Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>According to? That's an ethical stance one can take, but it isn't how our laws work.

What law? Please be specific here as I'm not clear what you're getting at.

If you're referring the Computer Fraud and Abuse Act (CFAA)[0], it states:

   The law prohibits accessing a computer without authorization, or 
   in excess of authorization.
WRT NSA servers, accessing classified information (assuming you don't have clearance and/or a need for that information) would violate the CFAA and possibly the Espionage Act[1].

However, in this particular case, an end user is accessing data (with appropriate credentials that have access to no more and no less than the data they are authorized to access) for which they have appropriate authorization. As such, it can't be a violation of the CFAA. So, where's the "crime" here?

I'm not sure how you're getting from point A to point B here. If you could help me out, I'd appreciate it.

[0] https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act

[1] https://en.wikipedia.org/wiki/Espionage_Act_of_1917



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: