71–76 of 76 posts
Earlier quoted context omitted.
They'll put you in jail for accessing a public url structure in an unintended manner, though, under the CFAA. To me that's a bigger deal.
If you're referring to weev, this is not an accurate description of his case.
Earlier quoted context omitted.
If you're referring to weev, this is not an accurate description of his case.
I'd be grateful for corrections to any distortions or omissions in that description. I'd forgotten (or might not have heard at the time) that his conviction was subsequently vacated on appeal, but that was after he already spent over a year in prison. https://en.wikipedia.org/wiki/Weev#Conviction_overturned
weev was put in jail because he wittingly conspired with others to steal AT&T customer data via a vulnerability on their website. In his correspondence with journalists and IRC logs surrounding the event he went out of his way to make abundantly clear that he was fully aware that this access was unauthorized.
At the time, weev himself described his actions as "theft".
You could sum a SQL injection attack down to "accessed a public url structure in an unintended manner", but that'd just be terribly dishonest.
Earlier quoted context omitted.
I'd be grateful for corrections to any distortions or omissions in that description. I'd forgotten (or might not have heard at the time) that his conviction was subsequently vacated on appeal, but that was after he already spent over a year in prison. https://en.wikipedia.org/wiki/Weev#Conviction_overturned
weev wasn't put in jail because he accessed a public url structure in an unintended manner. weev was put in jail because he wittingly conspired with others to steal AT&T customer data via a vulnerability on their website. In his correspondence with journalists and IRC logs surrounding the event he went out of his way to make abundantly clear that he was fully aware that this access was unauthorized. At the time, weev…
I agree there's a continuum from hitting URLs with predictable structures to blatant hostility like SQL injections, but the problem with the CFAA is that it doesn't draw a clear line on that continuum.
Earlier quoted context omitted.
weev wasn't put in jail because he accessed a public url structure in an unintended manner. weev was put in jail because he wittingly conspired with others to steal AT&T customer data via a vulnerability on their website. In his correspondence with journalists and IRC logs surrounding the event he went out of his way to make abundantly clear that he was fully aware that this access was unauthorized. At the time, weev…
You might want to tell that to the judge who overturned his conviction, and the esteemed lawyers who wrote amicus briefs for him. I agree there's a continuum from hitting URLs with predictable structures to blatant hostility like SQL injections, but the problem with the CFAA is that it doesn't draw a clear line on that continuum.
I'm not sure why the third circuit would be relevant at all in this conversation to be honest.
Earlier quoted context omitted.
You might want to tell that to the judge who overturned his conviction, and the esteemed lawyers who wrote amicus briefs for him. I agree there's a continuum from hitting URLs with predictable structures to blatant hostility like SQL injections, but the problem with the CFAA is that it doesn't draw a clear line on that continuum.
The third circuit released weev due to improper venue choice, not because he didn't knowingly break the law. I'm not sure why the third circuit would be relevant at all in this conversation to be honest.
What action(s) is/are specifically outlawed?
Assuming there's direct evidence, how would this be legally-enforced?
What's the recourse for lower-ranked players who are kicked out based on this law but didn't do anything for gain, say a spouse who was invited to participate for social reasons but doesn't play very often?
Do we really need a law?