A federal grand jury indicted a Missouri woman Thursday for her alleged role in perpetrating a hoax on the online social network MySpace against a 13-year-old neighbor who committed suicide.This case involves a terrible tragedy. But the government's legal theory, based entirely on the Computer Fraud and Abuse Act, 18 U.S.C. 1030, is very weak. Legally speaking, the prosecution is a real stretch. In my view, the courts should dismiss the indictment. In this post, I'll explain why.
Megan Meier, 13, hanged herself in her bedroom after being targeted in a MySpace hoax.
Lori Drew of suburban St. Louis is said to have helped create a false-identity MySpace account to contact Megan Meier, who thought she was chatting with a 16-year-old boy named Josh Evans. Josh didn't exist.
Megan hanged herself at home in October 2006 after receiving cruel messages, including one stating the world would be better off without her.
Salvador Hernandez, assistant agent in charge of the Los Angeles FBI office, called the case heart-rending.
"The Internet is a world unto itself. People must know how far they can go before they must stop. They exploited a young girl's weaknesses," Hernandez said. "Whether the defendant could have foreseen the results, she's responsible for her actions."
Drew was charged with one count of conspiracy and three counts of accessing protected computers without authorization to get information used to inflict emotional distress on the girl.
To understand this case, you need to understand the government's theory. The indictment is not charging Drew with harassment. Nor are they charging her with homicide. Rather, the government's theory in this case is that Drew criminally trespassed onto MySpace's server by using MySpace in a way that violated MySpace's Terms of Service (TOS).
Here's the idea. The TOS required Drew to provide accurate registration information, not to harass or harm other people, and not to promote conduct that was abusive. She didn't comply with these terms, the theory goes, so she was criminally trespassing onto MySpace's computer when she was logging into her account. The indictment turns this into a federal felony conspiracy charge by arguing that she did this in concert with others to obtain information and to further tortious conduct — intentional infliction of emotional distress — violating the felony provisions of 18 U.S.C. 1030(a)(2).
But these arguments are a real stretch for three reasons.
Problem One: The first major hurdle is a legal question that I wrote an article on in 2003: Is it a federal crime to violate contractual limitations on use of a computer? The federal statute, 18 U.S.C. 1030, generally prohibits accessing a computer "without authorization" or "exceeding authorized access." But what makes an access "without authorization"? If the computer owner says that you can only access the computer if you are left-handed, or if you agree to be nice, are you committing a crime if you use the computer and are nasty or you are right-handed? If you violate the Terms of Service, are you committing a crime?
In my article, Cybercrime's Scope: Interpreting "Access" and "Authorization" in Computer Misuse Statutes, 78 NYU L. Rev. 1596 (2003), I argue that the answer should be "no." I won't recite the legal arguments here, as you can just read the article itself. (You can imagine the basic idea, though: Since everyone who uses computers violates dozens of different TOS every day, the theory would make everyone who uses computers a felon.) However, I will point out that the MySpace case is to my knowledge the very first federal indictment that has tried to claim that violations of Terms of Service for an Internet account amounts to a crime under Section 1030. In fact, I wrote my NYU article in part because I figured it was only a matter of time before a sympathetic case came along and some aggressive prosecutor would try the argument and see if it flew. It looks like this is the test case.
Problem Two: The second and third legal hurdles to the prosecution are less intellectually interesting but clearer and easier for the defense to make. The first problem is that the crime requires the government to show that Drew intended to violate the Terms of Service. That is, lack of authorization must be intentional — it must have been Drew's conscious object to have violated the TOS. But here there is no evidence that Drew even read the TOS. Most people don't, of course; I would be surprised if 1 person in 100 actually tried reading it. If Drew wasn't aware that she was violating the TOS, she couldn't be exceeding her authorized access intentionally. (Paragraph 11 of the indictment lamely notes that a copy of the TOS was "readily available" to MySpace Users if they went looking for it, clicked the link, and read it. But the statute requires intent, so whether the TOS was "readily available" is irrelevant.)
