Law: compulsory wireless passwords

[bixaorellana]

Original story here, with reader comments below it

German court orders wireless passwords for all
Associated Press Writer Kirsten Grieshaber, 1 hr 35 mins ago

BERLIN – Germany's top criminal court ruled Wednesday that Internet users need to secure their private wireless connections by password to prevent unauthorized people from using their Web access to illegally download data.

Internet users can be fined up to euro100 ($126) if a third party takes advantage of their unprotected WLAN connection to illegally download music or other files, the Karlsruhe-based court said in its verdict.

"Private users are obligated to check whether their wireless connection is adequately secured to the danger of unauthorized third parties abusing it to commit copyright violation," the court said.

But the court stopped short of holding the users responsible for the illegal content the third party downloads themselves.

The court also limited its decision, ruling that users could not be expected to constantly update their wireless connection's security — they are only required to protect their Internet access by setting up a password when they first install it.

The national consumer protection agency said the verdict was balanced.

Spokeswoman Carola Elbrecht told the German news agency DAPD it made sense that users should install protection for their wireless connection and that at the same time it was fair of the court not to expect constant technical updates by private users.

The ruling came after a musician, who the court did not identify, sued an Internet user whose wireless connection was used to illegally download a song which was subsequently offered on an online file sharing network.

But the user could prove that he was on vacation while the song was downloaded via his wireless connection. Still, the court ruled he was responsible to a degree for failing to protect his connection from abuse by third parties.

About 26 million homes in Germany have wireless Internet access, according to Bitkom, the German Association for Information Technology, Telecommunications and New Media.

[Deleted]

Hmmm... let me see how many wireless connections are within reach of my apartment.... not that many tonight, only 11.

[Deleted]

zero. Apart from our own.

[bixaorellana]

I wouldn't know how to check. How do you check if someone else is piggybacking on your broadband connection?

But back to the OP ~~

Doesn't this law make sense? Whatever else, it's a good way to remind people that they need security on the internet.

[Deleted]

I wouldn't even know how to make my connection 'non-secure'. When you get your wifi box here, it has a complicated code that you have to enter the first time. I have no idea how to deactivate the code to allow anybody to use the connection.

However, since the McDonald's and Quick hamburger chains have free wifi for anyone, as do at least half of the cafés in Paris, obviously it is easy to open up the connections.

[Jazz]

May 12, 2010 19:58:54 GMT bixaorellana said:

I wouldn't know how to check. How do you check if someone else is piggybacking on your broadband connection?

But back to the OP ~~

Doesn't this law make sense? Whatever else, it's a good way to remind people that they need security on the internet.

For me, 7, it varies. Bixa, when I log in to IE, a box pops up notifying me how many other wireless connections are within reach, it disappears after about 1 minute. I think it is difficult to know if your wireless is being used, but not impossible. My tech wizard friend knows how to check and 'hacker-proof'.

I think the law makes sense and it would be easy to implement. The internet is a lawless frontier at the moment and this may help, but on the other hand, the sophisticated hackers are probably well ahead of this suggestion.

[bixaorellana]

I'm pretty sure I have wireless as part of my internet package, but I've never activated it since I don't have a laptop.

As you say, if hackers want to get in, they probably can. What surprised me in the news article is that there were people who were opposed to the password law. Why?

[hwinpp]

That wasn't just Germany's top criminal court, it was the Constitutional Court. That means there must already be lots of cases regarding this problem.

What surprised me in the news article is that there were people who were opposed to the password law. Why?

I don't know either, perhaps it's so much of a hassle that people think it infringes on their right to laziness?

[fumobici]

I see internet like roads- basic infrastructure now, that should be publicly funded and universally available everywhere or as close as practical. This law on its face seems destined to kill businesses or public spaces with wireless hot spots as there is probably no way to police the content people access through the provided wireless connection. Looks to me like a solution far worse than the problem. The IP lawyers would shut down the internet entirely if they could as it can never be locked down to their satisfaction and still function, I wouldn't listen to a word they said.

