Skip to main content

Questions tagged [cfaa]

Questions involving the U.S. Computer Fraud and Abuse Act.

1 vote
0 answers
88 views

Could there be a legal risk in a captcha defeat browser plugin?

Completely Automated Public Turing test to tell Computers and Humans Apart, or captcha's, have become more common recently, in particular from cloudflare. If one used or distributed a browser plugin ...
User65535's user avatar
  • 7,544
-4 votes
1 answer
83 views

General legallity of selling advanced malicious software systems [duplicate]

Generally, within the United States, would it be legal to: Develop an advanced network exploitation system that has capabilities like The NSO Group Pegesus Spyware. Market that software to any US ...
Wesley Jones's user avatar
14 votes
2 answers
4k views

How do laws against computer intrusion handle the modern situation of devices routinely being under the de facto control of non-owners?

Current versions of Microsoft Windows will automatically update themselves. That's usually great, but they also are designed to update themselves even if the owner of the device wants them to not do ...
interfect's user avatar
  • 3,511
0 votes
2 answers
87 views

Is it a violation of the Computer Fraud and Abuse Act (CFAA) to use my work computer to browse Facebook?

My employer recently sent out an email stating work computers being used for personal activities such as browsing social media will be considered unauthorized access and that any past, present, or ...
MauriceC's user avatar
4 votes
1 answer
1k views

Computer Fraud and Abuse Act equivalent for citizens

What equivalent do ordinary US citizens have in terms of digital protectionss, as the US government and its financial interests have as defined in the Computer Fraud and Abuse Act?
Justin's user avatar
  • 57
2 votes
2 answers
153 views

What are some laws related to break into others (scammers) computers?

On Youtube, We can find videos of some tech guys controlling others (scammers) computers without permission. Not sure how they did it, and this is not a question about how do they know which computers ...
new's user avatar
  • 21
0 votes
1 answer
211 views

Are javascript keyloggers on websites legal?

I believe that if one delivers a keylogger by say email and use it to extract data entered into text boxes without the users knowledge or consent on a web site then that is illegal. If the same is ...
User65535's user avatar
  • 7,544
-5 votes
2 answers
139 views

Malicious actions by individual moderators

This is a follow up on a previous question. Using Stack Exchange as a example, moderators should be able to destroy the site within minutes by automated means. There is no meaningful terms of service. ...
D J Sims's user avatar
0 votes
1 answer
194 views

Is it illegal to modify url data?

Say i did something like https://SomeSite.com/variableThing=**MyValue** instead of https://SomeSite.com/variableThing=**DefaultValue** Can I be held accountable for any errors that the variable ...
Dave's user avatar
  • 3
3 votes
1 answer
152 views

Legal status of Cellebrite hack

The CEO of Signal has posted the discovery of security vulnerabilities in Cellebrite products. These products are used by police to evade security on seized mobile devices and thereby download the ...
Paul Johnson's user avatar
  • 13.7k
38 votes
5 answers
17k views

Is ban evasion illegal?

What is the legality of "Ban Evasions"? This sounds like a dumb question but perhaps enlighten the ignorant. Ban Evasion, "The creation of a new account on a platform or website after being ...
nolsen's user avatar
  • 491
0 votes
0 answers
94 views

Is it illegal to create code that causes damage to a computer system?

I'm reading about the Computer Abuse Amendments Act of 1994 and I just read: 'it is illegal to create any type of malicious code that might cause damage to a computer system.' Can someone clarify ...
Jrobm2k9's user avatar
0 votes
2 answers
114 views

can anyone interpret the Computer Fraud and Abuse Act(CFAA) to include everyday mistakes in good faith?

For example can the statement "Intentionally access without authorization/exceed authorization" be interpreted to mean something like a strict liability for accidental mistakes? Like can a plantiff/...
clarity_not_ambiguity's user avatar
3 votes
1 answer
862 views

In the CFAA, what exactly do "Intentionally accessed a protected computer without authorization" and "exceeding authorization" mean?

I originally looked at this for web scraping, but upon reading it more, it seems like it could be interpreted to include all types of common mistakes. Does this even include something like a ...
clarity_not_ambiguity's user avatar
0 votes
0 answers
554 views

Is download Public S3 AWS Buckets illegal?

What are S3 Buckets? An Amazon S3 bucket is a public cloud storage resource available in Amazon Web Services' (AWS) Simple Storage Service (S3), an object storage offering. Amazon S3 buckets, which ...
DotNetRussell's user avatar

15 30 50 per page