Problem Three: The third hurdle, and perhaps the easiest way for the defense to win, is that the government's theory requires proof that the goal of the conspiracy was to obtain information. The alleged underlying crime here is 18 U.S.C. 1030(a)(2)(C), which prohibits exceeding authorized access to a computer to get information. Think hacking in to get credit card numbers, to get a copy of a special computer file, or to take data from a database. But based on the facts discussed in the indictment and the news stories, it doesn't seem that Drew had the intent to obtain information from her victim. Her apparent goal was to harass her victim and to cause emotional distress, not to obtain information from her. That may not make it morally or ethically any less objectionable; indeed, perhaps it is more so. But the statute wasn't violated unless Drew was acting to try to obtain information, and it doesn't seem like that was her intent.
UPDATE: Over at Concurring Opinions, Daniel Solove agrees with most of the analysis but comments on this last issue: "I'm not so sure I agree. The news accounts I read about the case indicated that one of Drew's primary motivations for creating the fake profile was to learn information from Megan Meier. She wanted to know information from Megan that pertained to her own daughter, who was a classmate of Megan's. The harassing came later on." I haven't read the news reports closely, so maybe we'll have to wait and see how the facts unfold on the third issue.
If the government prevails — if the court doesn't force them to prove that Drew knew of the ToS and intended to violate them — then there are an awful lot of criminals running around out there. How many web site terms of service have you ever read? How many times have you used an alias, or a false birth date to avoid identity fraud, or a false email to avoid spam? Do you know whether or not that violated the terms of service? I suspect not. And I suspect that tens of thousands, if not hundreds of thousands, of MySpace users have some amount of false information in their registration profiles.
It's important to note that the information Drew obtained through her ToS violation is apparently information available to anyone who registers at MySpace. As you suggest, it's a stunningly broad theory.
Defense attorneys occasionally ask a court to dismiss the indictment on the theory that "the government won't be able to prove [element x]." But there's really no procedural hook for a federal trial court to do so before trial, and most judges (excepting those with a high esteem for their rights and privileges) won't do so.
If they can't cut a deal, the matter will probably come to a head in the discussions of jury instructions and possibly in limine motions -- if not, it will have to wait for a rule 29 motion after the government's case, or for the verdict.
I would not want to be the lawyer trying to persuade the jury to focus on the fine points of law that you are (probably correctly) arguing.
Nit picky is my middle name! I'll amend the post, although unfortunately I'm heading out won't get to it for a few hours.
Re a plea: If I had to guess, I would guess that they charged this using felony conspiracy counts in order to arrange a misdemeanor plea on a straight 1030(a)(2)(c). Dubious theory + aggressive charge = plea to misdemeanor so the dubious theory is never challenged.
iow, somebody does something that we find morally reprehensible and a prosecutor finds some way to twist some vague ridiculous statute to try to turn it into a crime.
is this lawsuit material? sure.
but to prosecute somebody for essentially toying with somebody's emotions is despicable and kind of orwellian.
legislating meanness.
like i said, i don't know enough about (nor do i care) about the nuances of this (apparently incredibly overreaching) piece of federal legislation, to say whether the indictment should stand.
but it's just ridiculous from a layman's perspective.
Well, the article says it's because MySpace (and their server farm) are located in LA. I don't know if it would be wise for the defendant to object though. Given the nasty nature of what she's accused of doing and the amount of publicity, it may be to her benefit to have this tried as far away from St. Louis as possible. Charging her in Californa may just save her laywers the effort of arguing for a change of venue.
A and B obviously don't apply here, so the question would be if what the defendant did falls under C. I see two questions here. Did she obtain information from a "protected computer" and did it involve "interstate or foreign communication". Tricking someone into telling you something seems fairly distinct from computer hacking, but if you use a computer to deceive them about your identity it might be interpreted as obtaining the information from a protected computer.
The interstate or foreign commerce clause question is interesting. Both the defendant and the victim lived in Missouri, so you could argue that there was no interstate communication. However, the MySpace servers are located in California, so every piece of information flowing between the dependent and the victim had to flow across state lines. Does the fact that a communication is routed through another state make it interstate communication? Could I avoid a charge under 18 U.S.C. 1030(a)(2) if I make sure all my traffic stays in the same state when I'm hacking someone's computer?
Problem 2 (intent) is a little unsatisfying. She can never intentionally exceed her authorized access unless she's actually read the Terms of Service? Surely that can't be right.
