Clear legal section/warning about www.pwnagotchi.ai

[incredincomp]

IANAL

The legal ramifications are entirely subjective to where the user lives and operates the pwnagotchi software. That being said, my understanding of the general international laws lead me to believe this software, on its own, with no user interference or modification, is completely legal. The cracking of passwords collected is also completely legal.

The illegality comes in when you focus deauth attacks on a single device to render a DoS of sorts.
Also, any access to any system that you do not own or do not have permission to access will be viewed as a crime. This would include logging into a WiFi network with a password you have cracked.

Currently, Pwnagotchi's will not send repeated deauths to the same client on the same network, avoiding the definition of DoS. IE. Legal

We also can't stop people from illegally accessing things they are not allowed to access, pwnagotchi does not do anything spectacular that you could not do with a laptop when trying to pwn a network on your own. If a user is cracking passwords to illegally access networks they are not allowed access to, it is the users responsibility to know their local laws, and receive permission before attempting access to networks that dont belong to them. The users actions define the legality here, not the pwnagotchi .img's or code library.

Just my two cents.
~incredincomp

PS 10/21/19 -
given the new found heat from LAPD, maybe should think about a disclaimer mentioning the very limited use of deauth packets (ie not a DoS or Jam) at the least. pcap's are pretty much a non issue imho. All sorts of information hangs out in the open anyway so this may be interesting to get a judges opinion of the validity/legality of holding onto those said floating/public packets.

[evilsocket]

@incredincomp i couldn't have said it better

[arch-user-france1]

yes... It's right....

You can too steel datas from google with intext:"..." etc... If you don't do any social engineering attack, this would be legal...

It's the same like pwnagotchi
I think, we can close this issue...................

BUT: IT ISN'T LEGAL TO DEAUTHENTICATE STATIONS, THATS NOT LEGAL, SO YOU HAVE TO EDIT YOUR CONFIG.TOML OR CONFIG.YML FILE!!!!!

[arch-user-france1]

You can use the default.toml file and show on very long down- until last line and add the config with dontknowwhat.deauthenticateordomething and set to false

[arch-user-france1]

Config is in /etc/pwnagotchi