6 ms·

If I infiltrate someone else’s computer, secretly run code in order to to exfiltrate data I risk prison time because objectively it seems to satisfy criminal la

by dminuoso 10mo ago

If I infiltrate someone else’s computer, secretly run code in order to to exfiltrate data I risk prison time because objectively it seems to satisfy criminal laws over where I live. How do prosecutors in any modern country/state not charge this behavior when done by a website owner?

geocar 10mo ago
I suppose it depends on what you mean by "modern" In Europe we have the GDPR which does exactly this
- dminuoso 10mo ago
  The GPDR is not criminal law. But ignoring that, regulators barely pursue GPDR violations. Consider the swaths of dark patterns surrounding cookie terror banners. The GPDR language is extremely clear that none of them are legal, but virtually nobody is ever punished.
  - geocar 10mo ago
    > The GPDR is not criminal law While the GDPR does not directly prescribe prison sentences, it absolutely enables countries to establish criminal offences for severe data protection violations, and they will clearly extradite! https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/09/guilty-car-salesman-fined-for-retaining-and-selling-data-to-competitors/ https://ico.org.uk/about-the-ico/media-centre/news-and-blogs... https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/08/porthcawl-man-sentenced-after-brazen-car-scam-worth-hundreds-of-thousands-of-pounds/ https://ico.org.uk/about-the-ico/media-centre/news-and-blogs... > But ignoring that, No don't ignore that. When you're so completely wrong about the first thing you say, everything that follows is going to be even more wrong. > Consider ... cookie ... banners. The GPDR language is extremely clear that none of them are legal You are confusing the ePrivacy directive (2002/58/EC) with the GDPR (2016/679).
gruez 10mo ago
The difference is that there's implied consent to run arbitrary (albeit sandboxed) code when you visit a website. Moreover it's not the website causing the code to be executed, it's your browser. Otherwise if the bar is "code is being run but the user doesn't know about it", it would lead to either any type of web pages with javascript being illegal (or maybe without javascript, given that CSS turing complete), or a cookie banner type situation where site asks for consent and everyone just blindly accepts.
- mh- 10mo ago
  > if the bar is "code is being run but the user doesn't know about it", .. would lead to all modern electronics being illegal, not just web pages with javascript.
  - nativeit 10mo ago
    I guess it’s fortunate that this quote only includes a portion of the assertion they’re making. What happens when you include the rest?
- bandrami 10mo ago
  > any type of web pages with javascript being illegal Inshallah

geocar 10mo ago

I suppose it depends on what you mean by "modern" In Europe we have the GDPR which does exactly this

dminuoso 10mo ago
The GPDR is not criminal law. But ignoring that, regulators barely pursue GPDR violations. Consider the swaths of dark patterns surrounding cookie terror banners. The GPDR language is extremely clear that none of them are legal, but virtually nobody is ever punished.
- geocar 10mo ago
  > The GPDR is not criminal law While the GDPR does not directly prescribe prison sentences, it absolutely enables countries to establish criminal offences for severe data protection violations, and they will clearly extradite! https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/09/guilty-car-salesman-fined-for-retaining-and-selling-data-to-competitors/ https://ico.org.uk/about-the-ico/media-centre/news-and-blogs... https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/08/porthcawl-man-sentenced-after-brazen-car-scam-worth-hundreds-of-thousands-of-pounds/ https://ico.org.uk/about-the-ico/media-centre/news-and-blogs... > But ignoring that, No don't ignore that. When you're so completely wrong about the first thing you say, everything that follows is going to be even more wrong. > Consider ... cookie ... banners. The GPDR language is extremely clear that none of them are legal You are confusing the ePrivacy directive (2002/58/EC) with the GDPR (2016/679).

gruez 10mo ago

The difference is that there's implied consent to run arbitrary (albeit sandboxed) code when you visit a website. Moreover it's not the website causing the code to be executed, it's your browser. Otherwise if the bar is "code is being run but the user doesn't know about it", it would lead to either any type of web pages with javascript being illegal (or maybe without javascript, given that CSS turing complete), or a cookie banner type situation where site asks for consent and everyone just blindly accepts.

mh- 10mo ago
> if the bar is "code is being run but the user doesn't know about it", .. would lead to all modern electronics being illegal, not just web pages with javascript.
- nativeit 10mo ago
  I guess it’s fortunate that this quote only includes a portion of the assertion they’re making. What happens when you include the rest?
bandrami 10mo ago
> any type of web pages with javascript being illegal Inshallah