To use the service at all, don't you have to click that little box that certifies that you've read and agreed to the terms? That certification binds you to the terms in contract. Even if it's a fiction, it's a factual fiction not a legal one. Maybe you did read them and maybe you didn't; we don't know and we don't care that much. You've said you did, and (within reason) you've agreed to be treated as if you did read them.
Why couldn't that be enough? When you say it has to be her "conscious object" to violate the TOS, is that because there's some federal law that uses that phrase? Why isn't it enough that she meant to do X, "knew" (or estopped herself from denying that she knew) that X was a violation of the TOS, and did it anyway?
Seems like someone pointed that out in the comments thread to this post, too... though based on CDU's quotation of the statutory text that kind of information-seeking might not be sufficient to violate the statute.
Don't know what the exact requirements are for that, but would that be equally a stretch?
even somebody using a dsl or something transmits stuff to their isp who at some point internally in their network use some wired connections. Courts have confirmed that as long as it was reasonably foreseeable that a wire would be used you can still be cooked even if you didn't know about the "wire"
perhaps the gov would argue that by using the fake profile- D defrauded the victim from access to the "honest" service of myspace. No Terms of Service required here? right?
bill posner
and i agree with you about going after her criminally a different way. how about state crimes like harassment or forms of manslaughter/homicide? even if your not sure you can prov e it beyond a reasonable doubt-you could probably scare the D into accepting a plea to something smaller...but in the fed system there isn't a lot of "small stuff" to work with in this context. who gave this case to the feds?
As for the matter of tort-yes it would be a good tort case-but sometimes tort defendants are insolvent or unable to pay huge judgments.
ex-fed-since the defense would essentially be saying there is no probable cause even if you agree with the government's facts-because they have failed to allege the elements of the crime they site (because you thin the elements are different from what they think the elements are) isn't that a little different form a dismissal becuase the gov can't prove element X if we went to trial?
I think circumventing technical protection measures (cracking passwords, exploiting an OS vulnerability, etc.) shows intent regardless of whether they've read the terms of service or not. However, if the only thing they're doing is violating the ToS, then I think it's really hard to prove they had the intent to exceed their authorized access.
1. It's not wire fraud (18 USC 1343) because fraud, within that context, means getting something of value from the victim through deception. Hence Borat is not guilty of wire fraud for setting up an encounter with a dupe.
2. I'm not sure which elements of 1030 you think they failed to allege in the indictment. From my review they hit the necessary statutory language. I think Prof. Kerr is talking about the level of scienter they have to prove at trial.
this case is no different than some guy (or girl) meeting some girl at a bar and making up an identity to get he/she into bed.
or any other personal deception that a person engages in. i can't believe people think this woman should be criminally prosecuted.
harassment? all the girl had to do was block the sender. please
I wouldn't think it would matter whether you are bound or not by the TOS. What Lori Drew likely did by clicking on that box is like signing a contract wearing a blindfold - she might still be bound, but she can't intentionally breach the contract without knowing what the terms are.
1. Im not sure about this. section 1341 includes whithin the crime (among other things) a "scheme or artifice to defraud”
section 1346 defines this:
"For the purposes of this chapter, the term “scheme or artifice to defraud” includes a scheme or artifice to deprive another of the intangible right of honest services." 18 USC 1346.
it doesn't necessarily mean you have to benefit from the victim.
furthermore, as i understand it, we are in the ninth circuit, (for some reason the indictment was brought in CA) which has held that "getting something" out of your fraud is not necessary under wire fraud as long as something of value was taken from the victim. Calnay v. U.S. 1 F.2d 926 (9th Cir. (1924).
2. if 'unauthorized access" doesn't mean what the gov thinks it means (violation of the terms of use of myspace)-then they didn't allege unauthorized access becuase they didn't say how the access was unauthorized other than that it was a violation of the TOS. As you know, saying the guy did X isn't probable cause unless you give some somewhat clear specific details.
1. I'm pretty sure that Calnay stands for the position that you don't have to profit for it to be fraud -- that is, that you don't have to be successful or complete the scheme. I don't think it stands for the proposition that a "scheme to defraud" can extend to a scheme that doesn't have something of value as its object.
2. They specifically alleged that it was unauthorized access, which is sufficient for the purposes of indictment. There's no particularity requirement.
