Re:US Supreme Court Restricts Scope of Computer Fraud and Ab...
by jdmichal on Thursday June 03, 2021 @06:35PM
(#27388318)
I believe this would still be covered by the first clause, the one not even being argued in this decision.
> Subsection (a)(2) specifies two distinct ways of obtaining information unlawfully—first, when an individual “accesses a computer without authorization,” §1030(a)(2), and second, when an individual “exceeds authorized access” by accessing a computer “with authorization” and then obtaining information he is “not entitled so to obtain,” §§1030(a)(2), (e)(6).
I fraudulently obtain and use credentials to a system which authorize another person to access it. I am still "accessing a computer without authorization", because those credentials never authorized me.
This starts to get really fuzzy if I fraudulently have credentials explicitly granted to me...
> Subsection (a)(2) specifies two distinct ways of obtaining information unlawfully—first, when an individual “accesses a computer without authorization,” §1030(a)(2), and second, when an individual “exceeds authorized access” by accessing a computer “with authorization” and then obtaining information he is “not entitled so to obtain,” §§1030(a)(2), (e)(6).
I fraudulently obtain and use credentials to a system which authorize another person to access it. I am still "accessing a computer without authorization", because those credentials never authorized me.
This starts to get really fuzzy if I fraudulently have credentials explicitly granted to me...