Computer Fraud Laws Used to Prosecute Leaking Air Crash Footage to Cnn
Key topics
The story discusses the prosecution of an individual who leaked air crash footage to CNN under the Computer Fraud and Abuse Act (CFAA), sparking debate about the law's application and the ethics of leaking sensitive information.
Snapshot generated from the HN discussion
Discussion Activity
Very active discussionFirst comment
2h
Peak period
58
0-12h
Avg / period
12.6
Based on 88 loaded comments
Key moments
- 01Story posted
Aug 22, 2025 at 8:04 PM EDT
5 months ago
Step 01 - 02First comment
Aug 22, 2025 at 9:52 PM EDT
2h after posting
Step 02 - 03Peak activity
58 comments in 0-12h
Hottest window of the conversation
Step 03 - 04Latest activity
Aug 29, 2025 at 4:31 AM EDT
4 months ago
Step 04
Generating AI Summary...
Analyzing up to 500 comments to identify key contributors and discussion patterns
Want the full context?
Jump to the original sources
Read the primary article or dive into the live Hacker News thread when you're ready.
Stealing security camera footage and giving (or possibly selling) it is a problem. This article tries to make a case that the law applied wasn’t correct on somewhat pedantic terms, but I don’t know enough about the law to know if they have a point or not.
I do know, however, that if you take private data from your employer and leak it (or sell it) you’re not going to be on the right side of the law. I have a hard time buying this article’s point that it was just “violating company policy”
if you wrong your employer, for example by failing to do your job well, you are not a criminal to be prosecuted by the state. you may well deserve to lose that job though.
here, wronging your employer is considered a criminal act.
This is going out of one’s way to abuse the employer’s trust. Moreover, it’s stealing their stuff. If I take cash out of a till, my employer should have the option of pressing charges.
Where I agree with you is that this isn’t computer fraud and abuse. It’s closer to theft. The law used to prosecute should be more banal.
Mr. Mbengue plead no contest to a trespass charge. He was represented by an attorney with some prosecutorial experience so I think we can assume he received qualified legal advice based upon the facts of the matter. Under terms of his no contest plea, if he stays out of trouble for a year he can have his record expunged.
It sure looks like a plea bargain, in which case we’ll likely never know the actual charges the prosecution was prepared to proceed with. But there’s a clue in the article - when the report was provided to the Intercept, the locations of the security cameras were redacted. When CNN aired the clip, they apparently aired information that identified where that camera was located.
We’ll most likely never know the original charge the prosecution was prepared to proceed with, but the US takes airport security very seriously (as every country should). If taking a no contest on a trespass was considered an out, I wonder if the other charge started with a vowel like ‘e’.
The part that is unclear is that this is a Black man named Mohamed who exfiltrated footage that could be used to plan an attack against an airplane. I trust you can draw that out on your own.
Identity theft, IP theft, theft of private digital assets (e.g. photos, writings, music)
For the digital assets, I mentally bucket copyright infringement and theft differently. For instance, if I copy someone's photography and sell it, that's copyright infringement (not theft). However, if I hacked into someones Google photos and sold the contents, I'd consider that theft (since there was no intent for the material to be available)
Granted, it's fair to disagree here, so I'm not adamantly against the definition that requires removing access or anything.
... Lots of murder doesn't have a victim...
.... Lots of arson doesn't involve a fire...
... Lots of trespass involves not taking a single step from your work desk ..
... War is peace, peace is war...
Theft of private data deprives the owner of privacy. Theft of corporate secrets deprives the company of competitive advantage (and if not prosecuted, economy at large of incentives to innovate). IP theft deprives IP holder of ownership claim (and if not prosecuted, arts at large of incentives to create). Identity theft deprives the identity holder of whatever access to their identity provided to them. This can be continued infinitely.
These scenarios are not the same, and using “theft” for all of them is not precise. However, it is 2025 and in developed countries this sort of crime happens more often than basic theft of physical property, and the detriment from it is often much, much more severe than from basic theft of physical property. (I am sure I don’t need to explain how depriving IP owner of ownership claim can cost the original creator much more than depriving them of some single physical asset, both literally financially and in terms of psychological damage.) It’s therefore important to have a short, mainstream, easy to understand and non-legalese term for these scenarios.
Without any suitable mainstream term the word “theft” is a good enough intuitive approximation—if anything, it’s a bit too mild of a term.
The word has become overloaded in recent decades to mean other things as well, but for over a thousand years theft has mean taking something from someone permanently
> for over a thousand years theft has mean taking something from someone permanently
Nothing in your comment is in contradiction to mine, or suggests that the word has been “overloaded”. That’s what theft is. Intellectual property is property, trade secrets are property.
You denied that deprivation was ever part of the term
Your statement was
> There is nothing in the word “theft” that implies depriving someone of physical property.