What i understand is that if a factual issue for trial presents itself, (the gov is saying it will be able to prove x and the D is saying it wont be able to)-that nobody knows what will be able to be proven at trial-and the federal rules say that once you have the indictment-you go to trial.
This defense is not factual. Its legal. The issue is what "unauthorized access" means. Even if you agree with all the facts of the state, if the statutory interpretation goes the way of the D, there is no evidence of unauthorized access, becuase the only evidence offered would be of something which is legal.
If the TOS violation is "unauthorized acesss" within the meaning of the statue (a matter of law not a matter of fact for the jury) then the indictment should stand as they have produced probable cuase that she violated the TOS.
If however, the TOS violation is not "unauthorized access" as a matter of law, then there is no factual basis that she did any unauthorized access becuase the only facts in the indictment concern the TOS. Even if the D agrees that she violated the TOS, the government has not alleged that the actions they say she took are illegal.
Sure, if the TOS violation was probable cuase that she had commited the crime in some other way-(which they are not ssaying)-then i would agree with you.
But the government's version of events goes: she violated the terms and thats the crime. If thats not a crime-then there is no PC of any crime.
2. Ok i see that-Calnay didn't succeed with his plan but wasted to gain. But still, what basis is there for requiring even intent of personal gain as the intent of the fraud? if you have a fraud which is only intended to screw you over and not to help me thats not fraud? its the same logic as calnay-it doesn't matte that Calnay only made 20 dollars his victims took a big hit. So too she didn't want to get anything of value for herself. But she did want to deprive the victim of something of value (honest use of services-i.e. myspace), and 1346 explicitly calls use of honest services something of value.
Of course, Massachusetts might soon undertake to criminalize that (or some similar) behavior.
1. As to challenging the indictment, you'd have to get the court to read the language about the terms of service as limiting rather than as surplussage. The indictment plainly states that the defendant exceeded authorized access, which satisfies the pleading requirement. The indictment also suggests (without explicitly saying) that the unauthorized access was in the form of access through a false name. It's unclear under the law governing FRCP 12 whether you can use that explanation to limit the in-and-of-itself-sufficient allegation that she exceeded authorized access.
Assuming for the moment that you can, you'd have to establish that as a matter of law a ToS violation cannot constitute an unauthorized access under the statute, looking only at the four corners of the indictment. You can't rely on the argument that maybe in some cases it could be, but not here. I may be misreading prof. Kerr, but I don't understand him to be arguing quite that far.
2. "Theft of honest services", at least in the Ninth Circuit, is limited to public officials and fiduciaries, I think.
3. I think limiting the federal fraud statutes to situations where the object is something of value is a good thing and reasonable. It my seven-year-old sends an email to an acquaintance asking him to be his friend because he has cool Pokemon cards, and in fact his cards suck, but the other kid agrees to be his friend, I don't think that should be federal wire fraud. Similarly, in the example I alluded to earlier, if Sacha Cohen sends somebody an email posing as Borat and asks to get, say, a driving lesson, and his purpose is not to defraud the person of money (he pays him for the lesson) but to engage in buffoonish behavior with the person for the purpose of satire, I don't think it should be wire fraud. I'm in favor of narrow interpretation of federal criminal statutes and narrower use of federal police power.
As far as I'm aware, civil liability for the alleged tortious act has not been proven in any court, by a preponderance of the evidence.
Is the grand jury legally competent to find that a tort has been committed?
joe. i was fearing somebody might come up with some sort of link where some liberalnannystate(tm) had tried to criminalize even "fraudulent dating".
thanks.
again, i have to agree with ex-fed. playing mind games with somebody should not be CRIMINAL FRAUD. example given was borat, but we can all think of a million examples of whether online or not, somebody messes with your head by pretending to be somebody else to irk you, befriend you, or whatever.
that's called, in the immortal words of foreigner: "head games". and it should be legal.
-but then let me take your facts and throw them back at you in terms of challenging the indictment-
fed prosecutor X tells a grand jury that your 7 year old committed wire fraud. They show the grand jury evidence that your son used the internet to tell some kid to be his friend becuase he had good Pokemon cards. the grand jury thinks the prosecutor is crazy-but he reminds them their job is only to get probable cause of the crime-not to judge what should happen to him. they give a true bill saying that your son used a computer to commit fraud. nothing else...no surplusage.
