legitimate than the attacker's?
- throwaway729 10y ago
  Again, intent comes to the rescue.
- Analemma_ 10y ago
  There's not really any reason to use the same SSID as the enterprise other than to fool users in to connecting to it for malicious purposes, so targeting networks with the same SSID would probably fall under reasonable security procedures and not subject to this ruling.
- syshum 10y ago
  If you are at a HolidayInn, and connect to a HolidayInn SSID then a reasonable person would expect that to be assocated with HolidayInn Chain of Hotels, that is where HolidayInn would have a more legitimate Claim to the HolidayInn SSID then some random Person Trademarks, Fraud, etc could be the legal basis for this.

closeparen 10y ago

This is interesting, because SSIDs are not callsigns and not allocated or registered anywhere. Who's to say the enterprise network's claim on the SSID is more legitimate than the attacker's?

throwaway729 10y ago
Again, intent comes to the rescue.
Analemma_ 10y ago
There's not really any reason to use the same SSID as the enterprise other than to fool users in to connecting to it for malicious purposes, so targeting networks with the same SSID would probably fall under reasonable security procedures and not subject to this ruling.
syshum 10y ago
If you are at a HolidayInn, and connect to a HolidayInn SSID then a reasonable person would expect that to be assocated with HolidayInn Chain of Hotels, that is where HolidayInn would have a more legitimate Claim to the HolidayInn SSID then some random Person Trademarks, Fraud, etc could be the legal basis for this.