Massachusetts Bay Transportation Authority v. Anderson
| Massachusetts Bay Transportation Authority v. Anderson | ||
|---|---|---|
|
United States District Court for the District of Massachusetts | ||
| Filed | August 8, 2008 | |
| Decided | Undecided | |
| Case name | Massachusetts Bay Transportation Authority v. Zach Anderson, RJ Ryan, Alessando Chiesa, and the Massachusetts Institute of Technology | |
| Citations | Undecided | |
| Holding | Undecided | |
| Judge | George A. O'Toole, Jr. | |
| Laws applied | U.S. Const. Amend. 1; Computer Fraud and Abuse Act | |
Massachusetts Bay Transportation Authority v. Anderson, et al., Civil Action No. 08-11364, was a challenge brought by the Massachusetts Bay Transportation Authority (MBTA) against three Massachusetts Institute of Technology students who planned to publicly present a security vulnerability they discovered in the MBTA's Charlie Card automated fare collection system. The case concerns the extent to which the norm of responsible disclosure can enjoin an individual from revealing information on a security flaw in an computer system.
Background
In May 2008, three MIT students published a final paper in Professor Ron Rivest's 6.857 Computer and Network Security class demonstrating weaknesses in the MBTA's automated fare collection system.