CFAA Unauthorized Access
The cluster discusses whether specific actions, such as using computer interfaces in unintended ways or accessing restricted data, constitute violations of the US Computer Fraud and Abuse Act (CFAA), often referencing prosecutions and legal interpretations.
Activity Over Time
Top Contributors
Keywords
Sample Comments
This is almost certainly an instance of Unauthorized Use under the CFAA and therefore criminal in the USA and any jurisdictions with similarly broad anti-hacking laws.
This could probably be spun as a violation of the cfaa. IANAL, but the practical interpretation of that seems to be "don't do bad stuff using a computer", kind of like mail fraud but worse.
I wonder if there's a reasonable CFAA case here...
The Computer Fraud and Abuse Act outlaws "unauthorized access". The website owner clearly did not authorize access to that, so the letter of the law may have been violated. Maybe the law should require malice, criminal intent, and actual harm to have happened for "unauthorized access" to be a crime.
United States' Department of Justice recently revised the CFAA to legally permit access of the type you engaged in (contradicting a few other comments here)https://www.bleepingcomputer.com/news/security/us-doj-will-n...
You may want to read the CFAA and report back.Spoiler alert, it doesn’t involve your intentions or money.https://en.m.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act
You are breaking a US law - CFAA. Which could be an interested showdown CFAA vs GDPR.
It's arguably a violation of the CFAA.
Using the interface in unintended (by the creators) ways is a prosecutable crime under the CFAA. People can be and have been imprisoned for it. https://en.wikipedia.org/wiki/Weev#Trial is a notable example.
Sounds like they're breaking the CFAA and should be criminally prosecuted.