In USA, is it illegal to modify your WiFi router or to use a WiFi router with custom firmware? Open source projects such as DD-WRT and Tomato provide custom firmware for wireless routers. However some information on the web seems to imply that FCC rules no longer allow the modification of the firmware on software based radios. Looking at the FCC web site, this question is linked to two PDFs: 594280 D01 Configuration Control v02r01 594280 D02 U-NII Device Security v01r02 The second PDF lists the requirements that a software radio operating in 5GHz range (a frequency provided by many WiFi routers) must meet in order to become certified by FCC. On p.2 this document says the following under "Third-Party Access Control": What prevents third parties from loading non-US versions of the software / firmware on the device? Describe in detail how the device is protected from "flashing" and the installation of third-party firmware such as DD-WRT. However all of this documentation is for manufacturers, about their responsibility to block customizations like this. The questions I wanted to ask are from the perspective of the end user: is it illegal to install custom firmware on a WiFi router? if I have a router with custom firmware from another country, is it illegal to operate it in USA?
The FCC has clarified their stance on this: ... were we mandating wholesale blocking of Open Source firmware modifications? We were not, but we agree that the guidance we provide to manufacturers must be crystal-clear to avoid confusion. So, today we released a revision to that guidance to clarify that our instructions were narrowly-focused on modifications that would take a device out of compliance. The revised guidance now more accurately reflects our intent in both the U-NII rules as well as our current rulemaking, and we hope it serves as a guidepost for the rules as we move from proposal to adoption. Essentially, Open Source firmware modifications are allowed, the modifications are disallowed are things like excessively increasing signal strength.
US law (18 U.S.C. § 1030) only addresses US government computers, computers used in a way that affects interstate commerce, and those of financial institutions. Turns out, cell phones and home computers affect interstate commerce. So the forbidden acts are delimited by expressions like "having knowingly accessed a computer without authorization or exceeding authorized access", "intentionally accesses a computer without authorization or exceeds authorized access" or "knowingly and with intent to defraud, accesses a protected computer without authorization, or exceeds authorized access, and by means of such conduct furthers the intended fraud and obtains anything of value". Notice that the law is stated in terms of authorization to access, and not "cracking passwords". Similarly, 18 U.S. Code § 2701 uses phrases like "accesses without authorization". Each state has its own laws: in Washington, RCW 9A.52.110-130 identifies forbidden acts via phrases like "without authorization, intentionally gains access". The closest I can find that comes to a law that might imaginably have some bearing on "password cracking" is 18 U.S. Code § 1029 which prohibits uses of "counterfeit access devices". An "access device" is defined in para (e) as "any ...means of account access that can be used, alone or in conjunction with another access device, to obtain money..." (there is the usual attempt at an exhaustive listing behind the ellipses). A password cracker would then be an access device since it along with a user interface to a system allows one to access the system and thus the internet of things. A counterfeit password cracker would be e.g. one manufactured by BlackhatHackersoft which passes itself off as one manufactured by WhitehatHackersoft. However: 18 USC 1029 specifically says "knowingly and with intent to defraud produces, uses, or traffics in one or more counterfeit access devices", and the intent that you describe is not to defraud. If you want a paid analysis by a professional, you can hire an attorney. My view is that if the police were to come after you, that would be an abuse of law, because the law does not prohibit taking reasonable steps to select a safe password (something like "CorrectHorseBatteryStaple", which I hear is now just behind "password" in use as a password).
Illegal to write? No. Notwithstanding the First Amendment which would almost certainly make a law prohibiting it illegal, writing such things is an essential part of an IT security professional’s toolkit. You can’t protect against worms if you don’t know how they work. Illegal to distribute on an unauthorised computer? Absolutely. This would be a clear breach of the Computer Fraud and Abuse Act.
This would probably constitute illegal wiretapping and would certainly constitute a 4th Amendment search if conducted by law enforcement. Normally, the definition of whether something is "public" for purposes of an expectation of privacy is whether it could be detected by a human being unaided by technological enhancements from a place where someone could lawfully be to make that kind of observation. Some of the relevant cases are Katz v. U.S., 389 U.S. (1967) (tape recorder outside a public telephone booth was a search violating the expectation of privacy) and U.S. v. Karo, 468 U.S. (1984) (tracking device placed in barrel by authorities violated expectation of privacy). RFID signals are not "public" even if they are not encrypted with a private code because a device, such as the ones identified in the question, is necessary to receive them. The Wiretap Act, codified by 18 U.S. Code § 2511, is a federal law aimed at protecting privacy in communications with other persons. Typically, when you think of a "wiretap," the first thing that comes to mind is someone listening to your telephone calls. But the Act protects more than that. Under the Act, it is illegal to: intentionally or purposefully intercept, disclose, or use the contents of any wire, oral, or electronic communication through the use of a "device." The Act provides criminal and civil penalties for violations, although it creates various exceptions to when interceptions and disclosures are illegal. From here. In this circumstance, despite being passive, one is intentionally intercepting the contents of electronic communications through the use of a device. The fact that there was not in all cases an intent to communicate through, for example, an RFID chip, on a specific occasion probably does not suffice to render it not a communication.
Some MP3 technologies are still under patent in the US: you can read the wiki page on that matter to see if it is applicable to what you intend to do. This assumes you write your own code – if you use someone else's conversion software, that would depend on the licensing terms for the software.
Unauthorized access to a computer is a crime in most parts of the world However, Microsoft's access is not unauthorized (my emphasis): Updates. The softwareperiodically [sic] checks for system and app updates, and downloads and installs them for you. You may obtain updates only from Microsoft or authorized sources, and Microsoft may need to update your system to provide you with those updates. By accepting this agreement, you agree to receive these types of automatic updates without any additional notice. You agreed to this when you installed Windows 10. As a law site - we don't consider whether things that are legal are ethical.
You haven't specified a jurisdiction. In the United Kingdom† this is a clear violation of section 3 of The Computer Misuse Act 1990 (1) A person is guilty of an offence if— &nbsp; &nbsp; (a) he does any unauthorised act in relation to a computer; &nbsp; &nbsp; (b) at the time when he does the act he knows that it is unauthorised; and &nbsp; &nbsp; (c) either subsection (2) or subsection (3) below applies. (2) This subsection applies if the person intends by doing the act— &nbsp; &nbsp; (a) to impair the operation of any computer; &nbsp; &nbsp; (b) to prevent or hinder access to any program or data held in any computer; [F2or] &nbsp; &nbsp; (c) to impair the operation of any such program or the reliability of any such data; [F3or &nbsp; &nbsp; (d) to enable any of the things mentioned in paragraphs (a) to (c) above to be done.]] Deleting the data is unauthorized (3.1.a) The ethical hacker knows it is unauthorized (3.1.b) Deleting the data prevents access to the data (3.2.b and hence 3.1.c) † This is one of the few Acts that apply to the whole of the UK.
No Because it’s patented in country A, it is not novel anywhere in the world. That is, the patent in country A is “prior art” that would disqualify it from being patented anywhere else. The original patent holder can patent it elsewhere because patent law has an exception for that.