Live data from Hacker News

Teenager facing prison for downloading unsecured files from government website

cbc.ca

471–480 of 502 posts

Re: Teenager facing prison for downloading unsecured files from government website

#471

Really worried about what the authorities might find in his 30TB of 4chan backups. Hoping for the best outcome for them.

My stomach dropped when I read that line in the article. I imagine the cops will drop these charges, but I'll be amazed if they don't try to pin something else on him.

Re: Teenager facing prison for downloading unsecured files from government website

#472
post #247

Earlier quoted context omitted.

A link is not someone giving you permission, it's merely telling you where something else is. I can't think of how you even came to this conclusion. It's like you have this incredibly restricted view of the internet, limited to people clicking on a browser, and think that's enough for protecting files. It's not. You don't seem to realize how bad of an idea this is. You're talking about making criminals of people. You…

I have a view of the Internet where “protecting files” has nothing to do with whether access to files is authorized or not. I shouldn’t have to lock my door, and I shouldn’t have to lock down my web server. (It may be prudent to do those things, but a trespasser shouldn’t escape penalty just because I didn’t do those things.)

Well, quite frankly dear, your "view" is wrong.

Re: Teenager facing prison for downloading unsecured files from government website

#475
post #463

Earlier quoted context omitted.

> Making a mistake doesn't revoke someone's property rights. This is a non-sequitur, nobody is saying anything about anyone's property rights being revoked. The teen asked for access, and the content owners, via the permissions they had configured, granted it. Sure they can later decide that this was a mistake, but that doesn't make it theft for the teen to have asked for access.

Making a mistake doesn't revoke someone's property rights. They made a mistake when configuring their web server. It's obvious that this was a mistake because some of the documents contained private information from Canadian citizens.

> They made a mistake when configuring their web server. It's obvious that this was a mistake because some of the documents contained private information from Canadian citizens.

Per the tech article, it was an open archive of public documents that the government published periodically. The reasonable assumption is that the files were all public, and there's no reason to suspect the teenager in this case thought otherwise. The fact that ~3% of the files weren't properly redacted (whatever that means) is hardly "obvious".

> Making a mistake doesn't revoke someone's property rights.

Let's keep things constructive please.

Re: Teenager facing prison for downloading unsecured files from government website

#476
post #469

Earlier quoted context omitted.

> Can you please send me a copy of your last 3 tax returns? Options: A) Sure, here you go. Oh wait! I didn't mean to send you those. You tricked me and stole my information. I'm going to send 15 police officers round to arrest you and then you're going to prison for years. B) No, that's confidential. ^^ Which option do you think is more reasonable?

A) is not comparable to the current situation because you are the one initiating the action. I can't stop you from sending me an email so it can't be a crime on my part if you do so.

No, you are initiating the action by requesting the file from me. You did request the file didn't you? Even though you should have known it wasn't public information?

Re: Teenager facing prison for downloading unsecured files from government website

#477
post #309

Earlier quoted context omitted.

Except this teenager was explicitly authorized to access all those files. He literally asked the web server "can I have these files" and it responded with "yes, you are authorized, here you go". If he wasn't authorized, the server should have responded with a 403 Forbidden! Web servers are built around authentication and access rights! It is not the teen's fault that the government doesn't know how to configure them…

Failure to properly secure one's private property does not make it legal for someone else to access it.

Ummm... You put your furniture on the curb or your trash, then accuse someone for stealing it? If it's private it shouldn't be on the curb. Anything on the curb is considered public. Clicking a picture of anything on your curb is also considered public. If you wanted to keep it a secret, you should have bought a box and kept it in the locker.

Edit: after few days you realize that the trash on your curb shouldn't have been there. Then you raid the trash company because your brother is a cop.

Re: Teenager facing prison for downloading unsecured files from government website

#478
post #19

And this is why I'm going to route all my kids traffic through an offshore VPN by default and whitelist low latency stuff.

I'm starting a proxy project that can be used in countries where VPN is illegal. I'm looking for collaborators. https://github.com/UncleGrape/UncleGrape

I'm interested in contributing, although I don't have much experience with networking code. Any idea what language you're going to be using?

Re: Teenager facing prison for downloading unsecured files from government website

#479
post #247

Earlier quoted context omitted.

A link is not someone giving you permission, it's merely telling you where something else is. I can't think of how you even came to this conclusion. It's like you have this incredibly restricted view of the internet, limited to people clicking on a browser, and think that's enough for protecting files. It's not. You don't seem to realize how bad of an idea this is. You're talking about making criminals of people. You…

I have a view of the Internet where “protecting files” has nothing to do with whether access to files is authorized or not. I shouldn’t have to lock my door, and I shouldn’t have to lock down my web server. (It may be prudent to do those things, but a trespasser shouldn’t escape penalty just because I didn’t do those things.)

Trespassing is generally not a crime unless there is a clear indication that the person committing it should not go there, such as a fence or a sign or some form of explicit communication from the property owner. The fence or sign doesn't have to make it impossible for the person to access the property, but it does have to be there so that it is clear that they shouldn't enter the property.

The Internet should be treated the same. Anything put on the Internet should be presumed to be public unless there is some indication to the contrary.

In this case, most of the information he accessed was clearly intended to be public, so there was no reasonable way for him to know that there was some private information improperly co-mingled with the public information, so he can't be faulted for not realizing that he shouldn't have accessed some of the information.

Re: Teenager facing prison for downloading unsecured files from government website

#480
post #263

Earlier quoted context omitted.

On a differnt note, is this level of backup a common thing? 30TB is a stupid amount of anything for any one person -- I've always used wayback if I wanted to see an old page

A very good friend of mine used to obsessively back up and catalog music and books. He had all the local bands and artists well organized and preserved for posterity. Once he had a computer he started to do similar things digitally. Some people are just into it.

I wish I'd done that with a lot of the indie music and otherwise unpopular things I was interested in years ago. There's a particular album I wish I could find and listen to, but I've only ever been able to find one article talking about it, all links dead, and that itself was long enough ago that I've forgotten the name of the album and band.

I had a lot of things saved through Instapaper right from its inception, but I stopped using it regularly and one day when I went back I didn't appear to have anything saved anymore.

Since then, I've been much quicker to download things I might want in the future. Storage is cheap, archaeological effort is not.

Post reply on HN