News for hackers. Stuff that matters.
Re:Redditor finds list of 47k email addresses with passwords by powertower on Friday November 11, 2011 @02:37PM (#3225849)
Not a smart thing to do (to log into those accounts).

If you found a bunch of house keys, each one labled with the address of the house, would you go to each house and open each door? Stepping inside is not necessary.

That of itself, might not break any laws (without prior warning, or intent to cause harm, it might not be trespassing), but computer tresspass laws only require unauthorized access.

Re:Redditor finds list of 47k email addresses with passwords by vinhboy on Friday November 11, 2011 @05:48PM (#3226450)
I never like it when people compare the digital world to the real world.

It's like the whole "would you download a pizza" statement.

The answer is always, yes, yes I would.

I hope our politicians and law enforcement officials do not treat the digital world like its the real world. Things are just not the same... We need separate rules and separate code of ethics for each.

Re:Redditor finds list of 47k email addresses with passwords by code_duck on Friday November 11, 2011 @08:38PM (#3226843)
I consider my email to be like a personal folder, where I have an expectation of privacy. If I accidentally left my briefcase at your office, I would hope you wouldn't look through it.

If you found the keys to a room full of filing cabinets with other people's papers, it wouldn't be right to go open them all. Similarly, if you find a list of credentials that grant you access to the electronic documents of others, it's not right to use those credentials. Of course 'downloading a car' is a terrible metaphor, but comparing electronic documents to printed documents seems very straightforward.

Re:Redditor finds list of 47k email addresses with passwords by __david__ on Saturday November 12, 2011 @01:06AM (#3227272)
If we're forcing physical metaphors, I think it's more like finding a stack of 47000 briefcases in an alley somewhere. Unattended, no signs or anything. Opening a bunch of them to just see if people's stolen documents are inside seems reasonable in that case.
Re:Redditor finds list of 47k email addresses with passwords by tptacek on Saturday November 12, 2011 @09:08AM (#3227829)
The Python script was a terrible idea. No matter what your opinion of the equivalence between real property and email accounts is, he essentially played russian roulette with many thousands of dollars of legal fees.

Just assume the passwords work and move from there.

Re:Redditor finds list of 47k email addresses with passwords by derfclausen on Friday November 11, 2011 @03:07PM (#3225956)
The account probing might be unlawful, but I think the key analogy is a bit of a reach.
Re:Redditor finds list of 47k email addresses with passwords by eigenvector on Friday November 11, 2011 @03:30PM (#3226033)
Right, in many jurisdictions unauthorized access to a home is a much more serious offence than standard trespass.
Re:Redditor finds list of 47k email addresses with passwords by dlitz on Saturday November 12, 2011 @10:55AM (#3228022)
> If you found a bunch of house keys, each one labled with the address of the house, would you go to each house and open each door?

I'm so tired of these analogies. The Internet is not like the physical world. Why don't we talk about what actually happened, rather competing to come up with the worst analogies?

Re:Redditor finds list of 47k email addresses with passwords by pbhjpbhj on Friday November 11, 2011 @05:34PM (#3226402)
Isn't what he's done more like war-dialing than actual cracking in real terms though.

I'll agree that in legal terms he's almost certainly the wrong side of the tracks.

Re:Redditor finds list of 47k email addresses with passwords by koenigdavidmj on Friday November 11, 2011 @02:56PM (#3225909)
You might not have entered the house, but you did enter the land.