<story><title>Jail Looms for Man Who Revealed AT&amp;T Leaked iPad User E-Mails</title><url>http://www.technologyreview.com/view/507661/jail-looms-for-man-who-revealed-att-leaked-ipad-user-e-mails/</url></story><parent_chain></parent_chain><comment><author>sneak</author><text>Hi there - I&apos;m the one who put up the $50k to bail weev out of jail.[1] (Otherwise he would have had to sit in Essex County Jail during these ~2 years since this started.)&lt;p&gt;There were some others in line to assist (I live in Europe), but they all feared various forms of retribution/harassment from the FBI/DoJ, so it fell to me (someone with comparatively little to lose, stateside).  This only serves to underscore the truly chilling effects of these sorts of governmental abuses of power.&lt;p&gt;I also host his website, &lt;a href=&quot;http://freeweev.info&quot; rel=&quot;nofollow&quot;&gt;http://freeweev.info&lt;/a&gt;, where you can make donations to his case via both Paypal and Bitcoin. (He has various restrictions placed on his use of technology while out on bail.)&lt;p&gt;Please feel free to contact me directly if you have questions related to his case.  Contact info can be found in my profile.&lt;p&gt;5539 AD00 DE4C 42F3 AFE1 1575 0524 43F4 DF2A 55C2&lt;p&gt;[1] &lt;a href=&quot;https://twitter.com/rabite/status/270668883172671489&quot; rel=&quot;nofollow&quot;&gt;https://twitter.com/rabite/status/270668883172671489&lt;/a&gt;</text></comment>
<story><title>Jail Looms for Man Who Revealed AT&amp;T Leaked iPad User E-Mails</title><url>http://www.technologyreview.com/view/507661/jail-looms-for-man-who-revealed-att-leaked-ipad-user-e-mails/</url></story><parent_chain></parent_chain><comment><author>driverdan</author><text>From my understanding all you had to do was pass the ICC-ID to a script on AT&amp;#38;T&apos;s servers to get back the user data. I can see the court interpreting the ICC-ID as a form of access control since you&apos;d have to guess them similarly to passwords.&lt;p&gt;What isn&apos;t quite clear to me is what they did with this data. It seems they reported the hole to AT&amp;#38;T who then fixed it. That&apos;s good. It also seems they passed the data off to reporters, which may be bad for their case. It seems like they acted, at least mostly, responsibly.&lt;p&gt;Assuming the data was never released to the public I don&apos;t think they should be prosecuting Auernheimer. That said, it does seem like they have a case based on the wording of the law.&lt;p&gt;It&apos;s a very real possibility that he&apos;s facing jail time, especially when you consider the volume of data. He&apos;s charged with breaking 18 USC § 1028A (aggravated ID theft laws) which carries a mandatory minimum of 2 years. Federal judges have &lt;i&gt;some&lt;/i&gt; control over this but generally stick with sentencing guidelines. He could fight it and win, get them to reduce the charges, or do some serious work for the gov and hope the judge goes easy on him.&lt;p&gt;&lt;i&gt;Note: I was convicted of violating 18 USC § 1028A (among other laws) so I have personal experience with this law, sentencing guidelines, and judge discretion but IANAL.&lt;/i&gt;</text></comment>