Hey neighbor, stop piggybacking my Wi-Fi

People in densely populated areas are increasingly bothered by others tapping into their wireless Net connections.
The New York Times

The story "Hey neighbor, stop piggybacking my Wi-Fi" published March 5, 2006 at 12:35 PM is no longer available on CNET News.

Content from The New York Times expires after 7 days.

[dondarko]

Easy problem to solve...

Manufacturer's should take up the responsibility of making sure whenever a customer installs their wireless router, a secure WEP/WAP, etc. connection is created with the user's password.

[J.G.]

Not so easy

WEP routers are often kinky, shutting out traffic the users want. So,
they give up on having any security at all.

[BMR777]

Just secure your network!

If you are worried about someone stealing your WiFi, just take 10 minutes to configure your router for WPA.

As long as a manufacturer for a router gives a quick start guide to securing or setting up your router that anyone can understand (which some do) there should be no excuse for not securing your network. Even if you don't get a quick start guide its not that hard to secure a router. Its almost always in the user guide how to do it.

BMR

[J.G.]

I wish I could

I have never been lucky enough to be able to access someone else's
router at home. Had a neighbor who could once. He was getting
free Wi-Fi in the same building, while I paid nearly $50 monthly.

[jdbwar07]

If only you could...

Too bad routers don't have some kind of program or feature designed for this type of thing.
They should make it where you could allot a certain amount of community bandwidth (like 500k) for others to use.

With this "neighborhood bandwidth" you can't access the network operator's own computers, but you can have free internet access. This would allow you to share your connection without the danger of it becoming intolerably slow or your computers being hacked. Does anyone know if any routers or software programs have something like this?

[CagedAnimal]

Good Idea!!

Don't know of any consumer routers that have this kind of feature. Of course, you can configure your computer and a single wireless access point to do this. It could even be something as simple as having two subnets, blocking the public one from the private one, and giving your DHCP server a list of MAC addresses that it should put on the private subnet. Unfortunately, far fewer people have that expertise than those that know how to secure their access points in the first place. Fewer still could secure the computer. There are probably programs that will automate this process.

You could also just buy a second wireless router and attach its WAN port to your main router, and have that second one be your private network.

But having a intuitive way set this up on consumer routers would be great!! It would be much easier than the other solutions, allow more precise bandwidth allocation, and keep your network management in a single harder-to-hack box.

You would have to consider that any illegal activity of your 'guests' would still be traced back to your public IP Address. That is the one fear I really have about sharing my Internet access.

[CagedAnimal]

Good Idea!!

Don't know of any consumer routers that have this kind of feature. Of course, you can configure your computer and a single wireless access point to do this. It could even be something as simple as having two subnets, blocking the public one from the private one, and giving your DHCP server a list of MAC addresses that it should put on the private subnet. Unfortunately, far fewer people have that expertise than those that know how to secure their access points in the first place. Fewer still could secure the computer. There are probably programs that will automate this process.

You could also just buy a second wireless router and attach its WAN port to your main router, and have that second one be your private network.

But having a intuitive way set this up on consumer routers would be great!! It would be much easier than the other solutions, allow more precise bandwidth allocation, and keep your network management in a single harder-to-hack box.

You would have to consider that any illegal activity of your 'guests' would still be traced back to your public IP Address. That is the one fear I really have about sharing my Internet access.

[surf&work]

You need an enterprise wireless setup

You need an enterprise wireless setup to do subnetting to separate a public from private network or one department from another.

[arobb24143]

Tired Old Story..

People who do not protect their wireless network get what they get. I talk to co-workers and neighbors all the time about the new meaning of "being connected" when they get broadband and/or move to wireless. They just look at me and nod...but many just don't get it. So they get what they get.

[btdawg]

Are you in the same boat?

They get what they get? Suppose you get a computer virus because you don't have enough antivirus programs running, suppose you are burglarized because you don't have enough locks on your windows and doors. Would that change your attitude? Just because people are ignorant or don't want to take the time does not give someone the right to take advantage of them. If we all lived by this principle it would be ok to "Get what we get".

