>That's not what he's saying. He's saying that independent of how easy it is to do, it's also something that professional security people do routinely. And he's right. But that's not the basis of the charge against Aurenheimer.
It's certainly part of what he said:
>but it also wasn’t exactly hardcore hacking; IIRC he just changed a URL parameter.
The difficulty of carrying out an action is completely irrelevant to its legality.
It's certainly part of what he said:
>but it also wasn’t exactly hardcore hacking; IIRC he just changed a URL parameter.
The difficulty of carrying out an action is completely irrelevant to its legality.