4-66
1. If you were a member of the state legislature, what would you do, if anything?
2. If you were a public official (county or parish), what would you do, if anything?
3. If you were the CEO of a company manufacturing TVs, what would you do, if anything?
MINICASE 2. Wireless Wardriving
A car equipped with a laptop computer, a portable GPS receiver, and a wireless network card
drives through your neighborhood. Unknown to onlookers, the people in this car are actually “wardriv-
ing,” scanning for any wireless access points. Anyone with a wireless router is vulnerable.
open, including 8 in a local school and 1 in a firehouse.
Gathering information is no crime, but it’s illegal to access found networks. In 2003 Paul Tim-
mins and Adam Botbyl, members of the Michigan 2600 group of hackers, found this out. They were war-
driving in Southfield, Michigan, when they came upon a Lowe’s hardware store with an open wireless
network. What Timmins did next was technically illegal: He used the Lowe’s network to check his e-
mail. When he realized it was Lowe’s private network, however, he disconnected. Lowe’s became aware
of the breach and contacted the FBI, who charged Timmins with one count of unauthorized computer ac-
cess.
Some insiders believe that Lowe’s was partially responsible for the breach for not ensuring its
private wireless network was not leaking information. Others ask why consumers should not be able to
sue companies that are negligent with their personal data. California has passed a law that makes compa-
nies more responsible for protecting personal information, with stiff penalties for failure to report any
compromises.ix
1. Who is more responsible for breach in wireless security—the drivers who search for unsecured
networks or the owners/managers who leave their networks unprotected?
2. Are the wardrivers’ actions ethical? Explain.