[dashort1]

A LIE!

""There's no gauge, no measuring device that says 48 people are using your access," Edwards said."

Using most routers, you can click on "Client's List" in the DHCP section and it will tell you how many users are connected!!!
----------------
DHCP Active IP Table
Client IP Address Interface
Shorty 192.168.1.*** Ethernet
Damien 192.168.1.*** Wireless
note: i hid the last 3 digits with (*)

and you can disconect / ban client names that dont belong.

[kieranmullen]

Your funny :-)

Private ip addresses are not unique and are non-routable on the Internet. There was no need to put *** on the addresses. If you don't know what private IP addresses are and what ranges they cover I would suggest looking at the wikipedia.

Kieran

[reedsr]

Kevin

Why did you waste time blocking out the last octet? I guess you don't understand how a router works.

[bobbutts]

DHCP table incomplete

If a piggybacker were to configure a static IP address on the network (very easy after one DHCP connection to get the network info) it won't show up on the DHCP list anymore.

[strim99]

That was funny...

Not to beat a dead horse with a bloody axe but would just like everyone to know that the DHCP information stored by routers only includes users that are currently connected, not all users that ever have been.

LMAO - 192.168.1.*** (DON'T TELL ANY1 MINE IS .2)

It works both ways

On the positive side of piggybacking I know of a friend of mine who piggybacked his neighbor's Wi-Fi in Noe Valley. The guys router wasn't configured optimally so my friend used his skill as a software engineer to fix the issue and dramtically improve his download and upload speeds.

I also have another friend who allows his neighbors in his condo complex to piggyback. In return he gets perks like free wine from one neighbor and other stuff. Despite what one of the preople quoted in the story claimed. it's also pretty easy to tell when someone is trying to piggyback or to setup at least a basic system to restrict access.

[viperpa]

Because it is unlicensed

Someone had told me that since wi-fi is unlicensed airwarves, that it should be a free for all. Not saying you should take advantage of ignorance but if you left your door unlocked, would you be mad if someone came in and made themselves at home? I made sure when I set up my wireless network that it was locked down.

[brian g--2008]

Some ISPs encourage this

i read about an ISP that give customers discounts for sharing their WiFi hot spots with other customers.

[kieranmullen]

That was a useless post

If you are going to post something, post something of value.

<a class="jive-link-external" href="http://www.speakeasy.net/netshare/terms/" target="_newWindow">http://www.speakeasy.net/netshare/terms/</a>

Kieran Mullen

[Maccess]

Just join fon

Make it to your advantage to share the connection by joing fon or any of the hundreds of commercial Wi-Fi hotspot sharing schemes.

[perfectblue97]

Sex offenders

There's an urban myth going around that pedophiles and other sex offenders are hooking up to wireless connections in urban areas and are deliberately leaving their connections open and unencrypted to allow people to jack in.

Then, when they are caught, they simply plead that their net access is open and that anybody could of been using it to browse porn.

It certainly is enough to create reasonable doubt in a jury.

Don't know if it is true though

[rfordtech]

Re: Sex Offenders

The problem with blaming it on someone else is that the illegal traffic can be tracked by the MAC address of the offender's Network Interface Card (NIC) - Unless someone is smart enough to "spoof" the MAC address of the home computer of course.

[Zymurgist]

Doesn't make sense.

In order to prosecute, the authorities would need evidence of posession of the pornography. They generally get this by impounding the PC and media on site and looking for it there. In that respect, either someone has stuff on their PC and they'll get caught regardless of the connection, or there will be no evidence on their computer, in which case the connection is equally irrelevent.

[Bob Brinkman]

Just a word of caution

I've seen the information that can be gathered by setting up an open access point in an apartment complex and running a packet sniffer/mac address spoofer. You never know who's network you are connecting to.