The defense moves to challenge the indictment-saying that as a matter of law-the property/service lost in the fraud must be of objective or reasonable value (and lets say the judge agrees with this)-can he dismiss the indictment? Is all that has been alledged in the indictment is these facts-or do you say that becuase both sides agree what happened just not on the law-that the indictment can be dismissed?
What your really saying is that as long as the grand jury, has been convinced, under the prosecutor's interpretation of not just the facts but of the law, that there is probable cause-even if a judge believes the law is different and that there is no factual dispute and even under the facts contained in the indictment that no crime was committed-he cant dismiss. wow.
Im pretty sure that precise situation is what a rule which states:
"Motions That May Be Made Before Trial. A party may raise by pretrial motion any defense, objection, or request that the court can determine without a trial of the general issue."
Theres nothing in there about sufficiency of the indictment. the rule speaks to issues that aren't for trial (i.e legal issues-not proof of an element-but legal interpretation of what the element needed to be proven is)
i see there is also a way to challenge the sufficiency of the indictment-but that seems to be rule 12(3)-not 12(2)
Now as to what Orin was saying-it seems that Orin was saying , in his first point, "Problem One" above-is indeed that a simple terms of use violation-without something else-is not a crime. And there is nothing else-nothing else is alledged.
But one of the more interesting questions not addressed by Kerr and others here has to do with civil liability under 1030(g). Could the Meiers bring suit, claiming the conduct involved the factor "caused physical injury" under 1030(a)(5)(B)(iii)? Lowering the standard to "preponderance of evidence" might work well...
they probably could get judgments on several common law torts as well-but perhaps the defendant is poor. suing poor people isn't so useful.
Sure, they could sue under common law. But this is a hook into federal court and that's what I'm after.
But generalize it: suppose someone uses his Hotmail account for some illegal purpose under state law (moving trade secrets is an obvious choice), in violation of the TOS. Does he open himself up to a civil suit under the CFAA? or 2701? Are we aware of any cases out there on this point?
If the user has agreed to the TOS, and therefore has agreed to the service provider's remedy for TOS violations, where has any fraud occurred?
The fact that MySpace did not exercise the remedies to which it was entitled was not the fault of the user.
If I intentionally inflict emotional distress on whit by calling him a poopyhead, and Orin doesn't delete my comment or ban me, how have I defrauded Orin?
whit -- I hope you can handle it OK. It was just an example. Honest. ;^)
except you are begging the question by calling it a crime.
"one of those CRIMES that had to be committed". this isn't, or at least shouldn't BE a crime. it's absurd.
but the mccoy'ism prosecutor-mode kicks in with people. a girl is dead. SOMEBODY HAS TO PAY! if it's not metal songs (suicide solution), it's some lady that was mean to my precious little daughter. remember, govt. is never more justified than when it's done "for the children."
if i was on that jury, i'd be MR Jury Nullification in a heartbeat.
civil matter all the way.
oh, and fub. you may find this VERY hard to believe but
1) i have been called worse
2) you'd have to call me a lot worse to inflict emotional distress on me, like maybe calling me "like a lawyer" ... (cymbal crash)
Even if the grand jury might find that a tort was probably committed, despite the absence of any final decree or judgement from a court of competent jurisdiction, can a court in the Central District of California, sitting in a criminal case brought by the United States, find that DREW committed a tort against M.T.M.?
Does the statute give the United States standing to bring this particular tort claim against DREW?
If the United States has standing, is the Central District of California the right place to try this tort claim?
Does the value of the common-law tort claim "exceed twenty dollars"?
What is the standard of proof for the plaintiff United States in this particular tort claim? Can they prove beyond a reasonable doubt that a tort was committed without bringing into evidence a final judgement or decree from a court of competent jurisdiction?
ISTM that I'm asking questions about due process.
Federalizing this incident is troublesome, if IIRC everything happened within the same state. While Drew's actions are abhorrent, is it really a federal case? No state criminal law violated?
Personage is defined in Canada as "Anyone who fraudulently personates any person, living or dead, with intent to gain advantage for himself or another person, with intent to obtain any property or an interest in any property, or with intent to cause disadvantage to the person whom he personates or another person, is guilty of an indictable offence and liable to imprisonment for a term not exceeding ten years or an offence punishable on summary conviction."
