Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

prepare to be arrested for various violations as a punishment for pointing out these obvious and dangerous flaws.


I mean he did unplug network equipment and MiTM, if this isn't illegal it probably should be. I see ethernet cables all the time in things like hospitals and hotels, should anyone be able to simply unplug them and put their laptops in the middle?


Yes, anybody should be able to do that with no legal consequences. If you don't want to give people access to your network, don't provide them with a fucking port and cable explicitly designed for doing so.


Come on now, you really think people should be able to unplug cables anywhere they go? This could have major consequences at a hospital.

Edit: Completely agree Ska, no excuse for making it this easy. I'm just pointing out that just because it's easy to pick a lock or unplug some wires to MiTM doesn't mean it should be legal.


People shouldn't unplug equipment in a hospital without express permission, sure - they shouldn't do it in your home either.

If your security model relies on this, though, you have failed. Period.

It is maybe a little fuzzier in a hotel (should I be able to stream content to the TV from my device instead of paying you extra for a movie?) but similar applies.


Yes, if it's accessible, and nothing implies that you shouldn't - why not?

If a cable is not meant to be unplugged - there should either be a warning sign/message, a protection measure (even a nominal one, serving as a mere warning), or you shouldn't normally get access to it in a first place.

Obviously, there is common sense, too - you don't plug some working medical equipment, even though there may be no warnings - it's implied that it's commonly understood that disconnection would interfere with device's operation and endanger the patient. Or you don't suddenly turn off someone's PC at office just because the power outlet isn't covered by the table.

The door example is also misleading and plain wrong analogy. We're not talking about trespassing on others' property. When you rent a room, it's a common sense that you shouldn't steal the TV from it, but nothing tells you if some random Ethernet cable is some private network or just a WiFi replacement. It's the same as any other electrical socket (well, except it's a plug, not socket) - nothing implies that you can't use it, as long as you don't cause any damage to the property. If a rented room has a floor fan plugged in, I doubt you shouldn't be allowed to plug it out or even satisfy your curiosity and measure how much power it consumes. As long as you don't damage anything, of course.

There are too many people out there who want to plug in some odd lawmaking solutions (always, restrictions) that don't actually solve anything.


"You stole my TV!"

"If you don't want to give people access to your house don't provide them with a f*ing door explicitly designed for doing so."


I feel like there's a significant difference between a locked-door, and an unsecured cable/port


But what if you leave your door unlocked, or it isn't locked in a secure enough way?

Who is the guilty party?

Really, this is just social/legal understanding. It's unacceptable to open someone's door -- even if unlocked -- but acceptable (?) to wire yourself into someone's network if unguarded.


Given that this is in the UK, I wouldn't be surprised.


Hacker!!




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: