Jeff Liebermann wrote:

> "Intelligent thief" is an oxymoron. If he were intelligent, he
> wouldn't be a thief.
<...>
> My point was that a similar program, designed to track a laptop, could
> also be deployed to track a user.

Only if your argument above is rewritten, s/thief/user/.

> I could built it into a VPN or SSH
> client, a cookie system, ActiveX control, or any of the tools normally
> used by spyware. RFC3825 can be used to supply the necessary wireless
> locations via DHCP.

You can't verify the signal. It could be forged.

Anyway, what is the threat that this system is supposed to eliminate? If you
authenticate the user properly, what is the situation where you need to
check the location as well?

-- Lassi