Where it’s literally there in dozens of definitions across the English language.
“Intellectual property” is a new legal construct, at most 500 years old, compared with physical ownership which dates back millennia. The term itself is a mere 200 years old, but mainly ignored in the US until just a few decades ago.
> There is nothing in the word “theft” that implies depriving someone of physical property.
It is always depriving of something. Just not always of physical something. The rest of my comment goes on about depriving of non-physical things.
Of course there is. It's origin is the crime of taking of tangible property owned by someone else without consent. It did not apply to intangible property because it predates any concept of legally protected intellectual property that can be duplicated without loss.
Now, there was also the metaphorical use of theft for non-criminal / non-tangible things but poetic use of language shouldn't be confused with primary meanings. For example, "plagiarism" comes from the Latin for "kidnapping" coined playfully by a comic. It was never a crime or ever resembled actual kidnapping. If you call your poem "my baby" because of how precious it is to you, it doesn't become one. Badly editing your poem is not murder either yet you might complain in such dramatic terms.
You might want to argue something about metaphors and secondary meanings but we shouldn't consider the crime of kidnapping to mean reciting other's verses any more than a summer's day should mean temperate people. If we start taking metaphorical uses literally then you also have to start claiming silly things like most kidnapping being legal.
Only in later industrial society did the metaphor become less metaphorical in written law for criminal acts that emerged post-printing-press that were being called fraud, deception, infringement and piracy.
> deprives the owner of privacy
It's pretty metaphorical to describe such things as property that can be stolen.
With this latitude you can frame every injury as theft e.g. stabbing is the theft of good health, murder is theft of life, perjury is theft of a fair trial etc. You might choose to use such language because it's how we roll, but we also know that, as offences, they are not theft.
When an item cannot be traded or restored to the owner, is it property that can be owned and stolen or are concepts of injury, damage and destruction more legitimate?
When it comes to intellectual property, it's closer to contract law where citizens are compelled to abide by contracts the state issues and enforces. The movement of intangible theft from metaphor into law for breaching such a contract was popularised by the beneficiaries to rhetorically inflate an illusion of loss and justify severe sanctions for acts not considered unlawful for most of human history.
Stealing is a pretty wide term meaning deprivation of a good, asset, property, service, etc. If it means deprivation only of physical goods at some point in time, sure; this is 2025 outside now. Theft of physical goods is so first millenium.
Then I'm sure your have a great explanation as to why they were charged with trespass and not theft.
Literally said I think they’re charging this wrong.
A prison officer has a sexual relationship with a prisoner, should they simply be fired or also have a jury heard criminal court process then a record?
.. Not that it should be relevant, but now factor in the prison officer is female, newly qualified and the training college wrote to the prison to warn that the prison officer is not suitable to be a prison officer because they are not robust enough. The prisoner is also highly manipulative and has a documented history of romance with vulnerable females.
But this is the point I am making, if I have a relationship with someone at work, particularly when one person is subordinate or position of authority, then we'd simply be fired... but a prison officer will face a criminal prosecution of Misconduct in Public Office, and possibly face prison time themselves. Seems somewhat unfair for a low paying job.
“A. It is unlawful for any person, with malicious intent, or through intentionally deceptive means and without authority, to:”
And Mr. Mbengue plead no contest to this charge, so he did not admit guilt but agreed to be punished as if he was guilty. He had an attorney with prosecutorial experience retained for his criminal proceeding so we can assume he entered that plea upon receiving qualified legal advice. Under terms of his plea, if he keeps his nose clean for a year, he can apply to have the charge expunged from his record.
So, this looks like a plea bargain. But since he plead no contest, the prosecution doesn’t have to prove anything.
If I were to copy the files on my work device and distribute them, I would be in violation of NDAs which could be pursued as civil offenses. If I didn’t have those NDAs, my employer could try and pursue something in court, along with firing me, but it wouldn’t be a straightforward suit.
None of these are (or at least, should be) criminal situations.
If the harm is that the company couldn't sell the footage itself, the remedy should be giving the company the money from the sale.
Copyright, for example, is what’s known as “intellectual property.” Its rights protect intangible things, namely, artistic expressions.
However, is there any argument for security camera footage like this instance to be considered a trade secret? Isn't that the only type of intellectual property it might be? It seems like if the business wasn't planning to derive economic value from the sale of the security camera footage (which seems like a generally safe assumption) it would fail to acquire trade secret protections.
The elements of trade secret misappropriation are: 1/the existence of a trade secret, 2/ acquisition of that secret through improper means, and 3/ use or disclosure of the trade secret without consent.