Substantively, I agree the conduct was inexcusible. But just because something is bad doesn't make it illegal.
Second, I am deeply disturbed about this case from a federalism standpoint (as mentioned above). This is an incident that happened in a state (Missouri) between two people. Dragging the defendant to California (regardless of the visceral thrill of making her pay something, even if it is just plane fare), seems wrong.
2. Is a never-existent person "living or dead"? My understanding is that Drew is accused of making up an entirely fictitious persona on MySpace to interact with the deceased. I presume that the person implied in that persona never existed and therefore cannot be counted as "any person, living or dead."
And if she is more responsible for this, it would have been wise to employ the "gotcha" tactic - swarm her with investigators and wait for the slip (obstruction, lying to investigators, etc.) I think I read that she destroyed evidence and instructed the other children involved to lie to anyone who asks.
Oh, and anybody want to bet this story turns into an episode of Law &Order?
Badda-bing!
Actually, spoken with a 'tude I wish more lawyers had.
And I hope Megan Meir's estate successfully sues Drew and her scummy pals back to the stone age.
But trying to figure who has less ordinary human moral decency in this case -- Drew, or the US Attorneys who brought the indictment -- is like weighing excrement.
If this indictment stands, every ordinary citizen loses, not just Drew.
In civil-land under the Stored Communications Act, the 11th Circuit has agreed with you.
This is just as ridiculous as shrink-wrap copyrights -- simply be navigating to the site you are subject to the terms of service. They open themselves up to the cyberworld, then say they can limit it -- if they want to limit it, they can have you sign up for membership.
If they win, I intend to set up a site for use only by people with stunning bodies and webcams. Anyone else will get sued.
SUBSCRIBE!!!
"not so sure?"
how about "it's frigging RIDICULOUS" to charge somebody in relation to somebody's suicide because they said some mean WORDS to them.
does anybody have a sense of perspective here? is this a libertarian blog where people are (lord forbid) responsible for their own actions?
cmon. all legal minutiae aside, if you are so frigging unsatable that somebody saying something(s) mean to you results in your suicide - that's just too frigging bad for you.
suicide is sad. i've seen it myself (guy blowing himself away wiht a gun to the head not 5 feet from where i was standing) but people have to be responsible for their own actions. this is sad as hell, but to even consider that this woman should be CRIMINALLY liable for saying some mean words is simply astounding.
sorry for the rant. but geeze
Having said that, if that is indeed the case, then how ridiculous would a defense of selective prosecution be? As already noted by scores of people - almost no one reads the TOS and almost everyone has violated some ToS somewhere. The result in this case seems to drive the prosecution more than anything else and she is being singled out because her violations caused the death of someone else (I use "caused" loosely).
Or perhaps I'm just imagining things.
I'm not entirely opposed to statutory criminal sanctions for similar acts of deception, harassment and intentional infliction, especially of minors -- if the required acts rise to some level of aggravation greater than the existing tort. I think the acts in this case do. But those statutes don't exist.
Bootstrapping a criminal violation by stretching and contorting statutes, as in this case, is certainly dangerous policy for prosecutors and courts, and I think also repugnant to any sense of common human decency. Citizens should at least be actually on notice in advance about what is, and what isn't, a crime. That is my major beef with this indictment.
i totally agree with your intelligent (which is obvious since i agree with it) post :)
my catch-all term for this kind of stuff is "jack mccoy'ism". as much as i love law and order, his sanctimoniousness combined with his desire to twist the law to try to find some way to hold people accountable for being mean often left me rooting for the defendant, even when i knew he "did it" because what he did simply should not have been charged.
i do agree that, and i admit to being exceptionally ignorant as to civil law/torts etc., there could very well be some good civil suit here. mostly because the kid was 13, and i think that is a big part of it. people are supposed to understand that such juveniles are more impressionable and less mature and less responsible for their actions in some respects than adults.
Harassment?
There is a sexual element here, as well as an element of fraud.
Where do things change just because electronic media is involved? This is a case of extended harassment, where the harassment continued long enough to become a form of assault.
I blame the judges who decades ago failed to establish that electronic media is just like paper, only more copiable and more editable, and insisted that new laws were required for this kind of mess.
