4 ms·

Your analogy doesn't really compare as it involves identity fraud. >You go to the front desk, tell them you're me and get a key to my room. This would be the

by Nadya 11y ago

Your analogy doesn't really compare as it involves identity fraud. >You go to the front desk, tell them you're me and get a key to my room. This would be the equivalent to using an Admin username/password to login to the server at which point you are given permission flags (-access wallet). Logging in with the Admin username/password without permission is against the law - so regardless if you take the wallet or not you broke the law. You leave your wallet in your hotel room. I go to the front desk and ask them for a key to your room. They don't question me or verify my identity and simply hand over the key. Would you be angry at the hotel for not verifying who the person is or why they need a key to your room?

tedunangst 11y ago
Are we agreed then that telling a web site your username is ";update users set passwd = ''--" counts as fraud?
- msandford 11y ago
  Only if you're willing to federally prosecute every person who ever told a website that they were over 18 or 21 if they were not in fact over 18 or 21. Fraud is fraud and justice is blind, right?
  - tptacek 11y ago
    Sneaking into an R rated movie. Stealing hundreds of millions of dollars from pension funds. Yep, pretty much the same thing.
    - msandford 11y ago
      If justice is blind, then they are the same thing! They are willfully ignoring or choosing not to obey the rules that society has agreed upon for all people. If you want to argue that different crimes are different I'm all for it. But if you're going to do that, then please explain to me how Weev not releasing the information publicly is so heinous as to deserve years in prison and a fine worth a substantial fraction of a house.
tptacek 11y ago
Why does it matter whether he'd be angry at the hotel? We're talking about the person who exploits the hotel's lax security to steal from him. Impose civil liability on people with terrible security. Fine. That's an orthogonal issue, though. There's no reason you can't do both things, and most reasonable people can imagine a variety of things people might do with computers that they'd expect and want to be criminalized.

by Nadya 11y ago

tedunangst 11y ago

Are we agreed then that telling a web site your username is ";update users set passwd = ''--" counts as fraud?

msandford 11y ago
Only if you're willing to federally prosecute every person who ever told a website that they were over 18 or 21 if they were not in fact over 18 or 21. Fraud is fraud and justice is blind, right?
- tptacek 11y ago
  Sneaking into an R rated movie. Stealing hundreds of millions of dollars from pension funds. Yep, pretty much the same thing.
  - msandford 11y ago
    If justice is blind, then they are the same thing! They are willfully ignoring or choosing not to obey the rules that society has agreed upon for all people. If you want to argue that different crimes are different I'm all for it. But if you're going to do that, then please explain to me how Weev not releasing the information publicly is so heinous as to deserve years in prison and a fine worth a substantial fraction of a house.

tptacek 11y ago

Why does it matter whether he'd be angry at the hotel? We're talking about the person who exploits the hotel's lax security to steal from him. Impose civil liability on people with terrible security. Fine. That's an orthogonal issue, though. There's no reason you can't do both things, and most reasonable people can imagine a variety of things people might do with computers that they'd expect and want to be criminalized.