Re:Zero-day in Sign in with Apple
by nine_k on Saturday May 30, 2020 @09:38PM
(#23366477)
I wonder if compromising your own account can be seen as unlawful. It's much like teenagers being found to break the law by making nude photos of themselves: they are found in possession of prohibited materials, even though they obtained them in a lawful way. Cracking your own account in a lawful way could possibly be done by a court order, but otherwise your actions are prohibited by law, even.though there cannot be a malicious intention.
[ Parent
| on HN ]
Re:Zero-day in Sign in with Apple
by aptwebapps on Sunday May 31, 2020 @12:15AM
(#23367124)
Totally not a lawyer here, but my impression of laws like CFAA is that it revolves around unauthorized access of resources. If the only resources you access are those for which you have authorization, you might be all right.
After edit: "you might be all right." was a poor choice of words. If you piss off the wrong people, you won't be all right.
Aaron Swartz would likely beg to differ.
Re:Zero-day in Sign in with Apple
by aptwebapps on Sunday May 31, 2020 @01:26AM
(#23367413)
Added an after edit. I don't mean to say "you'll be fine, go ahead." But Swartz's case was a bit different that the hypothetical described above.
I think the flaw in this plan is "your own account". AFAIK, like credit cards, the company maintains that they own the account and can do whatever they want with it, just deigning to give you the right to access it as they see fit.