undefined | Better HN

0 pointscwkoss6y ago0 comments

> including the ones that say "authorized personnel only", "private", "do not enter" with an excuse like "I was trying to find out which shop was open".

I don't think this part of the analogy is accurate. There are no "authorized personnel only" ports

The first half of the analogy is good though.

0 comments

4 comments · 1 top-level

sedatk6y ago· 3 in thread

Any port that isn’t advertised to you explicitly is an overreach. You don’t run through hosts and ports to “find out services to use”. What’s a legitimate use case for that other than peeping?

m4636y ago

I used to think the exact same thing about wardriving.

Nobody should catalog wifi access points and their location!

Of course, now this ethical lapse is a business model and apple, google and everyone else does it. literally anyone with a smartphone is doing this to your wifi access point. And they will do the reverse to find out precise location.

sedatk6y ago

Exactly. There are assumptions in every threat model, and violating them isn't a legitimate use case because someone "forgot to protect" their private resource. "Door wasn't locked" isn't an excuse.

thejynxed6y ago

Or in the case of being a Comcast customer, you get no say in the matter as they force an open guest network if you use their equipment.

j / k navigate · click thread line to collapse