3 ms·

In this case there is no action at all on the users part. > As soon as he clicked that debug link or the detail link, he was intentionally accessing informatio

In this case there is no action at all on the users part. > As soon as he clicked that debug link or the detail link, he was intentionally accessing information without authorized access No he was not, he was accessing information because he did not know what it was (not explicit enough) and have been authorized to do it by Gmail. In both cases you are quoting, there is work done on the user part to access the information, in this case there is not.

TheDong 11y ago
That was work. For example, he clicked the skull and crossbones icon after already knowing it was likely to give debug information. After seeing that it did, he looked at more information. The initial load had no intent, but all exploration afterwards probably did. He stated himself that he thought it was debug information. If he only realized that Google did not intend him to have that information after he finished screenshotting everything, maybe he's in the clear for intent. Again, this is similar to Weev. Weev found a url which AT&T gave him that had a number in it. He knew AT&T didn't intend him to change the number (just like this author knew Google didn't intend him to see the links), but he changed the number anyways (and this user clicked the links anyways). I don't see the fundamental difference here.