When Security Exploits Have Exploits >>
<< Ex-Girlfriends Pull The Mask On Phony U.S...
 tdicon 


Legal Issues

by Mike Masnick

Thu, Jun 1st 2006 3:21pm





Believe It Or Not, Password Protected Websites Have A Right To Privacy

from the so-says-the-law dept

Last year we wrote about a legal case that had the right ruling for the wrong reason. It involved a guy who had an anti-DirecTV website. On the site, he included a "terms of service" at the top of the page, saying that no one from DirecTV was allowed on the site. Someone from DirecTV visited the site, and so the guy sued. This is obviously a ridiculous lawsuit, and the lower court dismissed it pretty quickly. Unfortunately, the way they dismissed it suggested that password protected websites had no right to privacy -- since they claimed that a website did not qualify as "electronic storage," and therefore was not protected under the "Stored Communications Act." That has worrisome implications, so the EFF joined with DirecTV to appeal that interpretation. The Appeals Court has now upheld the dismissal, but is using the EFF's reasoning instead of the original problematic reasoning. Basically, this recognizes that a website is electronic storage, but unless the site is configured to block out the public (such as with a password), then it isn't a violation if someone "unwanted" visits the site. As the court stated: "If by simply clicking a hypertext link, after ignoring an express warning, on an otherwise publicly accessible webpage, one is liable under the SCA, then the floodgates of litigation would open and the merely curious would be prosecuted."

19 Comments | Leave a Comment..


If you liked this post, you may also be interested in...
 

Reader Comments (rss)

(Flattened / Threaded)

  1.  
    identicon
    hmmm, Jun 1st, 2006 @ 4:24pm

    does this mean that someone can set up a private tracker site for torrents, state that anyone from the IFPA, MPA, RIAA, and anyone not wanting to download for the pure enjoyment of free entertainment is NOT ALLOWED

    then when they try to sue or take legal action, you sue them for using your site????

    hmmmmmmmmmmm

    [ reply to this | link to this | view in thread ]

  2.  

    Re:

    identicon
    Anonymous Coward, Jun 1st, 2006 @ 4:34pm

    i wonder if that would work..... try it.

    [ reply to this | link to this | view in thread ]

  3.  
    identicon
    reader, Jun 1st, 2006 @ 4:37pm

    only if the torrent site is pw protected

    [ reply to this | link to this | view in thread ]

  4.  

    Re:

    identicon
    Anonymous Coward, Jun 1st, 2006 @ 4:42pm

    how hard is it to password-protect a site?
    not hard at all.

    i have no idea about any of the rest of it..(setting up trackers and shit)

    [ reply to this | link to this | view in thread ]

  5.  
    identicon
    nobody, Jun 1st, 2006 @ 4:53pm

    Maybe a better way would be to set up the site, password-protect it, and then state that NOBODY is allowed to use it. Then just sue the ones who piss you off, I.E., the mpaa.

    [ reply to this | link to this | view in thread ]

  6.  

    Re: a better way

    identicon
    Chris, Jun 1st, 2006 @ 5:00pm

    Unfortunately the precedent of not suing people who don't piss you off would undermine the suing of people who do piss you off. A lot of bands have to crack down on fans using their music (like in student films or on websites) because if they don't they can't get settlements when Nike or T-Mobile start to use their work.

    [ reply to this | link to this | view in thread ]

  7.  
    identicon
    PopeRatzo, Jun 1st, 2006 @ 5:29pm

    I like to take the opportunity of this type of discussion to say that I wouldn't mind a bit if the entire entertainment/industrial complex collapsed completely.

    I have no doubt that talented people will still find an audience and a way to make it pay.

    [ reply to this | link to this | view in thread ]

  8.  

    Re:

    identicon
    tard, Jun 1st, 2006 @ 5:47pm

    Yeah its callled concerts and tons of bands get rich on doing something called touring unfortunatly stupid people love music with which the "artists" lack talent and/or dont care about thier fans enough to tour.

    [ reply to this | link to this | view in thread ]

  9.  

    Re: Re:

    identicon
    Anonymous Coward, Jun 1st, 2006 @ 6:01pm

    a lot of the bands i like only tour in europe, and im only able to buy their cd's online.

    dragonforce, who only toured over here after they signed with roadrunner

    [ reply to this | link to this | view in thread ]

  10.  

    anyone know...

    identicon
    ehrichweiss, Jun 1st, 2006 @ 7:03pm

    how the site was setup? it doesn't make it very clear if the site had password protection after the TOS or was a simple hyperlink. I'm guessing hyperlink but only because if not then he'd still be suing, one should hope anyway.

