News for hackers. Stuff that matters.

A comment on Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets. Parent comment

Re:Hackers ransack Citrix, make off with 6TB+ of emails, biz... by Amezarak on Sunday March 10, 2019 @09:49AM (#19351973)
This argument is not much different than what the grandparent is referring to. weev was convicted of conspiracy to access a computer without authorization because he advised a guy who discovered a publicly available HTTP API hosted by AT&T that returned email addresses based on guessable ids. The conviction was overturned, but on procedural grounds, not legal ones.
[ Parent | on HN ]
Re:Hackers ransack Citrix, make off with 6TB+ of emails, biz... by wbl on Sunday March 10, 2019 @10:50AM (#19352197)
Directory listing wasn't on on the AT&T server.
[ Parent | on HN ]
Re:Hackers ransack Citrix, make off with 6TB+ of emails, biz... by wrs on Sunday March 10, 2019 @12:28PM (#19352647)
He accessed “public” URLs that he inferred the existence of but wasn’t supposed to access. So I guess if you can start at the homepage of this site and find a link to a directory, you’re OK.
[ Parent | on HN ]