<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Iain Barnett wrote:
<blockquote cite="mid:7489F610-A26D-4C6F-8148-B08B81755EF9@gmail.com"
type="cite">
<div>Sorry for the slow reply, I didn't have any internet access! :D</div>
<br>
<div>
<div>On 2 Mar 2010, at 09:41, Lee Hughes wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<table style="position: static; z-index: auto;" border="0"
cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td
style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;"
valign="top">Correction Iain, reading the thread (that my email client
manged beyond
<div>belief) that you do understand wifi and encryption etc
etc,</div>
<div><br>
</div>
<div>I'll take those comments back! sorry! :-)</div>
<div><br>
</div>
</td>
</tr>
</tbody>
</table>
</blockquote>
</div>
<br>
<div>Well, your karma was that after the first line I didn't read
your comments either :-)</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>On 2 Mar 2010, at 01:22, Rick Moynihan wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite"><span class="Apple-style-span"
style="border-collapse: separate; font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;"><br>
Equating "crap network security" with open hotspots is a sweeping<br>
generalisation, and I find it hard to believe that legislation is<br>
going to improve the security of the average household.<br>
<br>
Networking is not a crime any more than building roads is, and we all<br>
know bank robbers use Roads for their get-aways! The world needs more<br>
free, open registration-less WiFi, not less.</span></blockquote>
<div><br>
</div>
<div>I _do_ equate anonymous access with a bad setup. If you can give
me one good reason to run a network that allows entirely anonymous
access (at the local level) that would make sense to anyone who spends
their time running a network, you go for it! I can't see "Completely
Open and Anonymous Networks 101" reaching a (good) network security
course any time soon :-p</div>
</div>
</blockquote>
No one said that, its an argument at an the termination of the
connection. Offering free wireless at uni's and libraries does not
imply that A) they are badly managed, B) that those users some how
penetrate the inner sanctums of grades or housing records, C) that
having any form of wireless protection will stop you from being
attacked, D) That the network doesn't suffer from crappy network issues.<br>
<br>
Side issue on this is i wonder how many companies are a little like
armadilos, you know tough outside but once your in crack the skin they
are all soft. How many companies have anything once your past the
doors and plugged in, a wireless network broadcasts a door to a
gateway. How the gateway is managed is the issue. Personally i don't
run a wireless AP on the gateway, i also don't have an unsecured
network. From time to time i do however suffer from crappy network
issues<br>
<blockquote cite="mid:7489F610-A26D-4C6F-8148-B08B81755EF9@gmail.com"
type="cite">
<div>
<div><br>
</div>
<div>I could only come up with avoiding the long arm of a
totalitarian regime, but that stretched the point into a new one. Or
the "Sex And The City meets the Spice Girls" argument - because we want
to! :-p Always a poor one for me. <br>
</div>
</div>
</blockquote>
Sorry but it seems your saying because "we want to" is a valid point,
which in fairness means because "we don't want it" is fair as well.
I've harped on about the term debate before on this thread. I feel
more so justified.<br>
<blockquote cite="mid:7489F610-A26D-4C6F-8148-B08B81755EF9@gmail.com"
type="cite">
<div>
<div><br>
</div>
<div>However, due to this discussion I had a look and I did find an
article in which Bruce Schneier advocated it (for himself, at least).
Schneier's arguments rely on the practical aspect of (and I paraphrase)
"it doesn't matter to me" or "it's bad elsewhere so why bother, better
to focus on other aspects", because the technical reasons are so weak,
which, to his credit, he admits.</div>
<div><br>
</div>
<div><a moz-do-not-send="true"
href="http://www.schneier.com/blog/archives/2008/01/my_open_wireles.html">http://www.schneier.com/blog/archives/2008/01/my_open_wireles.html</a></div>
<div><br>
</div>
<div>It didn't convince me at all. Comments section was quite good
though.</div>
</div>
</blockquote>
Schneier is always a good read, and defo has some good insight. Off
topic David Hoelzer from SANS was doing a great webinar on WIRELESS
AUDITING: SECURITY ISSUES WITH DEMONSTRATIONS. I missed it
unfortunately however if i see the video come up anywhere i'll drop a
post about it, he's a rather good instructor.<br>
<blockquote cite="mid:7489F610-A26D-4C6F-8148-B08B81755EF9@gmail.com"
type="cite">
<div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>On 1 Mar 2010, at 19:34, Arron M Finnon wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">Under the DPA your only allowed data which
your have a right to have, not data you wish you had. A forum requires
interaction via email, not too hard of an argument to make, not quite
the same for wifi. either way what small business need is a little
more red tape in supplying services to its customers, and an increase
in insurance for the risk i mean that seems the way to encourage a
digital britan</blockquote>
<div><br>
</div>
</div>
<div>
