Weev vs AT&T (2010) — Ethics & Responsible Disclosure

Andrew 'Weev' Auernheimer discovered a vulnerability exposing ~114,000 iPad users' email addresses. Instead of disclosing privately, he scraped the data and gave it to Gawker.

## Background

Andrew 'Weev' Auernheimer discovered a vulnerability exposing ~114,000 iPad users' email addresses. Instead of disclosing privately, he scraped the data and gave it to Gawker.

## Learning Objective
Navigate ethical boundaries (reporting vs. liability, privacy vs. investigation) and avoid conflicts of interest.

## Scenario
You are the lead digital forensic investigator assigned to this case. Based on the real-world events described, you must analyze the available evidence, reconstruct the timeline, and produce a forensic report.

### Key Facts
- Case: Weev vs AT&T (2010) — Ethics & Responsible Disclosure
- Year: 2010
- Domain: Cyber Forensics
- Difficulty: Intermediate

## Evidence Available

Refer to the dataset at: https://github.com/arora200/aplly_case_db/tree/main/datasets/fss303-weev-att-data-leak

## Investigation Questions

1. Was Weev's scraping of public URLs a crime or ethical hacking?
2. What is the responsible disclosure process for security vulnerabilities?
3. How does the CFAA apply to forensic professionals who discover vulnerabilities during investigations?
4. What ethical boundaries should a forensic examiner never cross?
5. Draft an authorized access agreement that defines scope for a forensic engagement.

## Deliverables

1. Forensic Report — Document your findings, methodology, and conclusions
2. Timeline Reconstruction — Map the sequence of events
3. Evidence Log — Document all evidence collected with hash values
4. Legal Admissibility Checklist — Ensure your evidence meets evidentiary standards

## Expert Insight
Your job is to find the truth, not to be a vigilante. Once you cross the ethical line, you become a criminal, not an examiner.

## Forensic Takeaway
Ethics dictate that a forensic professional must stop and report when they find a vulnerability, NOT exploit it for fame.