Editing Wi-Fi (section)

=== Piggybacking ===
{{Main|Piggybacking (Internet access)}}
{{Further|Legality of piggybacking}}
{{Further|Wi-Fi Protected Setup#Physical security issues}}

Piggybacking refers to access to a wireless Internet connection by bringing one's computer within the range of another's wireless connection, and using that service without the subscriber's explicit permission or knowledge.

During the early popular adoption of [[802.11]], providing open access points for anyone within range to use was encouraged{{By whom|date=March 2010}} to cultivate [[wireless community network]]s,<ref>{{cite web|title=NoCat's goal is to bring you Infinite Bandwidth Everywhere for Free|url=http://nocat.net/|url-status=dead|archive-url=https://web.archive.org/web/20111022034826/http://nocat.net/|archive-date=22 October 2011|access-date=14 October 2011|website=NoCat.net}}</ref> particularly since people on average use only a fraction of their downstream bandwidth at any given time.

Recreational logging and mapping of other people's access points have become known as [[wardriving]]. Indeed, many access points are intentionally installed without security turned on so that they can be used as a free service. Providing access to one's Internet connection in this fashion may breach the Terms of Service or contract with the [[ISP]]. These activities do not result in sanctions in most jurisdictions; however, legislation and [[case law]] differ considerably across the world. A proposal to leave [[graffiti]] describing available services was called [[warchalking]].<ref>{{cite web|url=http://www.blackbeltjones.com/warchalking/warchalking0_9.pdf|title=Let's Warchalk|last=Jones|first=Matt|date=24 June 2002|archive-url=https://web.archive.org/web/20080705034313/http://www.blackbeltjones.com/warchalking/warchalking0_9.pdf|archive-date=5 July 2008|url-status=dead|access-date=9 October 2008}}</ref>

Piggybacking often occurs unintentionally&nbsp;– a technically unfamiliar user might not change the default "unsecured" settings to their access point and operating systems can be configured to connect automatically to any available wireless network. A user who happens to start up a laptop in the vicinity of an access point may find the computer has joined the network without any visible indication. Moreover, a user intending to join one network may instead end up on another one if the latter has a stronger signal. In combination with automatic discovery of other network resources (see [[DHCP]] and [[Zeroconf]]) this could lead wireless users to send sensitive data to the wrong middle-man when seeking a destination (see [[man-in-the-middle attack]]). For example, a user could inadvertently use an unsecured network to log into a [[website]], thereby making the login credentials available to anyone listening, if the website uses an insecure protocol such as plain [[HTTP]] without [[Transport Layer Security|TLS]].

On an unsecured access point, an unauthorized user can obtain security information (factory preset passphrase or Wi-Fi Protected Setup PIN) from a label on a wireless access point and use this information (or connect by the Wi-Fi Protected Setup pushbutton method) to commit unauthorized or unlawful activities.