Ryanair vs. Booking.com: When Using a Password Isn’t Hacking!
The Computer Fraud and Abuse Act should be about hacking, not sniffing out perceived policy violations. Ryanair claims Booking.com violated CFAA by accessing airfare prices with valid logins, but this isn’t hacking. If using your partner’s Netflix account is illegal, then we’re all guilty! Let’s keep CFAA focused on real cybercrime.

Hot Take:
Who knew that logging into a website with valid credentials could make you the next infamous “hacker”? According to the Ryanair v. Booking.com saga, the line between casual surfing and cyber villainy is thinner than an airplane ticket!
Key Points:
- EFF argues that using valid credentials doesn’t constitute hacking under the CFAA.
- Ryanair claims Booking.com violated CFAA by using valid credentials to access pricing data.
- EFF’s amicus brief asks the Third Circuit to clarify that this case is about policy violations, not hacking.
- The CFAA should only apply to actual hacking that bypasses computer security.
- Current interpretation risks criminalizing everyday behaviors and chilling valuable research.
Already a member? Log in here