3 ms·
What are the legal ramifications of running firesheep on a public network?
by lowglow 16y ago
What are the legal ramifications of running firesheep on a public network?
- helwr 16y ago"Google, in response to government inquiries and lawsuits, claims it is lawful to use packet-sniffing tools readily available on the internet to spy on and download payload data from others using the same open Wi-Fi access point." will see who wins in the court :http://www.wired.com/threatlevel/2010/06/packet-sniffing-laws-murky/ http://www.wired.com/threatlevel/2010/06/packet-sniffing-law... see also : http://blogs.forbes.com/kashmirhill/2010/10/28/firesheep-users-may-be-breaking-the-law/ http://blogs.forbes.com/kashmirhill/2010/10/28/firesheep-use...
- jozo 16y agoYou should note that firesheep, besides sniffing packets, also lets you use other peoples sessions. Which probably has other legal implications.
- jasondavies 16y agoPassive sniffing is one thing. Active unauthorised access to a computer using FireSheep is definitely illegal in the UK according to the Computer Misuse Act: (1) A person is guilty of an offence if— (a) he causes a computer to perform any function with intent to secure access to any program or data held in any computer, or to enable any such access to be secured; (b) the access he intends to secure, or to enable to be secured, is unauthorised; and (c) he knows at the time when he causes the computer to perform the function that that is the case. (2) The intent a person has to have to commit an offence under this section need not be directed at— (a) any particular program or data; (b) a program or data of any particular kind; or (c) a program or data held in any particular computer. I think passive sniffing may also be illegal in the UK according to RIPA [1] as it is unauthorised interception of public telecommunications. [1]: http://www.legislation.gov.uk/ukpga/2000/23/part/I/chapter/I/crossheading/unlawful-and-authorised-interception http://www.legislation.gov.uk/ukpga/2000/23/part/I/chapter/I...
- mike-cardwell 16y agoYeah, definitely illegal in the UK. I'd be surprised if it wasn't illegal in the US too. So he's basically just blogged about committing a crime. I wonder what would happen if one if his "victims" read this and then contacted the police. I bet Facebook has enough information logged about which accounts were accessing Facebook from that IP at the time, and which of them received his messages.
- cvg 16y agoI was wondering the same thing. Posting this to his public blog is an admission of guilt.
- gloshuertos 16y agoClearly, and I am at the mercy of the American justice system.
- catch23 16y agoif it were somehow deemed illegal, i'm sure github would get a subpoena requesting a list of everyone who downloaded firesheep... and then everyone on HN would be looking for a lawyer.
- robryan 16y agoI would imagine they would need to actually prove you hijacked someones cookie? You could always claim you downloaded it to view the source or to check if your security implementation was broken by it.
- mike-cardwell 16y agoGithub has logs of who downloaded Firesheep. Github doesn't have logs of who downloaded Firesheep and used it to sniff somebodys traffic without their permission.