4 ms·

I disagree. AT&T apologized to their impacted customers & changed the function that was exploited. (http://bits.blogs.nytimes.com/2010/06/13/att-explains-ipad

I disagree. AT&T apologized to their impacted customers & changed the function that was exploited. (http://bits.blogs.nytimes.com/2010/06/13/att-explains-ipad-security-breach/ http://bits.blogs.nytimes.com/2010/06/13/att-explains-ipad-s...) As with all security problems- a mistake was made and then exploited. It's reasonable to assess the situation and ask if they did all they should. It's also reasonable to assess their failure. But they didn't just call weev up and ask him if he wanted the data. His partner took it and then Weev seized an opportunity to gain some attention. It is not too far to call this victim blaming. This could just as easily happened to any upstart startup or fortune 1000 company.

msandford 13y ago
Nothing was "exploited" since the information was made freely available to the public with no restrictions. Had there been ANY security at all then he might be charged and convicted of hacking. But he wrote a scraper for an unsecured web service. That CANNOT be a crime in a moral sense and it's a travesty that it is a crime in a legal sense.
- droopybuns 13y ago
  The service would not give up data unless you had a specific header. You can look at the script here: http://praetorianprefect.com/archives/2010/06/114000-ipad-owners-the-script-that-harvested-their-e-mail-addresses/ http://praetorianprefect.com/archives/2010/06/114000-ipad-ow... If you didn't masquerade as an ipad, you couldn't have gotten the data. It was a shitty control, but it was a control. If you put the situation into context- weev's behavior isn't something you'd hold up on a pedestal. It's hard to engage moral outrage for such a determined asshole. Read Chole Dykstra's recounting of her experience with this douche and ask yourself about what you're defending? http://bedizen.livejournal.com/258763.html http://bedizen.livejournal.com/258763.html I just can't give two shits about this turd. You've seen the new CFAA proposals that are coming out. They're actually worse than what threw him in jail. Weev would probably find enjoyment in that outcome, as once again his actions trolled the shit out of everyone.
  - msandford 13y ago
    Yeah I'm sure he's a real jackass. I don't give a rat's ass about him as an individual. But I do care that the law is applied evenly to everyone irrespective of how much we like or don't like them. That's what makes it the rule of law, rather than a popularity contest. If the law is applied unevenly the just-ness is removed from justice, perverting it. It makes me sad that we live in a world where injustice is OK because it happened to a person we don't like.

msandford 13y ago

Nothing was "exploited" since the information was made freely available to the public with no restrictions. Had there been ANY security at all then he might be charged and convicted of hacking. But he wrote a scraper for an unsecured web service. That CANNOT be a crime in a moral sense and it's a travesty that it is a crime in a legal sense.

droopybuns 13y ago
The service would not give up data unless you had a specific header. You can look at the script here: http://praetorianprefect.com/archives/2010/06/114000-ipad-owners-the-script-that-harvested-their-e-mail-addresses/ http://praetorianprefect.com/archives/2010/06/114000-ipad-ow... If you didn't masquerade as an ipad, you couldn't have gotten the data. It was a shitty control, but it was a control. If you put the situation into context- weev's behavior isn't something you'd hold up on a pedestal. It's hard to engage moral outrage for such a determined asshole. Read Chole Dykstra's recounting of her experience with this douche and ask yourself about what you're defending? http://bedizen.livejournal.com/258763.html http://bedizen.livejournal.com/258763.html I just can't give two shits about this turd. You've seen the new CFAA proposals that are coming out. They're actually worse than what threw him in jail. Weev would probably find enjoyment in that outcome, as once again his actions trolled the shit out of everyone.
- msandford 13y ago
  Yeah I'm sure he's a real jackass. I don't give a rat's ass about him as an individual. But I do care that the law is applied evenly to everyone irrespective of how much we like or don't like them. That's what makes it the rule of law, rather than a popularity contest. If the law is applied unevenly the just-ness is removed from justice, perverting it. It makes me sad that we live in a world where injustice is OK because it happened to a person we don't like.