I don’t pay very much attention to prosecution of cases under the CFAA, but at a surface level this reminded me of the weev / AT&T case [1], where he was convic

I don’t pay very much attention to prosecution of cases under the CFAA, but at a surface level this reminded me of the weev / AT&T case [1], where he was convicted for (afaik) incrementing an id and fetching all the records. I didn’t remember the outcome, but it looks like it was overturned later without taking a solid stance on the technique [2] I’d definitely believe other cases have happened in the last 8 years that have done a better job of clarifying the law, but I’m not aware of them. 1. https://www.techdirt.com/2013/09/30/dojs-insane-argument-against-weev-hes-felon-because-he-broke-rules-we-made-up/ https://www.techdirt.com/2013/09/30/dojs-insane-argument-aga... 2. https://www.eff.org/press/releases/appeals-court-overturns-andrew-weev-auernheimer-conviction https://www.eff.org/press/releases/appeals-court-overturns-a...