Comment by Spivak
13 hours ago
> normal people can avoid needing to care about the distinction by endeavoring to not kill anyone to begin with
It's the same thing here, a normal person will never run afoul of this law. It is entirely industry professionals who will be affected and they have legal departments who will figure out where the line is to the millimeter. Sure translating to legalese is hard and I expect this kind of legislation will be mostly common law after a bunch of lawsuits but the giveaway that it will be fine is that assigning "bot/not bot" to a given situation is something we all agree on in the industry. There isn't really that much borderline here. You can't accidentally build a web scraper operating off a residential proxy network and it's pretty obvious when you decide to disguise your traffic because you don't have the consent of site you're scraping.
Even the horribly contrived borderline examples boil down to "but I should have the right to actively deceive and circumvent security measures designed specifically to keep me out" which is a pretty tough sell.
> You can't accidentally build a web scraper operating off a residential proxy network
Unless I'm missing something, most of the time you ask an agent to do any type of comparison or analysis between mtiple options offered online, scrapping will be involved at some point.
Anything that doesn't have a well-known and very public, free API will be a prime target for scrapping.
> It's the same thing here, a normal person will never run afoul of this law.
Its terms are so broad and ambiguous that they're already doing it and the thing you're actually relying on is that they wouldn't be prosecuted, which is an entirely different thing.
> It is entirely industry professionals who will be affected and they have legal departments who will figure out where the line is to the millimeter.
"The courts will sort it out eventually" is the worst excuse for drafting it poorly to begin with, and doesn't do anything for you during the decades it takes for that to actually happen.
> Even the horribly contrived borderline examples boil down to "but I should have the right to actively deceive and circumvent security measures designed specifically to keep me out" which is a pretty tough sell.
This seems like the thing where corporations co-opt the term "security" to mean "anyone doing anything we don't like" as if they had any right to that to begin with.
Journalists should be able to investigate misconduct. Customers and customer agents should have bulk access to pricing data. Real people shouldn't have to view the speech of other real people through the proprietary interface of a corporate intermediary that people only use because it has a network effect.