DOJ Gives Up On Arguing That Violating Your Employer's Computer Use Policy Is Criminal Hacking
from the about-time dept
For a few years now, we'd been noting serious problems with the Computer Fraud and Abuse Act (CFAA), which was supposed to be about "criminal hacking" of computers. That's the theory, at least. Except that various prosecutors had defined it so broadly that they felt basically anything people did that violated a computer use policy or terms of use policy could make you a criminal hacker. It's why prosecutors went after Lori Drew for supposedly "violating" MySpace's terms of service. There was nothing else they could pin on her, so they twisted the law. Of course, that also creates great power for anyone who creates a terms of service agreement, as it makes it easy to turn your users into criminals.Early last year, we wrote about a very troubling CFAA ruling, which effectively found that if you do anything on a work computer that your employer doesn't like, you're a criminal for violating the CFAA. Yes, by failing to abide by your employer's broad "computer use policy" you could be charged with a being a criminal hacker under the CFAA. That's what happened to David Nosal. He had accessed some information from his employer's computer system -- which he was authorized to access. He wanted to use that info because he was going to a competitor. That's obviously questionable on the ethics scale, but computer hacking? Hardly. Except that the district court thought it was.
Thankfully, earlier this year the 9th Circuit appeals court reversed the ruling, with Judge Kozinski noting that it makes little sense to interpret a statute in a manner that turns "ordinary citizens into criminals."
A few weeks ago, the DOJ (who seemed to love these kinds of cases) seemed to realize that perhaps it was silly to keep arguing against Nosal here, and admitted that it wouldn't ask the Supreme Court to hear the case on appeal, meaning the 9th Circuit ruling stands. While it's good that the DOJ apparently realized that pursuing this any further was a bad idea, it's still ridiculous that it went forward with this theory in the first place, and argued it all the way through the initial appeal. Either way, while Kozinski's ruling is only binding on the 9th Circuit, hopefully other courts will pay attention to the reasoning behind it.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: cfaa, computer use policy, doj, fraud, hacking, terms of use
Reader Comments
Subscribe: RSS
View by: Time | Thread
Loser Pays!
Too often today Prosecutors use the tactic of throwing as much crap (charges) at a person in hopes something will stick. There are tons of cases that are much more egregious than this example of Prosecutors taking a law and trying to get the courts to reinterpret it to include what is outside the law intent and spirit.
And I don't really blame them (too much) for doing so. It is how they are graded that is really at fault. Prosecutors are pretty much only graded on their conviction rate. Not whether or not it was the best use of tax payers dollars, or if the case is valid. So in their eyes a conviction is a conviction.
The Prosecutors really have no incentive in bringing only good cases to trial. Or for using the limited resources of the courts wisely. They just care about getting a conviction.
But if there was in place some form a redress for the defendants in cases where the Prosecutors are found to be acting outside a law purpose they might think twice.
The big issue I see with that is that it would create a big incentive to the Prosecutors to keep pressing a case in hopes that some court at some level will side with them.
So catch 22.
[ link to this | view in chronology ]
But I'm not sure piling on charges is really misconduct.
[ link to this | view in chronology ]
although i totally agree with this statement, this is exactly what the entertainment industries have been doing to people for years, even when those citizens have only been sharing what they legally own with friends.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Re:
[ link to this | view in chronology ]
Re: Re:
[ link to this | view in chronology ]
We are at the tipping point of tyranny, as liberty erodes daily.
[ link to this | view in chronology ]
DOJ
They violate the 1st Amendment by caging protesters and banning books like “America Deceived II”.
They violate the 4th and 5th Amendment by allowing TSA to grope you.
They violate the entire Constitution by starting undeclared wars.
Impeach Obama, support Ron Paul.
Last link of “America Deceived II” before it is completely banned:
http://www.amazon.com/America-Deceived-II-Possession-interrogation/dp/1450257437
[ link to this | view in chronology ]
4th Circuit. ruled the same as NOSAL court
Note, the issue here is unauthorized USE, not necessarily unauthorized access. So an employee that exceeds his or her access rights may still have criminal and civil CFAA issues to contend with.
[ link to this | view in chronology ]
/sarc
[ link to this | view in chronology ]