After looking at other cases charged under this statue, any computer connected to the internet is covered by the statue. The owner of the computer decides who or how that computer can be access and if you access it in volition of ToS you can be charged.
Watch out everybody on Myspace with fake negative G W. Bush sites. News Corp (FOX) can have you prosecuted under this law. There are ~500 Jesus's, Satan's, Devils, and numerous Santa clauses and easter bunnies on myspace. They are all felons
The MySpace TOS does not state specifically where their computer servers are physically located, so in the absence of clear notice, how is the average MySpace user to know that the servers are in Santa Monica, California? (and thus possibly committing inter-state communications fraud, as defined in 1030)
Or am I wrong?
1) Kerr's 'Problem One' is moot as soon as you actually read the MySpace TOS - it specifically states that you are only authorized to use MySpace is you abide by the terms listed. How you missed that, I don't know.
2) Kerr's 'Problem Two' as others have said is pretty ridiculous (you teach law, Kerr? ouch!) If you click "I agree to these terms", then you are acknowledging that you have read them, or are in effect agreeing to abide by them and accept whatever consequences arise from your own ignorance of them. An analogy: most people don't read the entire statute listing their state's Highway Code, yet having been granted a driving licence, they have to abide by the laws prescribed within it when they drive. ("I'm sorry officer, I didn't know" doesn't cut it there so why should it online?)
3) Kerr's 'Problem Three' is moot as the law is about obtaining "information" from an UNauthorized computer and the unauthorized computer in question is the MySpace server, and the "information" is the typed communication that passed through it between Megan's computer and Drew's(/and her co-conspirators). Without question, the objective of creating the Josh Evans persona was to facilitate communication with Megan, communication that they would not have been able to partake-in had they used an 'authorized' account using real names. (Remember, Drew's daughter had had a falling-out with Megan).
What is NOT substantiated in the indictment is the allegation that the fictitious Josh Evans account was created with INTENT to "inflict emotional distress". I believe this is key if the DA is seeking the maximum penalty afforded by the law.
4) The best part of the whole situation: if Drew is found guilty of "unauthorized" access of MySpace's servers, then Megan Meiers &her mother should also be charged (ok, just her mother, Megan's dead!) -- MySpace TOS clearly states that users must be age 14 or older, and no account will be issued if the birthdate provided does not calculate to that age, meaning that a fictitious age had in actuality been submitted. So Megan's mother had conspired to provide false information to MySpace, and in doing so not only violated their TOS, but violated 1030-a(2), 371(conspiracy), and I suppose even 2(aiding &abetting).
Whether or not the act was committed with a computer seems to me to have little bearing. But maybe I'm wrong: if it had been done with letters, texts or phone calls instead of a computer, then would there have been no crime?
iow, somebody does something that we find morally reprehensible and a prosecutor finds some way to twist some vague ridiculous statute to try to turn it into a crime.
is this lawsuit material? sure.
but to prosecute somebody for essentially toying with somebody's emotions is despicable and kind of orwellian.
legislating meanness.
like i said, i don't know enough about (nor do i care) about the nuances of this (apparently incredibly overreaching) piece of federal legislation, to say whether the indictment should stand.
but it's just ridiculous from a layman's perspective." ---->
You must be one of those people who is freaking out that YOU might be indicted for the "Carrie" mother-burns-up attack on me, together with the entire "AnnTM" and "Towanda" and "Barry" attack on myself, a disabled autistic, and my equine disability service horse that has led to his irreversible catastrophine founder "sinker" injury induced by aflatoxin contaminated horse feed.
Those who attack others by exploiting information gathering, defamatory statements about the person's disability, no different than what was done to that poor 13 year old, really SHOULD be indicted under this type of theory.
You just don't like the fact what you consider "toying" with someone is thought by others as an indictable crime, and to the charges should be added: hate crime predicated on an aversion to autism.
Of course, Massachusetts might soon undertake to criminalize that (or some similar) behavior."
JH, I think this misses the point: The case IS different than meeting some girl in a bar to get her into bed. A person trying to so such would not try to exploit the girl's mother's self-immolation suicide or participate in an attack on the girl's equine disability service horse prescribed as her medicine in order to get her into bed. When the objective of the conspiracy is really to cause the girl such pain and suffering to trigger her to commit suicide, it would seem THAT is just a little different scenario than 'meeting a girl in a bar to het her into bed.'