I had to set up my wireless network with a WEP code, I'd be happy to share my bandwidth with neighbors though as long as they weren't into DLing movies.

[Deleted]

Yes, in France (and also in Italy for sure) and I'm sure a number of other countries, you have to present valid ID in a cybercafé. This is an anti terrorist measure (ha ha). I don't think that the police are really that naive, but it is a way to pander to public opinion. All you need is one single case where it is determined that the awful criminal sent his dreadful message from a cybercafé, and you will have the masses clamoring for more control.

Rule the people with fear, as always.

[fumobici]

No, I've used internet cafés and paid in cash in Italy many times without ever showing ID. On a wireless network, even if you check and store IDs- of which any serious criminal will obviously be using faked- it's no simple matter to definitively ID and connect data packets to both a specific laptop or other network device and that device to a specific user. There are also lots well known and available of ways to game such attempts.

If you go to a Starbucks in Paris for a coffee with your laptop is there a wireless network available without showing ID?

[spindrift]

I have no idea how to deactivate the code to allow anybody to use the connection.

There is nothing that annoys me more than visiting someone's house with my laptop and being unable to connect to their internet because they do not know their security code.

[lagatta]

So many anti-terrorist measures have nothing to do with stopping fanatics from trying to set off bombs.Remember the incompetend terrorist who supposedly brought liquids on board to make a bomb? Look how miserable that story has made travellers' lives. The recent plots foiled have been through good policing, not idiotic "rules".

[bixaorellana]

To me it seems that the German court's ruling is to set a precedent that will make the resolution of any similar cases cut & dried:

The ruling came after a musician, who the court did not identify, sued an Internet user whose wireless connection was used to illegally download a song which was subsequently offered on an online file sharing network.

But the user could prove that he was on vacation while the song was downloaded via his wireless connection. Still, the court ruled he was responsible to a degree for failing to protect his connection from abuse by third parties.

Supposedly there is a way for people to piggyback on a broadband account that would make the legitimate user's service run more slowly. Is that the case with wireless?

[fumobici]

Sure, just brute force the WEP code to gain access, then unobtrusively tap into the unused bandwidth present 99% of the time on any broadband connection not in use by anyone but a hardcore file sharer and you could leech gigs a week and the account owner would probably never notice anything. Most people leave their wireless router up, even when their computers are powered down.

[Deleted]

May 13, 2010 21:28:40 GMT spindrift said:

I have no idea how to deactivate the code to allow anybody to use the connection.

There is nothing that annoys me more than visiting someone's house with my laptop and being unable to connect to their internet because they do not know their security code.

Yeah, it's good to write it down. Everyone is too far away from me to catch the signal. Most have it blocked anyway. But when I've driven past with the net-book, I've picked up various wireless connections. In town we have free Internet all around the University and various other places too.

[hwinpp]

May 14, 2010 3:35:30 GMT bixaorellana said:

To me it seems that the German court's ruling is to set a precedent that will make the resolution of any similar cases cut & dried:

The ruling came after a musician, who the court did not identify, sued an Internet user whose wireless connection was used to illegally download a song which was subsequently offered on an online file sharing network.

But the user could prove that he was on vacation while the song was downloaded via his wireless connection. Still, the court ruled he was responsible to a degree for failing to protect his connection from abuse by third parties.

Supposedly there is a way for people to piggyback on a broadband account that would make the legitimate user's service run more slowly. Is that the case with wireless?

Yes, ok, I understand. The Germans are paranoid about everything so this would go to the supreme court...

Have I told you that I'm sort of friends with one of the bosses of Pirate Bay?

[bixaorellana]

I never heard of Pirate Bay, I guess since I stream instead of download. Their wikipedia entry reads like a movie! They must be a hot potato to the courts, as at every turn decisions concerning them would be precedent setting.

You know some interesting people!