4 ms·
So? It is still illegal to commit fraud, use stolen identities to purchase goods, and arguably still illegal to attack a database.
by fnordfnordfnord 13y ago
So? It is still illegal to commit fraud, use stolen identities to purchase goods, and arguably still illegal to attack a database.
- tptacek 13y agoCommitting fraud: illegal. Using stolen identities to purchase goods: illegal. Attacking a database: not illegal without CFAA.
- neilk 13y ago"Attacking" - are databases people? Do they have rights? I'm stumbling around trying to figure out what the right balance is too, but I think the existing laws we have around fraud and privacy are all that we need. That is, we don't need to criminalize accessing inadvertently public information; we just need to criminalize exploiting it.
- fnordfnordfnord 13y agoExploiting it is criminalized. Exploiting it is harder to detect and enforce. It is easy to read server logs and parse them for crimes. Lazy man's way to enforce the law.
- fnordfnordfnord 13y agoAttacking a database: not illegal without CFAA. That's a big problem since we can't really even define clearly (and rationally) what an attack is.
- sneak 13y agoWhy do we need the third? Why make downloading PII a crime when we already have felony laws for using such data to commit fraud?
- xyandnoz 13y agoThere are many things one can do with your PII besides using it for identity theft, including publishing it, which is NOT illegal in many states.