Moreover, regarding the 'why not just use the USA PATRIOT Act' suggestion, while I cannot say for the Myspace suicide, I do know that if the objective of a conspiracy to make unauthorized use of computers contrary to the TOS is for the objective of attacking a disabled person to cause an attack on her equine disability service hrose prescribed as medicine to trigger her to commit suicide, THAT is not authorized under the USA PATROT Act ... if you care to actually read the statute.
In sum, there is no legitimate law enforcement interest in such an attack.
Those who make such blog attacks on innocent disabled victims deserve to be prosecuted ... even if the attacker is a Federal Judge, a law clerk to a Federal Judge, or a chief at DOJ. Such attacks are civil rights and liberties violations, as well as , very likely, ultra vires.
So I googled this phrase, and found only posts written by Yogi Bear aka Gulliver's Travels aka Mary Katherine Day-Petrano.
...what therapeutic powers does a horse have to offer a person with autism?
You may begin to understand the subjecthere.
You may also want to read about the NARHA, which is the parent organization of numerous of regional and local horse facilities that offer therapuetic horseback riding here
Once a person has spent years of being taught riding for therapuetic reasons, most such persons acquire their own disability service horse uniquely trained to suit their disabilitiesso they ca ride on a daily basis, and even compete beyond the Special Olympics level.
Maybe many people who are unfamiliar with people with autism and other developmental disabilities are also unfamiliar with the use of disability service horses to help people with these types of disabilities, but people with such disabilities an their families are well-acquainted with this issue.
The 1030(2)(b)(ii) charge deals with Lori Drew's commission of a crime in furtherance of the "tortious act" of "intentionally inflicting emotional distress upon the victim". To restate that:Does an indictment not have to state the basis upon which the allegations are based? What I mean by this is that I see nothing that indicates why the conclusion is that the goal from the get-go was to harass Megan.
Or do they not have to? In that case, is requesting a bill of particulars appropriate for something like this.. or not at all?
As it happens, I remember reading this article way back when that quoted Megan's mother Tina, alleging the Josh Evans account was created by Drew because "She wanted to get Megan to feel like she was liked by a boy and let everyone know this was a false MySpace and have everyone laugh at her".
It is thus very interesting to note that later in that same article, it says: "Tina says her daughter died thinking Josh was real.."....
--- Oh, and Mary K D-P, the Section 223 item you referred to does NOT apply... see the Definitions section at the bottom of that section, it does not apply to interactive computer services.
However.... I do see something that would put away the person who sent 1 particular message away for 2 years... chances are though they know it was not Lori Drew that sent the message........
Harassment, hate crime, endangerment, possibly even libel as she knew she was telling lies and she had intent to harm (even if the intent was merely to cause the child to disassociate from myspace).
Getting hung up on the fact that a computer was involved, thus thinking computer specific law must be invoked is really dumb.
The prosecutors should review the whole thing again, but every time computer mediated communication plays a part, replace it with a similar, older tech equivalent; phone instead of IM, mail instead of email, paper thumbtacked to cork instead of an online forum or bulletin board post, etc etc etc.
Drew repeated this motive, though she tempered in to mere permission for Ashley Grills to create the account for this purpose, through formal statements of her (then) attorney, Joe Briscoe.
—————-
I have a few questions about the indictment. Is this really a case of first impression? I have a recollection of the California grand jury investigation being inspired, in part, by a successful prosecution in an unrelated case, based on similar facts: eg, the unauthorized use of a computer system (to commit illegal acts). My memory is too vague to recall whether fraudulent identity, per se, was an issue, but that false information was used to get information otherwise unavailable.
Second, what basis would the court have for refusing to look upon use of a fake ID to get access to information, vs a stolen or cracked password, as a violation of statute here?
Seth Finkelstein sent me your way.
re: " You can imagine the basic idea, though: Since everyone who uses computers violates dozens of different TOS every day, the theory would make everyone who uses computers a felon."
This doesn't make sense to me because 18 U.S.C. 1030(a)(2)(C) is not a stand-alone punishable offense.
Delia
P.S. there is more detail on this in my discussion with Dan Gillmor and Seth Finkelstein on Dan Gillmor's blog D.