I think a lot of people are conflating the goals of his data access with the actions that got him in trouble.
I actually agree with Swartz point, it’s really shitty that there is a lot of data, created either by the government (in the case of PACER stuff, court documents) or by government funding (many of the academic papers behind paywalls) that we have to either pay disproportionately high per-article costs to access or disproportionately high subscription costs to access. For publicly generated stuff, I’m fine with some reasonable charge.
When everything was done by paper, if I wanted a bunch of copies of documents from a courthouse I was fine with the charge, same if I needed documents from the city or whatever. It costs money for the clerk to prepare those documents and costs money to physically print them. I’m fine with the fee being higher than just the raw material costs, since a person does have to work at this.
But with computerized court records, $7 a page? No, that’s a profit generation scheme for stuff that should be available at near cost. Same for the stuff on JSTOR, any research documents generated with public funds need to be somewhere that they can be accessed electronically for near-cost. I’m fine with private companies having high-price subscription services that provide a lot more than just that, but the publicly funded research itself ought to be widely available for a very low cost. I’m not even convinced it shouldn’t be free, given the trivial costs of housing PDFs of court decisions and academic papers when compared to the massive spending of the Federal government.
That being said, it doesn’t matter if Swartz is just illegally accessing a network to play minesweeper, that’s the criminal act, the illegal access.
Swartz was prosecuted under the Computer Fraud and Abuse Act (CFAA), that was passed in the 1980s in response to several extremely damaging and high profile hacking incidents. Now, the way this law is worded is indeed absolute shit. Under some interpretations of the law virtually everyone who uses computer networks is probably violating the law at some point. Technically the CFAA prohibits any use of the network that the owner doesn’t give you permission, so you’ve actually had a few cases where people who have accessed a network legally have been charged because they violated the terms of service.
As an example, a Missouri woman created a fake MySpace profile and used it to establish a relationship with a teenage girl. The woman’s behave was designed to inflict emotional damage on the girl, and she ended up committing suicide. Prosecutors tried to go after her for a CFAA violation because a fake profile is technically against MySpace’s terms of use. Luckily (not because I don’t think this woman in Missouri is a monstrous sack of shit), a judge ruled that a simple term of service violation is not sufficient to be a violation of the CFAA–since the woman had legal access, just in a manner inconsistent with the owner of the system’s intentions. A similar case was filed against a person who used an employee database against their employer’s policy, he was charged with a CFAA violation that was also thrown out as the courts have generally decided in recent years that if the access to the network itself was legal, then violating the terms of service is not enough to constitute a CFAA crime.
But it is definitely a problem so many people are getting charged in contravention to how judges feel about the law, and it’s unfortunate this antiquated law has text that makes such charges possible due to its vagueness.
Now, Swartz falls outside the categories of other people improperly charged under the CFAA–his access itself was illegal and prohibited, so he actually did not just commit a terms of use violation. Early on in his relationship with the MIT network, he had committed a simple terms of use violation, but when they suspended his access in response to this, and he persisted in getting access against MIT’s wishes, that was a legitimate illegal access of the network. Basically a type of hacking, and something that should be a crime.
My personal opinion on how it should have been handled:
-Illegal access occurred
-It appears damage was minimal
-I would have required restitution to MIT for any damages
-I would have required a six month sentence, with an option for parole or home confinement in lieu of jail
-I would have had him plea to a misdemeanor.
I think six months and the felony record was too much, but he did deserve to be punished for what he did.
Now, while I think the punishment suggested (either the felonies or the 30+ years) did not fit the crime, I cannot say that a prosecutor is derelict in their duty for enforcing black letter law and pursuing a sentence clearly specified in the statute. The fault for the penalty must then lie with the legislature, not with the prosecutor. The prosecutor probably should have used better discretion, but I can’t consider it misconduct when you’re pursuing penalties provided for in statute.