3 ms·

I think they could make a reasonable argument that they didn't know they would just be given the documents upon request if they weren't authorized. If I ask you

by chc 15y ago

I think they could make a reasonable argument that they didn't know they would just be given the documents upon request if they weren't authorized. If I ask you for a hundred dollars and you give it to me with no force or trickery, that is not theft, because your giving it to me implies consent. That's where I see ease of access coming into it: If you really don't take any effort to keep me out of something (even as little as telling me "stay out"), how do I distinguish that unauthorized content from content I'm authorized to access — and not only that, but make the distinction before I access it?

tptacek 15y ago
Do I think you'd be convicted for manipulating URLs idly to prove a point? No. Do I think you'd be convicted for manipulating URLs and grabbing their entire database? Very possibly. Do I think you could incur five figures of legal headache in either scenario? Yes, I think you could, depending on how savvy the "victim" is and how close to "fight or flight" you push them.