<div>That's not right and never has been. For a start, it's the
person giving the data who has rights, not the service. A service can
ask for whatever they say they require to set up a contract, not what
is needed to actually run the service. Quick search... ah!</div>
<div><a moz-do-not-send="true"
href="http://en.wikipedia.org/wiki/Data_Protection_Act_1998#Conditions_relevant_to_the_first_principle">http://en.wikipedia.org/wiki/Data_Protection_Act_1998#Conditions_relevant_to_the_first_principle</a></div>
</div>
</div>
</blockquote>
Maybe we're at ends but isn't the necessary part, being the word of the
day here, and thanks for the ah that helped loads.<br>
<br>
Now translate this anyway you want but my point was pretty clear that
you can just hold data because you want it. Or just because you think
that its necessary to limit your liability to mad mandy and digital
dismantlement team <br>
<br>
<br>
<blockquote cite="mid:7489F610-A26D-4C6F-8148-B08B81755EF9@gmail.com"
type="cite">
<div>
<div>
<div><br>
</div>
<div>Furthermore, you can run forums with anonymous access, they're
not some sort of special service apart from everything else, and
neither is wifi. The logic, therefore, didn't hold.</div>
</div>
</div>
</blockquote>
You raised forums, but the point i made is that they user to user
interactive, a communications table/board so on and so forth. <br>
<blockquote cite="mid:7489F610-A26D-4C6F-8148-B08B81755EF9@gmail.com"
type="cite">
<div>
<div>
<div><br>
</div>
<div>I increasingly lost the will to keep reading after that*, as you
were arguing against points I hadn't made, having characterised them as
black and white thinking, which only really showed up in your own
responses as they set up a false dilemma. When dealing with humans
there are things like "reasonable" and "mitigation". Things like leeway
exist, or demonstration of having made a decent effort. Making somebody
legally responsible for a road doesn't make them responsible for every
bad piece of driving on it - that's obvious and _implied_ by use of the
word "responsibility" - its use begs further definition, agreement or
examination. Otherwise we all slip into the whirlpool of doom that is
the Perfection Fallacy. But I'm not going to answer every point because
it would be fighting a strawman.</div>
</div>
</div>
</blockquote>
Funny i was thinking the same about the black and white, but maybe at
different ends. I bow to your superior knowledge on fighting strawman,
i'm a little bit of a n00b at that<br>
<blockquote cite="mid:7489F610-A26D-4C6F-8148-B08B81755EF9@gmail.com"
type="cite">
<div>
<div>
<div><br>
</div>
<div>I'm not saying you set that up deliberately, but it just seemed
to me you missed the point of what I was trying to say. Maybe I put it
across badly, or maybe you're suffering from the same
non-reading/mis-characterisation disease as Lee? :-p</div>
</div>
</div>
</blockquote>
Motive points raise emotive answers, i mean its a point of perception.
TBH i find the concept that the DEB will sort out a lot of crappy
network issues just plain right ludicrous. It would seem that i'm not
alone.<br>
<br>
I declare an interest here, i'm count Lee as a good friend. When he
makes errors he tends to make apologise for those mistakes. To me its
a sign of good character and honest motives, the characterisation seems
to be one way here. I make no apology for saying that, cut the boy
some slack. We make mistakes, you picked on a topic that you knew a
lot of people on this list where motive about, had already posted about
and you picked a alter argument to everyone else. Not saying that is a
bad think mind you. They maybe good motives for it, it maybe you truly
believe that this will fix the ills of crappy networks, or you may just
like trolling and getting into debates, either way its all gravy. I
just think its a little unfair to be down right aggressive with you
slating of lee there, i don't know if you meaning it jokingly or if its
intended to cause a reaction.<br>
<blockquote cite="mid:7489F610-A26D-4C6F-8148-B08B81755EF9@gmail.com"
type="cite">
<div>
<div>
<div><br>
</div>
</div>
</div>
<div>Regards,</div>
<div>Iain</div>
</blockquote>
Always a pleasure to receive an email from you on this subject, <br>
<blockquote cite="mid:7489F610-A26D-4C6F-8148-B08B81755EF9@gmail.com"
type="cite">
<div><br>
</div>
<div>*I did read it though ;)</div>
<div><br>
</div>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
dundee GNU/Linux Users Group mailing list
<a class="moz-txt-link-abbreviated" href="mailto:dundee@lists.lug.org.uk">dundee@lists.lug.org.uk</a> <a class="moz-txt-link-freetext" href="http://dundeelug.org.uk">http://dundeelug.org.uk</a>
<a class="moz-txt-link-freetext" href="https://mailman.lug.org.uk/mailman/listinfo/dundee">https://mailman.lug.org.uk/mailman/listinfo/dundee</a>
Chat on IRC, #tlug on irc.lug.org.uk</pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Arron "finux" Finnon
Finux.co.uk/blog - Twitter.com/f1nux - facebook.com/finux
Podcasting for HPR and TRACsec, shows can be found at;
<a class="moz-txt-link-freetext" href="http://hackerpublicradio.org/correspondents.php?hostid=85">http://hackerpublicradio.org/correspondents.php?hostid=85</a>
<a class="moz-txt-link-freetext" href="http://www.tracsec.com">http://www.tracsec.com</a>
</pre>
</body>
</html>