[aemarques]

Piggybacking vs. hacking

One thing is to piggyback on an unprotected wi-fi network, another one is to hack a protected network!
If someone lets his/hers network unprotected, that is like inviting the neighbours to use the available connection - and I know people that actually do that on purpose!
If you don't want to share, just protect it - WEP, WPA, MAC address filter, don't broadcast your SSID... It is up to you.
If you have a protected network and someone uses it, that is hacking/cracking, and it constitutes crime. Bu not piggybacking...

[zizzybaloobah]

You can't still a radio signal!

Had to laugh when I read the about the lady who questioned if the guy was 'stealing her radio signal'. Stealing a radio signal? Not possible! Stealing bandwidth? yeah, I'd buy that. What she really should be worried about is someone stealing her personal information through use of her own network.

Just shows the ignorance of the average consumer with regard to anything more technical than connecting devices together and powering them up.

So fscking what?

You know how your wireless network works. Good for you. But the average user doesn't care, and shouldn't have to. Do you want your car mechanic to laugh at you for not knowing the minute details of power steering?

[kamwmail-cnet1]

I leave my wi-fi open. So I can get their financial passwords.

Hey, they can piggyback onto my wi-fi for free.
I can piggyback onto their bank account for free.
It's not like it's "stealing".

Seriously...

I'd never trust the security of an open connection like that. Who knows who's looking in? If your email connection isnt secure, you're basically giving them access to your email acct if they want to snoop. And even if it is SSL'd, you're still telling your neighbors where you bank, what you're shopping for, etc.

[bracck]

A less miserable way

The other day while driving far from home, I desperately needed an internet connection; my overpriced wireless roaming service was not available and but for the largesse of some unknown philanthropist, I would have been severely inconvenienced.

Perhaps the router vendors should allow a capped and monitorable philanthropic mode so we can share our unwanted bandwidth with someone who needs it.

...or we can all just continue to bleat about freeloaders while lining the pockets of the mega rich.

[Steve Jordan]

Blame goes to the ignorant WiFi owner.

I wouldn't bother looking for a WiFi connection for an e-mail fix, when I can connect my laptop to my cellphone (and do, when on vacation).

Still, I don't blame people who piggyback. Blame goes to the people who don't bother to learn how their tech works. If they'd rather be willfully ignorant, then by all means, take advantage of their willful ignorance.

Message has been deleted.

[bracck]

An excellent idea

I added my earlier post before reading this but after reading the responses from the mean spirited, self righteous and other wise self destructively paranoid.

I like the comment about illegal acts on the internet, since it's illegal to sell gum in Singapore I have to assume almost anything can be illegal and therefore opening my own access point gives me some sort of deniability on indescrections I may have unknowingly committed against present or future governments.

I can now blame a piggybacker.

[volterwd]

would it be possible

to load the router with a random password that the person could change after which would be required before being allowed to connect for the first time?

[kamwmail-cnet1]

It's called a Radius server using WPA

.

[fred dunn]

The men in black suits will show up at your door...

Most people don't realize the implications of leaving their AP open. It's not the idea that someone might innocently use your AP and ISP, it is the idea that your (that is your) IP will be used to send a threatening email to someone in government or of the sort. It can also be used by low-lifes to share child pornography or chat with a non-adult about adult matters.
This is when the men in the "Black Suits" show up at your door, ever hear of Guantanamo? Think it's a joke then just keep your AP open to the public, never mind that when someone connects they are on the "local" side of the LAN and have the capability to connect to your files/folders.

[J.G.]

Do you work for Symantec?

I'm asking because your scare tactics are even more hysterical
than a business trying to sell its product.

Computer forensics experts researching crime have much more
evidence available to them than IP account data. The chances
that someone would be acused based only on information from
their access point is virtually nonexistent.

Guantanamo, though illegal, does not house detain American
citizens. Nor do sex crimes, porn, etc., have anything to do with
the Patriot Act, which the administration uses to try to
rationalize Guantanomo.

If you ever have an actual FACT at your disposal, feel free to
post it. But, there is no excuse for trying to frighten people by
posting nonsense.

