| ▲ | XenophileJKO 5 hours ago | |
I think we have to distinguish between compromising a network and using public apis in a way that might be counter to their intent. We also need to delineate between usage that impacts other users and usage that does not. My opinion is people are getting really quick at jumping on the bandwagon and lumping all this together. They are very different types of issues and impacts. | ||
| ▲ | marshray 3 minutes ago | parent | next [-] | |
What is "exceeding authorized access" if not "using APIs in a way counter to their intent"? | ||
| ▲ | helterskelter2 4 hours ago | parent | prev | next [-] | |
> distinguish between compromising a network and using public apis in a way that might be counter to their intent. I believe weev got in legal trouble under the CFAA for this very thing with his 2010 AT&T escapade. AT&T had all that data sitting on a public server with no authentication necessary, just a SIM ID to get that customer's PII. Truthfully AT&T should have been hit with negligence...you don't secure a bank vault with a screen door, but we don't hold anyone accountable for other people's data in America. | ||
| ▲ | paimapi 4 hours ago | parent | prev | next [-] | |
is that relevant here? let's say I make a million requests to the APIs of open-source, community projects. that wouldn't be seen as being akin to a malicious DDOS? at the very least, these corporations are essentially being subsidized by community-funded server capacity to make these requests. like other private corporate APIs, they should be charged per-request. until then, this kind of 'accidental' DDOSing should be made illegal and treated accordingly coming to the defense of these companies just has the net effect of eroding public community projects, increasing their costs, and will push us even more into walled corporate gardens | ||
| ▲ | pessimizer 3 hours ago | parent | prev [-] | |
I propose that we don't reconceptualize either hacking or copyright violation just because rich people want to do it now. I also propose that we don't ignore the RICO statutes. If you want to make those laws sane, so be it; I hate them. But the only reason there's some pumped-up urgency right now is because rich people want to urgently do whatever the hell they urgently want to do. People have gone to jail for using public APIs in a way they weren't intended to be used. Make it a big deal then. | ||