No, You Don't Get To Sue Facebook Because Your Account Got Hacked

from the sorry,-try-again dept

A guy in Florida has apparently sued Facebook because his account got hacked and started sending out links to a virus. He's claiming that the site failed to protect its users, and he's upset that, even though he got his account back, he lost his photos and had to re-add his friends. He's only asking for $70.50 ($0.30 for every friend he had to re-add), which got a bit of a joking response from Facebook:

"We're very interested to hear how he came up with the figure of $70.50," Facebook spokesman Barry Schnitt wrote in an e-mail to CNET News. "He's not going to get it but we promise to refund all the money he paid to use Facebook. Seriously, we're glad to know how important Facebook is to Mr. Karantsalis but his account was not disabled, is currently active, and he is using it, so I'm not sure what the problem is."

Facebook can afford to laugh since the case appears to have no legal merit. Section 230 clearly protects Facebook from liability in this situation (as it should), and the case law on similar cases backs that up. In fact, Eric Goldman notes that: "If anything, Karantsalis might be on the hook to Facebook for filing such a meritless lawsuit." The guy claims he filed the lawsuit to make a point, but the point he may end up making is that you shouldn't file frivolous lawsuits just because you don't like how things happened.

Filed Under: hacked, section 230, virus
Companies: facebook

Should It Be Illegal To Get Hacked?

from the might-be-a-bit-extreme dept

A few years back, we asked if it should be illegal to get hacked. In that case, we were referring to some fines that the FTC had handed out to companies that had leaked data to hackers. This raised some troubling questions -- as it's often difficult-to-impossible to stop your computer systems from getting hacked, and putting liability on the company could lead to some serious unintended consequences. Yet, at the same time, over the past few years, we've heard about large security breaches on a regular basis (thanks, in large part, to new disclosure laws) -- and often those breaches definitely seem to be due to negligence on the part of a corporate IT team that failed to lock down the data in any significant manner. That seems to be leading more people down the path of saying that companies should be liable for getting hacked.

For example, Slashdot points us to a blog post at InfoWorld, where it's suggested that companies should be criminally liable for leaking such data. I can certainly understand the sentiment, but it may go too far. Again, it's impossible to totally protect a system from getting hacked. Sooner or later there's always going to be some sort of leak. Increasing penalties could make companies take things more seriously -- especially in cases of gross negligence (which do seem all too common). But making the rules too strict can have serious negative unintended consequences as well, even to the point that some companies may stop accepting credit cards altogether, since the liability would just be too great. Would people be willing to give up the convenience of credit cards to protect their safety? From what we've seen, for most users the answer would be no. They know their credit cards are at risk, but they still use them because the benefit of the convenience still seems to outweigh the danger of the risk.

Filed Under: data leaks, hacked, legal, liabilitiy

Will VoIP Finally Get Hacked?

from the we-shall-see... dept

Ever since VoIP first came on the scene, there were fear mongering reports saying that you shouldn't use VoIP because it will get hacked. However, in all these years, we've yet to hear a serious report of VoIP getting hacked -- and, even the scary warnings about VoIP hackers have quieted down. Yet, here we are, with a security company now claiming that 2008 will be the year that VoIP gets hacked. Of course, that security company is also selling a solution to prevent VoIP systems from getting hacked, so perhaps you should take the prediction with a rather large grain of salt. So which is it: is hacking VoIP networks not that easy? Is the fear overblown? Or have we just been lucky?

Filed Under: hacked, predictions, voip

Was Kindle's DRM Hacked?

from the reverse-hacking dept

Engadget is reporting that someone has "hacked" the Kindle. But that's a little misleading: it doesn't mean someone has figured out how to crack the copy-protection on Kindle-formatted e-books. Rather, someone has figured out how to convert protected books in MobiPocket format (which Amazon owns) to the closely-related Kindle format. That means that if you've purchased protected Mobipocket books, you now have the option to play them on your Kindle. That's good news, but it's not exactly a major crack in the Kindle's DRM scheme. It's more reminiscent of Real's Harmony software, which allowed Real's DRMed music to be played on iPods. Still, it's only a matter of time before someone figures out how to crack Kindle's DRM wide open. My guess is that so far no one has bothered because there aren't enough Kindles around for anyone to care.

Filed Under: drm, e-books, hacked, kindle