[aabcdefghij987654321]

Some observations

I recently bought a laptop with wireless access and got a wireless router bundled with it. When I first turned on the laptop it immediately found 5 networks in range from my home and every single one of them was secured. I set up my wireless router at home between the cable modem and the router that handles my home hardwired network so that anyone connecting to my wireless network is still locked away from my home network. I also went ahead and secured my wireless network though it was tempting to leave it open.

I didn't leave the network open mainly because I didn't want to have to share bandwidth during the few times I use anything approaching the full bandwidth.

I've taken that laptop to a number of other places and everywhere I've had it so far it's surprised me how many networks it can see and every single one of these networks were secured. I wonder if this "open networks" thing is more a regional problem.

If I could limit the bandwidth it made available or at least make my own traffic a higher priority over "guest" traffic I'd probably make my access point a public one just because my local ISP overcharges for the bandwidth they provide and it'd be my way of sticking it to them (yes they have competition but it's overpriced too!). It'd also be neighborly to allow those who need some quick access to send an email or whatever the momentary access they need.

[J.G.]

Many users do authenticate

You may be able to set up a software firewall that protectts your
system while allowing public access to the router.

Your experience mirrors mine during the last year. I think
people are catching on to using authentication. (The study
relied in the article was from 2002.) It seems to me that laptop
users tend to be more security savvy and the proportion of us
has grown substantially.

I would have no problem sharing my bandwith if it were not
sluggish already. I don't believe I owe my overpriced,
unreliable, customer service in India ISP any favors. A pox on
Earthlink.

[surf&work]

Is it illegal to piggyback?

Is it illegal to piggyback on an unsecured wifi signal?

[J.G.]

Piggybacking is not illegal

Based on the contracts I've read, the answer is "no." The ISPs
that try to restrict sharing focus on the customer who knowingly
allows others to share bandwidth, not the 'trespassers.' But,
mainly they complain about the issue instead of actually doing
something. Sue people and they will have a hard time proving
intent.

Some ISPs are also annoyed by uses of those expensive access
points that allow several connections at full speed when large
groups of people on the road or on location for television and
movie shoots. I don't expect the ISPs to focus on the individual
customer's home account. One reason why is that annoying
customers will increase the already high level of churn.

[Gayle Edwards]

Yes, it is illegal...

If you use private-property without the permission of the propertys "owner", it is "legally" considered to be "theft". Also, now, under both Federal and numerous State laws, "Unauthorized access to any computer-equipment" can, potentially, be considered to be a Felony-level offense.

Additionally, I wouldnt expect any Judge to be too sympathetic to an argument of "...I just thought the wireless-access was just being given away for free, by somebody..." (in much the same way that, that argument wouldnt explain your taking a car, or a lawn-mower, that just happened to be sitting on the street).

However, as to your rights, as a broadband-consumer, who allows others to use your connection...

...intentionally providing "unsecured access" to an Internet-connection is not, in itself, a crime, but does open the door to potential "liability" issues. It depends on your ISPs (Internet Service Providers) contract. Violating such a "contract" is not actually a crime, but you could conceivably face "civil proceedings" for "contract violation" if they found out.

Generally, as a consumer though, if you have paid for the "bandwidth", it is legally yours to use as you see fit (whether you use it all yourself on one computer, ...have several computers in your house for family-members, ...let your friends come over to "surf", ...or allow unrestricted-access to passing strangers). But, remember, anything done using your connection... either "intentionally" or through "willful negligence", can come back to haunt you.

Just MY understanding...

[Get_Bent]

No permission to use it = theft of service

"I always find people out there who aren't protecting their connection, so I just feel free to go ahead and use it," Caroso said.

To take this analogy a little further, if someone forgot to lock their front door, he would feel free to go inside and watch their TV or use their phone.

One occasional piggybacker recently compared it to "reading the newspaper over someone's shoulder."

Reading over my shoulder doesn't cause me to read any slower or make me wait to turn the page.

Bottom line: If you use a non-public wireless network without the owner's permission, you're stealing service from them. When it comes to security, wireless networking sucks -- give me a wired connection anyday....

