Weev, Part 2

December 10, 2024·29 min·2 clips

Why did hacker Weev claim stealing 114,000 iPad email addresses was a public service, not a crime?

November 20, 2012, brought a guilty verdict. Andrew Orenheimer, better known as Weave, had been charged after he and Daniel Spittler of Goatsea Security obtained email addresses tied to some 114,000 iPad users. He did not buy the break-in story. In his version, AT&T left public resources open, and he opened the pages, found the mess, and criticized it. The episode keeps returning to one uncomfortable question: if data is exposed, when does looking at it become unauthorized access? EFF gives the legal pushback. Its argument is that a website owner cannot leave data technically open, then decide later that some visitors were criminals because it disliked their purpose. The convenience-store analogy is plain on purpose. A shirtless customer is denied service, puts on a shirt, comes back, and enters without committing trespass. That example matters because it makes user-agent switching look less like a sinister trick and more like meeting the visible condition the system chose. The impersonation claim gets shakier there. If the only gate is a header value, the law may be doing more work than the technology did. Orenheimer still comes off as combative and controversial, but the episode does not let that settle the legal question. By the end, the concern is bigger than one provocateur: vague rules can stretch until ordinary behavior starts looking prosecutable, and institutions can turn their own public failure into punishment.

As heard by us

A sharp cybersecurity legal story about AT&T's exposed iPad user data, researcher liability, and the reach of computer crime law.

Malicious Life turns Andrew Orenheimer's 2012 AT&T iPad case into a tight argument about what counts as unauthorized access. The facts are stark enough: email addresses tied to iPad users were exposed through AT&T's setup, with no login wall in the way, and prosecutors still…

Read the full review in PlayNext →

Why you'd press play

The conviction is in, the EFF has filed its brief, and the convenience-store analogy will stick with you.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Malicious Life