    [ reply to this | link to this | view in thread ]

  11.  

    Re: Re: Re:

    identicon
    Anonymous Coward, Jun 1st, 2006 @ 7:23pm

    dragonforce rocks

    [ reply to this | link to this | view in thread ]

  12.  

    Re: anyone know...

    identicon
    Tim Arview, Jun 1st, 2006 @ 9:04pm

    > I'm guessing hyperlink but only because if not then he'd still be suing, one should hope anyway.

    Exactly. The original ruling said websites weren't covered under the SCA, but did not specify anything about password protection. The re-interpretation says the ruling stands but only because his site wasn't password protected.

    Therefore, logically, his site must not have had password protection at the time. I'm sure he's fixed it now.

    Really, though, if you *give* someone a password, is it ethical to sue them for using it?

    My guess is the new ruling is intended to draw a similarity between home invasion and unauthorized website viewing. That makes sense, but if I give someone a key to my house, can I sue him for going inside? Obviously, hacking is one way to gain unauthorized access, but that's a given for litigation.

    To continue with the analogy, the law says that landlords can't go in tenants' homes without their permission, even though the landlord has a key (not to mention the house itself *belongs* to the landlord). But it doesn't really say anything about - for example - your next door neighbor.

    Sure, they've gotten a little bit of clarification, but there's still a lot of gray left.

    [ reply to this | link to this | view in thread ]

  13.  

    auhhhh

    identicon
    cactus, Jun 1st, 2006 @ 11:18pm

    your reading this means you agree to my terms of service. If you do not agree with these term please press the "any key" to continue living with your foot up your aurse. Not to mention all the web crawlers that index sites on search engines. So is this person going to sue google for crawling and indexing that site? If I live in the bad part of town(my website) Im going to put a door on my house with a key(login) or even a sign that says "go any further and I'll shoot or go crying that the big bad dish man is looking at me"

    [ reply to this | link to this | view in thread ]

  14.  
    identicon
    Clair Ching, Jun 2nd, 2006 @ 12:32am

    It is times like these that I have to agree with my friend's sentiments: If you don't want people to find out what something, don't put it on the internet. This is just getting trickier and trickier to sort out each day.

    [ reply to this | link to this | view in thread ]

  15.  

    Re: Re: a better way

    identicon
    mkam, Jun 2nd, 2006 @ 4:09am

    My BS meter is going off.
    I believe that you can selectivly sue. Do you have any references to any of these bands or to the fact that you can't sue Nike because you decided not to sue 'harry ballsack' college productions?

    Just wondering. Not sueing the little guy doesn't put your music in the 'public' domain where it can be used commercially or not. I'm not a lawyer but this seems ridiculous.

    [ reply to this | link to this | view in thread ]

  16.  

    Re: Re: Re: a better way

    identicon
    Scott, Jun 2nd, 2006 @ 6:01am

    Actually this makes sense. If you try to sue T-Mobile for using your work, they are going to say "Here are 20 other instances where you did not care." Now the key is commercial gain, a judge may overlook that fact if none of the sites used it to make money or promote in a manner that resulted in financial gain.

    You can set precedent that can be used against you in court, I just don't know how far it goes.

    [ reply to this | link to this | view in thread ]

  17.  

    Re: Re: Re: Re: a better way

    identicon
    Anonymous Coward, Jun 2nd, 2006 @ 6:30am

    All you have to do is require that people ask permission, then if college people and fans use your music, just say that they had permission. But if Big Faceless Co. uses your music, BLAM sue them for not obtaining permission. Simple.

    [ reply to this | link to this | view in thread ]

  18.  

    EULA

    identicon
    Truthiness, Jun 2nd, 2006 @ 11:58am

    Um, although I'm a big DirecTV fan. I got to side with the anti-DirecTv guy. He bascially had a EULA for using his site and it was violated. Either rule that all EULA are invalid and unenforciable or deal with this guy's EULA. Just because he's a person and not a company doesn't mean he has no rights.

    [ reply to this | link to this | view in thread ]

  19.  

    Re: EULA

    identicon
    |, Jun 4th, 2006 @ 6:56pm

    [ reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>


When Security Exploits Have Exploits >>
<< Ex-Girlfriends Pull The Mask On Phony U.S...
 tdicon 

A word from our Sponsors...
Follow Techdirt
Flattr rss rss

Powered by Postrank

From the Techdirt Archive...
A word from our Sponsors...

Close

Email This