[birdguynews]

a better analogy

how about this perspective: a better analogy for piggybacking wifi signal would be this:

You leaving your unlocked bike inside my house that I didn't give you permission to do, what am I supposed to do with it? Do i just let you leave it inside my house or can i actually perform an action against the occupying bike? maybe i'll take it out for a ride since it's not locked

My neighbor's wifi signal is flowing into my apartment's airspace without my permission, what am I supposed to do with it? Do i just let his wifi signal flow through my apartment or can i actually perform an action against the occupying signal? maybe i'll piggyback on it since it's not secured.

Is there a big difference between a property of yours that is invading my private home and my going into your house and use your property without permission? I think there is.

[J.G.]

Piggybacking is no such thing

It is not a crime unless there is a statute defining it as a crime. I'm
not aware of any jurisdictions that have such a statute. I am
beginning to feel like a parrott repeating that, but we seem to have
an endless supply of people who believe that anything they dislike
is a crime. The law does not work that way.

[lkrupp]

Stupid is as stupid does...

My momma always said.

Forest Gump

[Nphyx]

List of Connected Computers, WPA and PSPs, and 'Sticking it to the man'

One of the interviewees commented that there is no way to know who is using your wireless network. Actually, all routers that I've worked with (D-Link, Netgear, Linksys brands mainly) have a way to get a list of mac addresses and computer names. I left my network open for quite a while until one of my neighbors started getting greedy - probably downloading porn, with the bandwidth he was using - then I closed it up.

Another interviewee stated she(he?) was 'sticking it to the man' by leaving his network open for everyone to use. No matter how many people connect to her network, the bandwidth on the connection is going to have the same maximum as if one is using it. Joke's on you, hippie, they're not giving you anything more than you're paying for.

Finally, I've noticed that WPA encryption doesn't work with any of my PSP games that can connect and play online or download via wireless network. They all want WEP or open networks to operate off of (the built in web browser works just fine though, as well as the update system). Maybe I'm doing something wrong here, but it's getting to be such a pain to switch back and forth that I'm probably going to have to downgrade to WEP. Just a thought for those of you who think WPA is the only way to go.

[hameiri]

Sticking it to the man

No, you get no more broadband but:

1. The people useing your internet access are not paying
anyone, so the ISPs are not getting their money.
2. Using more bandwidth, even though you are not going over
your maximum, still costs the ISP because they have to keep up
with demand to avoid bottlenecks.

Also, some of us use access points. As far as I know my old
Belkin doesn't tell me anywhere how many users are on my
network, or who they are.

I always thought that it would be very nice if all the wireless
routers and access points had an LED that read out in real time
how many people were connected wirelessly. That would alert
people some of the time.

[BernieLJ]

WI-FI Setup

Well, it's been some time since I set mine up, so I won't remember everything, but I will say this much...

I had a used 700 Mhz Compaq Presario in one room, and had almost all of my CD-based music saved to the hard drive, and I wanted to listen to my music in another room on a stereo in there, so I bought a Roku SoundBridge and a Linksys wireless router, allowing the Roku SoundBridge to receive or access the music on the computer.

I had file sharing turned off or disabled, I don't save passwords or any sensitive information on my computer, and I don't mind typing that info in every time I access a website, although not all web sites are secure websites, so I take that into account also.

I started Windows Media Connect and only set up my music folder for a shared folder in Windows Media Connect...I did set up encryption in using the wireless router...I also had on the computer screen, when setting up the wireless router, a question pop up asking me if I wanted to share my internet connection with other users or not.

In Windows Media Connect there's also a setting whether you want to automatically allow new devices or not.

Basically, I suppose that I could disable the internet connection sharing, but that's a part of Windows, the question that asks me whether or not I want to share my internet connection with others.

Actually, I "wanted" people to be able to access my music with their I-Pods, or whatever, so I can either click on accept to accept a new device, or I can have the box checked where I automatically allow the new device...The help file stated that I can have an unlimited number of devices connected, but only 10 devices at a time can be palying music.

