Good ideas and conversation. No ads, no tracking. Login or Take a Tour!
user-inactivated · 3334 days ago · link · · parent · post: Uber basically hid its database key under a doormat and is now trying to subpoena the IP addresses for anyone who stumbled across it ·
when people use the word "authorized" in the context of computer systems, especially lawyers, they're not talking about the possibility of reprimand from your boss, they're talking about the Computer Fraud and Abuse Act, which has been interpreted by courts to mean that you need explicit permission granted by the owner of a computer even to access data served unsecured on the open internet. and no, 200 OK doesn't count as explicit permission. it doesn't matter who you are or who you work for or what set of entirely legitimate keys you may have, explicit authorization outside the system always applies if you don't want to catch a felony.