4 ms·
This isn't even a security hole, it's a complete security disaster. Did they even think through the process for five minutes before they built that? I mean, the
by Archio 15y ago
This isn't even a security hole, it's a complete security disaster. Did they even think through the process for five minutes before they built that? I mean, there aren't even any hacks involved.
Nice find.
- tantalor 15y ago> there aren't even any hacks involved I doubt law enforcement would see it that way. Downloading photos with this method is not much different than guessing somebody's email or voicemail password; you're accessing something you're not supposed to. See 18 U.S.C. § 1030(a)(2)(C) and § 2701.
- Archio 15y agoWell, the question is, how far does that go? If I put up photos on a public web server intending them to be private, is that still legal?
- dangrossman 15y agoIt goes as far as is reasonable. The law gets interpreted in a court of law by human beings that make decisions about whether a reasonable person would expect that to be private and the intent of the person that found the images anyway.
- tantalor 15y agoHere's a good writeup of the state laws, http://law.jrank.org/pages/11804/Computer-Crimes.html http://law.jrank.org/pages/11804/Computer-Crimes.html It is not enough for purposes of these laws to accidently or unintentionally wander into areas on the internet where valuable or secure information may reside. If one enters such an area using computers or computer technology, his/her intent must be to steal, destroy or defraud to be found guilty of a crime. For example, David Kernell was convicted of "misdemeanor computer intrusion"[1] for accessing Sarah Palin's Yahoo! email. [1] http://www.esecurityplanet.com/headlines/article.php/3879756/Palin-Email-Hacker-Convicted-on-Two-Charges.htm http://www.esecurityplanet.com/headlines/article.php/3879756...
- code_duck 15y agoGiven Facebooks history at accidentally or intentionally making 'private' material quite public, what would a reasonable person expect? A well informed one, anyway.
- pepper92 15y agoThis is probably closer to guessing someone's phone number than their password.
- nthj 15y agoI wouldn't bet jail time that a judge sees it that way.