5 ms·
Worse. Depending on the jurisdiction, they may be able to get you arrested for hacking.
by joncp 11y ago
Worse. Depending on the jurisdiction, they may be able to get you arrested for hacking.
- noxToken 11y agoNot some - all* US jurisdictions. From the Computer Fraud and Abuse Act (18 U.S. Code § 1030(5)(A)): >knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer
- heinrich5991 11y agoThe US isn't the whole world. ;)
- gpvos 11y agoI wonder how the U.S. Code is valid in Europe?
- tokenizerrr 11y agoEnglish isn't my first language, and I don't live in America so it's not like this matters to me, but now I'm curious. How is editing a source file you're meant to be editing "transmitting" anything?
- sbierwagen 11y agoThe CFAA intentionally used broad wording, so it could be used in many different circumstances as possible. Here "transmitting" would be when the employee (who certainly doesn't have authorization to intentionally break things, mens rea) transmitted the file to the source control server.
- xigency 11y agoModifying source code is transmitting information.
- noxToken 11y agoNot a lawyer, so this may not be 100% accurate: Transmission is probably loosely defined as a means of getting code to the target system. It would likely include physically typing into the source file, uploading your own file through CLI or GUI, or pushing to a repository.
- gknoy 11y agoThe key is "without authorization". You're allowed to fix things and add features, but deliberate sabotage is arguably unauthorized. You might win in court, but as others said elsewhere, court is Too Expensive even if you win. That, and I wouldn't be surprised if they didn't go after you for industrial espionage or something.
- 15155 11y agoExcept that you're entirely authorized to access the computer system. Purpose or intent isn't defined in that particular law. Do you have authorized access? Well, as an employee you do. This isn't a criminal matter, it's a civil one, and no company is going to sue a saboteur unless they need an example made; they stand to gain nothing. A company doesn't get to retroactively redefine what "authorized access" is as it suits them.
- FireBeyond 11y agoYou have authorized access, but the statute says 'cause unauthorized damage' (which in its most literal reading could be an unintentional bug, too - don't think for a moment I'm supportive of this).
- ergothus 11y agoIf there's a remote server involved (your VCS?) it's transmission. Given the occasionally draconic application, if there is a signal (did you use a keyboard?) then it's transmission.
- xigency 11y agoOr vandalism.