Hacker News Reader

Yes, a lot of software has remote access capability and it is legal when intended. The CFAA doesn’t care about how it works or why. It entirely hinges on whether the access was authorized. Your opinion about whether the software is good or bad is legally irrelevant.

View on HN

Good to know, I guess I'll write an .ssh/id_rsa harvesting worm and chuck it in a pip package tonight with a license that includes a clause requiring surrender of any machine its installed on.

The intent and the totality of what you are doing matters. And worms, by definition, run on computers without authorization.

Reply on news.ycombinator.com