4 ms·

I hate to say it, but under the CFAA this is absolutely a circumvention of an access control displayed on connection to the computer system. Bypassing that acce

I hate to say it, but under the CFAA this is absolutely a circumvention of an access control displayed on connection to the computer system. Bypassing that access control, no matter how weak it is, no matter that they already gave you the data, as long as that data comes with an access restriction that explicitly informs you that accessing the obfuscated data is a circumvention of their poorly designed access control - it's a CFAA felony violation. Reform is the answer. Repeal the CFAA and introduce better legislation aligned with the reality we live in today instead of the barely understood beauty of the baud that informed the creation of the Computer Fraud and Abuse Act of the 80s. This is a fully busted law that harms every single entity it interacts with besides the budget of the FBI and the courts. Oh and the for profit prison system.

indymike 3y ago
> I hate to say it, but under the CFAA this is absolutely a circumvention of an access control displayed on connection to the computer system. No. The information has been sent to my computer. I can view it in the browser inspector. There is no real access control here - only styling that hides content when rendered by the browser.
- calgoo 3y ago
  I agree, was there not a case recently where all the information was being posted on the government webpage, and depending on your info it only show a select view. It was found that if you viewed the source it showed all the info for all users. The judge upheld that it was not hacking as the governor had stated.
  - tomkarho 3y ago
    https://missouriindependent.com/2022/02/23/claim-that-reporter-hacked-state-website-was-debunked-parson-still-says-hes-a-criminal/ https://missouriindependent.com/2022/02/23/claim-that-report... You mean this? "Cole County Prosecutor Locke Thompson declined to press charges, saying that if any crime was committed it was both unintentional and based on a law so broad and vague it essentially criminalizes “using a computer to look up someone’s information."
    - indymike 3y ago
      That's a different case... but I that is fantastic use of prosecutorial discretion.

indymike 3y ago

> I hate to say it, but under the CFAA this is absolutely a circumvention of an access control displayed on connection to the computer system. No. The information has been sent to my computer. I can view it in the browser inspector. There is no real access control here - only styling that hides content when rendered by the browser.

calgoo 3y ago
I agree, was there not a case recently where all the information was being posted on the government webpage, and depending on your info it only show a select view. It was found that if you viewed the source it showed all the info for all users. The judge upheld that it was not hacking as the governor had stated.
- tomkarho 3y ago
  https://missouriindependent.com/2022/02/23/claim-that-reporter-hacked-state-website-was-debunked-parson-still-says-hes-a-criminal/ https://missouriindependent.com/2022/02/23/claim-that-report... You mean this? "Cole County Prosecutor Locke Thompson declined to press charges, saying that if any crime was committed it was both unintentional and based on a law so broad and vague it essentially criminalizes “using a computer to look up someone’s information."
  - indymike 3y ago
    That's a different case... but I that is fantastic use of prosecutorial discretion.