3 ms·

IANAL: This is what I expect the relevant text in the CFAA is... knowingly causes the transmission of a program, information, code, or command, and as a resul

IANAL: This is what I expect the relevant text in the CFAA is... knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer;

deleted 6y ago
[deleted]
mirekrusin 6y ago
Is it a damage if you damage damaging thing? If effect of your damage is less damage maybe it's not damage after all?
- Sebb767 6y ago
  > Is it a damage if you damage damaging thing? When in doubt - yes. It's the same reasoning forbidding you from shooting criminals in the street, you'd just open up mob justice. Of course, this is a pretty clear cut case and you might argue that this is an emergency (as people are clearly in danger of being scammed unless you act right now), but overall this is a very blurry line.
- eitland 6y ago
  Depends: around here you can break into a shop at night to put out a fire or - more realistically - break a car window to pull out a kid (or animal) left alone in the sun. I'd be careful with computer crimes on the Internet though.
  - woko 6y ago
    > I'd be careful with computer crimes on the Internet though. Exactly. Let us say you break into a shop owned by some mafia to put out a fire, then you might be fine w.r.t. authority, but you might be in trouble w.r.t. criminals. Similarly, say you break a car window to pull out a pit-bull left alone in the sun, you might have some issues with the owner if he turns out to be part of some drug trafficking gang. There is no reason to believe that phishing websites are run by script-kiddies, there are obviously criminal rings running all sorts of businesses on the Internet too. I would rather leave the work to the authorities rather than risk going through trouble with unknown criminals, just so that I could have my funny revenge over them.
xamde 6y ago
Is it a protected computer?
- eli 6y ago
  Yes. It’s defined incredibly and ridiculously broadly in the law. Pretty much any server you can get to on the internet is “protected”
  - moduspol 6y ago
    Looks accurate. It apparently does have a legal definition. https://en.wikipedia.org/wiki/Protected_computer https://en.wikipedia.org/wiki/Protected_computer
flareback 6y ago
Is it damage if you're just sending data to an endpoint to see what happens. Sounds like he didn't try to send a SQL Injection, he just sent more characters than what was expected.
- freeone3000 6y ago
  Yes. It's even damage if you're sending expected requests, but the owner of the server didn't want you to. See: Aaron Schwartz.
LinuxBender 6y ago
and the blog shows intent.

deleted 6y ago

[deleted]

mirekrusin 6y ago

Is it a damage if you damage damaging thing? If effect of your damage is less damage maybe it's not damage after all?

Sebb767 6y ago
> Is it a damage if you damage damaging thing? When in doubt - yes. It's the same reasoning forbidding you from shooting criminals in the street, you'd just open up mob justice. Of course, this is a pretty clear cut case and you might argue that this is an emergency (as people are clearly in danger of being scammed unless you act right now), but overall this is a very blurry line.
eitland 6y ago
Depends: around here you can break into a shop at night to put out a fire or - more realistically - break a car window to pull out a kid (or animal) left alone in the sun. I'd be careful with computer crimes on the Internet though.
- woko 6y ago
  > I'd be careful with computer crimes on the Internet though. Exactly. Let us say you break into a shop owned by some mafia to put out a fire, then you might be fine w.r.t. authority, but you might be in trouble w.r.t. criminals. Similarly, say you break a car window to pull out a pit-bull left alone in the sun, you might have some issues with the owner if he turns out to be part of some drug trafficking gang. There is no reason to believe that phishing websites are run by script-kiddies, there are obviously criminal rings running all sorts of businesses on the Internet too. I would rather leave the work to the authorities rather than risk going through trouble with unknown criminals, just so that I could have my funny revenge over them.

xamde 6y ago

Is it a protected computer?

eli 6y ago
Yes. It’s defined incredibly and ridiculously broadly in the law. Pretty much any server you can get to on the internet is “protected”
- moduspol 6y ago
  Looks accurate. It apparently does have a legal definition. https://en.wikipedia.org/wiki/Protected_computer https://en.wikipedia.org/wiki/Protected_computer

flareback 6y ago

Is it damage if you're just sending data to an endpoint to see what happens. Sounds like he didn't try to send a SQL Injection, he just sent more characters than what was expected.

freeone3000 6y ago
Yes. It's even damage if you're sending expected requests, but the owner of the server didn't want you to. See: Aaron Schwartz.

LinuxBender 6y ago

and the blog shows intent.