In other words, every hack is legal?

If you believe accessing a URL manually, incrementing a number in a URL, or using wget is a hack, yes. At least you'd be in agreement with the US Dept. of Justice in that.

The web is open. If you put your a chair out in a public square with a sign on that back that says, "Only paying members can sit." don't be surprised when someone random sits in it.

This puts words in the mouth of the poster that the poster didn't say. The Lyft API is authenticated so it's definitely not like accessing a URL manually, using wget, or or incrementing a number. You have to sign up, get an account and then you can use it.

A better analogy would putting your chair in a private room with a locked door and sign on the door that says ask management for access to the chair. Anyone who breaks in to use that chair definitely knows they aren't supposed to be there.

If they break a security measure, it's a hack. If there was deliberately no security, it's not a hack.

So otherwise it is wild-west, no legal recourse, right?

Do you really believe that?

So I can brute force your laptop in a coffee shop and steal your shit, because you didn't stop me?

The lengths people will go to justify Uber is amazing.

So if you forgot to lock your front door, everyone can walk into your house and help themselves to your properties?

Quoting @zaphar:

> The Lyft API is authenticated

In other words, the door was locked and you gave the key to a guy, who then peed on the carpet. While that was impolite, he was definitely not guilty of breaking and entering.

If you gave the key to a guy so they could watch your dog, they're still guilty of theft if they steal your stuff.

Also did Lyft know they were giving the key to Uber? If someone impersonates your dog sitter to get the key to your house, they still did not have permission to enter your house so it's still breaking and entering.