“Bureaucracy on autopilot”.  That’ll be my new favorite term.

 

From: AF <af-boun...@af.afmug.com> On Behalf Of Mark Radabaugh
Sent: Monday, March 18, 2024 5:16 PM
To: AnimalFarm Microwave Users Group <af@af.afmug.com>
Subject: Re: [AFMUG] CALEA and WiFi

 

While CALEA is still on the books it doesn’t seem to be of much interest to LEA.

 

No - you do not have to be able to identify the user.  If LEA can identify a 
specific end user for you out of the WiFi, then yes, they could ask for you to 
monitor it but keep in mind that CALEA isn’t meant for historical data.   It’s 
meant to be real-time capture once they have identified a particular person of 
interest (well, a specific phone number, IP address, etc.).   

 

Every year I get a phone call from the FBI verifying our contact information 
and how to get hold of us if they need something.  I point out that we file our 
CALEA documents and ask why they are calling - and they say ‘oh, we don’t use 
that’.   Uh,  got it.   But the FCC still thinks it’s important and you best 
follow the rules and file it anyway.  Local and State LEA has never heard of 
CALEA.   It’s just one more bureaucracy on autopilot that has outlived it’s 
usefulness.

 

Mark

 

 

On Mar 18, 2024, at 6:29 AM, dmmoff...@gmail.com <mailto:dmmoff...@gmail.com>  
wrote:

 

CALEA hasn’t been on my radar much, so this is probably an old topic, but it’s 
one I don’t know much about.

 

If you provide WiFi in a public space how do you handle compliance?  We have 
parks, airports, and other public spaces with managed WiFi.  There are also 
MDU’s with WiFi in a public area like a courtyard, lounge, lobby, etc.

 

My understanding is you have to be able to capture traffic if you’re ordered to 
do so.  Do you also have to be able to identify the individual?  

 

If they ever asked me to capture all traffic from the park WiFi….sure no 
problem.  If they gave me a particular IP, port, and time, and they wanted me 
to start capturing traffic AND identify who it was, then I would only be able 
to tell them it was someone at the park.  At best I could give them a MAC 
address and hostname.  If I have to identify the customer that’s easy: the 
municipal parks department, but I’m guessing that’s not what they will want to 
know.

 

Will this stuff get us in trouble?

 

-Adam

 

-- 
AF mailing list
AF@af.afmug.com <mailto:AF@af.afmug.com> 
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

 

-- 
AF mailing list
AF@af.afmug.com
http://af.afmug.com/mailman/listinfo/af_af.afmug.com

Reply via email to