News for hackers. Stuff that matters.
Re:Show HN: CloudScrape – Cloud-based web scraping platform by fauigerzigerk on Sunday October 18, 2015 @10:56AM (#10408378)
">Putting a up a webserver that can be publically reached is not authorization to access it."

This is legally incorrect. Without any further information or protection measures by the publisher it is legal to access content on a public web server.

">I really can't say this in any other way - just because you can do something doesn't mean you are allowed to"

You are allowed to do everything that is not expressly forbidden by law. Accessing a public web server is not forbidden by law unless the owner takes steps to prevent you from accessing it or at least clearly signals that intention. Terms of service do not constitute an implied contract, so you are not required to read the TOS before accessing a public page.

">We already have an explicit signal called robots.txt"

Exactly. That is part of what I meant when I said that any restrictions had to be implemented on top of the default, which is that everyone who can is allowed to access anything on a public webserver.

[Edit] But initially, this wasn't a thread about legality but about ethics. I think there are unethical reasons to scrape and there are unethical reasons to block scrapers. We simply need to know more about the purpose of any scraping before making a judgement.

Re:Show HN: CloudScrape – Cloud-based web scraping platform by manigandham on Sunday October 18, 2015 @07:11PM (#10410256)
1) You're not a lawyer. https://news.ycombinator.com/item?id=10339328

2) This directly contradicts your previous comment: "Leaving my stuff lying around does not signal my intention for anyone to take it, unless I let it lying around next to the bins."

3) There is already case law precedent regarding this exact type of publically accessible information not being authorized: http://www.net-security.org/secworld.php?id=14614

I agree that this is about ethics and any scraper that doesnt honor robots.txt and explicitly uses different IPs, user-agents, and other methods to mainly disguise itself as a machine service is unethical in this context.

Re:Show HN: CloudScrape – Cloud-based web scraping platform by fauigerzigerk on Monday October 19, 2015 @04:22AM (#10411760)
>You're not a lawyer

And you are a lawyer?

>This directly contradicts your previous comment

Absolutely not. The default intention of putting an HTTP server online is not "letting stuff lying around", it is publishing stuff. And yes, the default can be overruled in various ways.

>There is already case law precedent regarding this exact type of publically accessible information not being authorized

You're grasping for straws here. In this specific case, it was completely obvious that this information was not supposed to be public. It was an embarrassing security failure that the defendant wanted to expose.

I think we agree on a lot. robots.txt should be honored and scraping in way or for a purpose that negatively impacts the website's viability or business model is unethical. But usually, such purposes are covered by copyright law anyway.