Facebook Abusing Computer Crime Law To Block Useful Service

Legal Issues

from the it's-not-hacking dept

We noted recently that the courts (and plaintiffs in lawsuits) have been stretching computer hacking laws in dangerous ways. The laws that were clearly intended to cover situations of malicious hackers breaking into a computer system they have no right to be in are being twisted around, such that contractual language is being used to make all sorts of access “unauthorized” under the terms of the law. For example, we noted a case where using an employer’s computer to access information for personal use… could be seen as “unauthorized access” and, thus, criminal computer hacking.

Last year, we wrote about a bizarre lawsuit where Facebook sued Power.com, a website that tried to aggregate various social networks into a single interface. That could be pretty useful. Facebook didn’t like it and sued. But just because Facebook doesn’t like something, it doesn’t make it illegal. What if users want to access Facebook that way? Facebook tossed out a variety of legal theories, including the idea that this was criminal hacking, because it was unauthorized access. How is it unauthorized? Well, here Facebook got creative. It has, hidden within its terms of service the note that accessing Facebook through “automatic means” is forbidden. Facebook says that Power.com’s aggregator is “automatic means” (which seems questionable), and thus accessing Facebook via Power.com is no longer authorized. Since the access is not authorized, then it’s… unauthorized access, aka hacking, and a crime under California’s computer crime statute.

The EFF has now filed an amicus brief in the case, pointing out that this would be a ridiculous stretch of California’s computer crime law:

“California’s computer crime law is aimed at penalizing computer trespassers,” said EFF Civil Liberties Director Jennifer Granick. “Users who choose to give their usernames and passwords to aggregators like Power Ventures are not trespassing. Under Facebook’s theory, millions of Californians who disregard or don’t read terms of service on the websites they visit could face criminal liability. Also, any Internet company could use this argument as a hammer to prevent its users from easily leaving the service as well as to shut down innovators and competitors.”

Even the simple use of the automatic login feature of most browsers would constitute a violation under Facebook’s theory, since those services are “automatic means” for logging in. But the risk for users is even broader. If any violation of terms of use is criminal, users who shave a few years off their age in their profile, claim to be single when they are married, or change jobs or addresses without updating Facebook right away would also have violated the criminal law.

Hopefully, the court agrees…

Filed Under: computer crime, hacking, unauthorized access
Companies: facebook, power.com