I’m honestly uncertain as to whether security camera footage of an airport’s traffic area fits the definition of a trade secret. For example, 18 USC 1831 defines a trade secret as “all forms and types of financial, business, scientific, technical, economic, or engineering information, including patterns, plans, compilations, program devices, formulas, designs, prototypes, methods, techniques, processes, procedures, programs, or codes, whether tangible or intangible, and whether or how stored, compiled, or memorialized physically, electronically, graphically, photographically, or in writing if the owner thereof has taken reasonable measures to keep such information secret; and the information derives independent economic value, actual or potential, from not being generally known to, and not being readily ascertainable through proper means by the public.”
Given that anyone in the immediate vicinity could record the incident - for example, anyone who happens to be in a nearby aircraft - it sounds absurd that to try to classify this information as a secret. These aren’t recordings of the airport’s or FAA’s own activities, and neither the airport nor the FAA derives any business value from any footage they might possess related to the incident. Both of these are public entities anyway.
I'm sure it would be a feat of legal imagination to construct such an argument. It would probably be an interesting, if not also incredibly frustrating, read.
Again, take these laws seriously and don’t do this.
I believe you and heed your warning. I think it's good to understand these things too though.
Armed with those details, a sufficiently motivated person with an easy to obtain skill set could avoid a camera.
With airports, leaking a location for a major component of active perimeter and taxiway monitoring is a serious issue. A month before the crash, someone got into the wheel well of a plane at O’Hare in Chicago so taxiway security is not a solved problem. Leaking camera locations and bearings is dangerous.
if you break into your boss's house and copy his latest recordings (your boss is Stevie Wonder) you are not simply guilty of violating his copyrights.
"computer fraud and abuse act", or who knows how many other laws, are focused on various aspects of "you know you are sneaking about", or even if you don't, tuff noogies.
Please don't fulminate. Please don't sneer, including at the rest of the community.
Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith.
Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something.
https://news.ycombinator.com/newsguidelines.html
But calling using your cell phone to video record a security monitor "computer fraud" and "trespass" is clearly ridiculous.
The CFAA applies!
It’s like postal or wire fraud. You’re going to do it somehow in just about any possible crime. They’ll get you.
It wasn’t/shouldn’t have been a crime? They’ll get you anyway, if they want.
YouTube has become much worse about censorship. Pepe's Towing, LA's main towing company for major truck accidents, complains that YouTube took down some of their videos. Their videos are simply detailed coverage of the complex but effective process by which large vehicles that had accidents are lifted, rotated upright, placed on their wheels or on a large dolly as necessary, and towed away. Their people wear body cams, like cops, their cranes have cameras, and sometimes they use a DJI drone. (They bring out the drone when someone drives off an embankment and they need to plan a difficult lift.) The main purpose of all the video is to settle arguments with insurance companies over the cost of recovery. But they started a YouTube channel for PR purposes.
Almost all this video is taken on public property on LA county roads and freeways, with the cooperation of the cops, CALTRANS, local fire departments, and other organizations that clean up other people's messes. These are very public activities, with traffic streaming by and sometimes news helicopters hovering overhead. Totally First Amendment protected. Not a violation of YouTube's stated policies.
So what's the YouTube censorship about? Preventing corporate embarrassment. Their older videos have clear pictures of truck doors with ownership info. Container markings. License plates. Pictures of damaged goods. Now. out of fear of being cancelled by YouTube, they're blurring everything identifiable. Recently someone rolled over a semitrailer full of melons, and they blurred out not just the trucking company info, but the labels on the melons. Which the people from Pepe's say is silly, but they don't want to fight with YouTube.
That said, I hate to break it to you, but there is no real question of 'when', or even 'if'. The general public simply does not care, no matter how much abuse they are subjected to by mainstream platform operators.
There will always be a minority who care enough to embrace decentralization, open source, good e2ee, but they are the exception to the vast majority, at least inside the US, who simply do not care enough to change their behavior.
What percentage of Americans do you think would voluntarily, permanently relinquish their own fourth amendment rights for $5000? Scary thought experiment when you recall studies that have found only two thirds of Americans can name all three branches of government, or that fewer than one in four can name any right secured by the first amendment other than freedom of speech.
https://studyfinds.org/constitution-americans-rights/
Mere decades ago, not knowing this kinda stuff would get you failed in grade-school Civics class, and again in junior high, and yet again in high-school (at least where I grew up, here in the "Great NorthWest" Rocky Mountains area USA).
Used to be that knowing the basics about how your government worked and what your rights and responsibilities are as a citizen was considered "required knowledge" (right alongside basic history, math, reading, etc) to help prepare you for "life in the real world".
People have always crammed for the tests, then promptly forgotten it.
Those who forget history are doomed to repeat it's mistakes. :shrug:
The good thing is that Telegram is not American so you don't get this prude censorship BS that you get on American apps (show half a nipple and get banned). Especially in the LGBT groups this can be a problem but also in the makerspace one (one of our members really loves making certain toys lol). Of course actual porn is not ok but that's fine, we don't use it for that.