I also wanted to maybe access other people's music too, just to listen to it, but so far I haven't come across anyone sharing their music here in this small town, but I have noticed one lady's name, and on the Roku SoundBridge, when starting it up, it did list that lay's name and had asked me if I wanted to listen to her music or not, and I tried it once, but I think that even though I was receiving or seeing her, I don't think she was seeing me, as no connection occurred, and when "locating" where she was, from talking to another person who know her, she's almost two miles away from me, so I'm sure that she was/is out of range from me.

I also have seen three other wireless networks listed, and listed as unsecured networks, and one even had the default name of "wireless" listed, so I'm wondering if that person has even changed the default user name or not...If not, then anyone could connect to their wireless router itself, and not the network, meaning they'd have control over the wireless router itself, not just access to the network, but access to the settings of the router as well...I changed the user name of "admin" to something else right away.

I haven't seen any wireless networks that are sharing music to listen to anyway, and I haven't tried to access anyone else's interent connection, but they may be available to connect to as I do see three wireless networks in addition to the lady's music, because I've been satisified with my 256 Kbps upload/3 Mbps download connection and have no interest in accessing the internet through someone else's connection.

However, I have, so far, allowed other people to access my internet connection, and I think that, according to watching the network connection status icons, that I have set up in the system tray, that someone may be using my internet connection, and since WI-FI hasn't been a "big thing" around here, meaning no motel or hotel, restaurant, etc., offers WI-FI for business people "on-the-go," so to speak, that I'd provide a connection, at least until which time I may have a problem doing so, and so far, I haven't had a problem doing so....For their laptops for example...I do have the connection encrypted, so at least their data that they're sending isn't being seen by everyone, and in fact, I can't even see the info being passed...Oh I can see info being passed, but I can't see what the info is...as it's encrypted, but I suppose that if I really wanted to see that, that I probably could, but I'm not that type of person and I believe in a person's privacy.

However, this assumes that the person already pays for internet, and is maybe away from their home town with a laptop in the motel for example, and I'm just providing this connection as a courtesy...However, if I find that people are using the connection, that don't pay for it already, then I'll shut the connection for others off.

Some places have internet connections in motels and/or hotels, but around here, they're wired conenctions, like a jack on the wall that you can plug into, but no wireless that I know of.

Now then, I have replaced the 700 Mhz Compaq Presario with a 2.0 Ghz HP Pavilion, and I now have 1 Gb of RAM, as apposed to 256 Mbs I had before, and it has a built in radio and TV receiver, plus a built in wireless router too, but it's speed is rated at 54 Mbps, whereas the external wireless that I already had has a 100 Mbps speed...The internal one has one small antenna, which I have placed on a window sill, and has a smaller connection than the external wireless router, which the book states has an approximate "range" of 400 feet in open space, but I had replaced the antennas with 7 Dbi gain range-boosting antennas, so I have no idea what range I'm getting from the setup.

I am in the middle of town, and the town's "edges" are approximately 1 mile away from me in most directions, but I'm curious what range I am getting with the larger, range-boosting/signal boosting, antennas.

I'm trying to think if that's all, except that the computer's SSID, or name, has to be the same as the router, you need to encrypt the wireless router connection, you need to connect to the router and change the user name and give it a password, and I see where I can even set up multiple passwords and have the router choose one, or you can have it choose one at random too..

I'm sure that I'm not thinking of everything right now, but that's what I can think of right now anyway.

I share my internet connection as a courtesy, but if it slows me down too much, I may need to discontinue doing so, or if I find out someone is accessing the connection that isn't already paying to access the internet by some other means, then I'll also discontinue doing so.

I'm basically using two wireless routers, one the computer has, one I had from before that is external to the computer, and I noticed that I'm receiving through the internal wireless connection, and am sending throught the Ethernet wired connection to the external wireless router when someone else is apparently using the conenction, but it may just be my own computer accessing the internet, like for Windows Update for example, and HP has an automatic update check too, etc.

Also, there's a question somewhere in the Windows settings where it asks you if you'd like Windows to choose what's best as far as the wireless connections go, and maybe for the wired connections too...like the USB, Ethernet or Firewire connections, etc.

Have a Great Day