Re: [93attendees] Network experiment during the meeting

[Jared Mauch <[e-mail]>]

On Tue, Jul 14, 2015 at 04:27:51PM +0200, Rolf Winter wrote:
> Hi,
> 
> I am not a lawyer so anything I say is solely based on common sense, which
> probably means that legally speaking I am wrong. Just for the folks that
> have not read the description of our experiment, we solely talk about
> broadcast data.
> 
> I have actually talked to our lawyer here, and her spontaneous suggestion
> was to ask whether one of the participants/sponsors from the Czech Republic
> could ask their lawyers/data protection officers if such an experiment would
> be OK under Czech Republic law? I found that a smashing idea. Anybody on
> this list who could help out?

	I find this study interesting because it's about data that people are
sharing by default settings of their software and acceptance of EULA.

	Attending a RIPE/NANOG/IETF meeting is interesting seeing all the
messages and disclosures from hosts that are broadcast.

	The same is true of CDP/LLDP and other protocols that operate
within this space.

	If you haven't looked at the data your laptop leaks from running iTunes,
mDNS/Bonjour, etc you may want to investigate it before joining an
untrusted network.

	The apple messages app and itunes share a lot of data, plus even
in just DHCP you see plenty of details.  Example from my home:

	  Client-Ethernet-Address c8:0a:a9:2d:c9:25
	  Vendor-rfc1048 Extensions
	    Magic Cookie 0x63825363
	    DHCP-Message Option 53, length 1: Discover
	    MSZ Option 57, length 2: 576
	    Vendor-Class Option 60, length 21: "Broadcom:LB4M:1.1.0.8"


	  Client-Ethernet-Address 5c:f9:38:da:d8:79
	  Vendor-rfc1048 Extensions
	    Magic Cookie 0x63825363
	    DHCP-Message Option 53, length 1: Request
	    Parameter-Request Option 55, length 6: 
	      Subnet-Mask, Default-Gateway, Domain-Name-Server, Domain-Name
	      Option 119, Option 252
	    MSZ Option 57, length 2: 1500
	    Client-ID Option 61, length 7: ether 5c:f9:38:da:d8:79
	    Requested-IP Option 50, length 4: 10.0.0.182
	    Lease-Time Option 51, length 4: 7776000
	    Hostname Option 12, length 15: "FamilyRAppleTV2"

	Take a look if you haven't studied this traffic.  Keep in mind what
this may do to the basic-1mbs rates supported on 802.11 radios and
how a large broadcast domain with lots of fe80:: traffic for NDP
will cause RF congestion due to speed changes.

	- Jared

-- 
Jared Mauch  | pgp key available via finger from [e-mail]
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.