I also like that their premium subscription is super affordable, only 2€ per month (it's cheaper if you don't pay through the Apple/Google ripoff stores) and it offers a lot of cool and useful features like automatic translation and transcription (which actually works unlike WhatsApp's)
I'm really quite happy with it and on top of everything bots are a fully supported first class citizen there so you don't have to screw around with hacky code like with WhatsApp. I have several bots for myself. So if there's a feature I want that it doesn't have I can simply add it!
This is about a government created footage from a surveillance camera. Copyright, or any other notion of imaginary property, most certainly does not apply. There are no financial damages. The video is not classified. It's essentially a public record, and FOIA likely does apply (as noted by one tiny comment). At best this is an internal policy violation that might possibly result in a termination for cause (although government employees tend to have more protections).
And yet people are still falling over themselves to reason that going against the desires of your employer must of course be illegal somehow. Not just written up per employer's policies, not just fired, not a civil suit if you've caused actual damage - but an escalation to criminal charges with the possibility of jail time, merely for not following an employer's whims. The degree to which we've already allowed top-down authoritarianism to infest our thinking is sickening.
And I think overbroad laws like the murderous CFAA have a lot to do with this. Rather than defining narrowly-scoped trespasses and a clear boundary where the rights of an individual end, they've entrenched draconian legal regimes that arbitrarily create harsh penalties. So the only way to avoid running afoul of them is to avoid upsetting anybody who might have the power to use them on you. Society has generalized this as top-down authoritarianism that flows along economic power relations, and it's sad.
That is incorrect. Copyright generally does not attach to works created by federal government agencies. The same is not true for works created by state and other sub-national government entities.
Harvard has an online resource center where you can learn more about this.
See https://copyright.lib.harvard.edu/states/
I do think it’s true that this particular footage is in the public domain.
>It's essentially a public record, and FOIA likely does apply (as noted by one tiny comment).
FOIA does not apply to MWAA records. MWAA has its own access to public records policy that applies to its records. I have the unfortunate privilege of being a quasi-expert at dealing with MWAA and its records. I am one of three people to have ever appealed a MWAA Freedom of Information Policy all the way to arbitration.
(Bizarrely, binding arbitration is a requester’s final recourse. Unlike every other government entity that I know of, litigation is not an option if you think MWAA has not followed their Freedom of Information Policy.)
See https://www.mwaa.com/sites/mwaa.com/files/legacyfiles/freedo...
(Note: I’m only talking about your described example.)
Your analogy misses the mark. A more appropriate analogy would be someone taking a promotional selfie while walking down the street, which includes businesses' signs in the background.
Everything that could identify the trucking company or even the source of the melons was blurred out, which is a lot of work for the towing company guy who does these videos between tow jobs.
There's no copyright issue; all pictures were taken by employees of the towing company.
There's no trademark issue; showing a logo for identification purposes is legal.
There's no customer confusion issue; it's clear that the towing company isn't in the melon business.
There's no trade secret issue; this was a very public event, on public property, with TV news coverage.
There's no intent to defame issue; the towing company was there because the California Highway Patrol called them to clean up the mess, not because someone didn't like the guy who rolled over his truck.
There's no right of publicity issue for a wrecked truck.
There's no ownership right to the video because the trucker didn't contract with the towing company; the California Highway Patrol did. (The trucker will be getting a big bill from the state.)
There's no issue of "interfering with police" - the cops called in the towing company and guided them to the scene.
There's nothing in IP law that applies here.
Just fear of YouTube.
[1] https://www.youtube.com/watch?v=1M5RnQlSJ58
Regardless of Youtube's rules, this just seems like good practice. Surveys and opinion polls in newspapers and scientific research normally redact that sort of information, for example.
This is the most important bit. That journalist had one fucking job. Technically, their job was handed to them in a platter. Now their incompetence is going to cost someone else's livelihood and possibly, life. What a sad state of affairs.
So what was the harm in releasing a video of said public view, that almost certainly would've been subject to FOIA anyways?
Also, if the defendant here is literally innocent (i.e. the statutory wording does not apply to his actions) and his lawyer still advised him to plead no contest, then he might have grounds for the conviction to be overturned. I remember that Subway Jared had some of his charges reversed because he was technically innocent of them, but his lawyer stated that he didn't check any of the evidence before recommending a guilty plea.
And, in a further ridiculous twist of justice, if the defendant pleads to something that isn't even a crime (e.g. the state simply made the statute up, or adjusted the wording so it wasn't what the law said), then you can't get that reversed if you knowingly plead to it. I remember cases where defendants pled guilty to non-crimes, but you're cooked at that point because you agreed to it.
25 more comments available on Hacker News