The U.S. Crackdown on Hackers Is Our New War on Drugs
Before Edward Snowden showed up, 2013 was shaping up as the year of reckoning for the much criticized federal anti-hacking statute, the Computer Fraud and Abuse Act ("CFAA"). The suicide of Aaron Swartz in January 2013 brought the CFAA …
Context & Ripple Effects
Aaron Swartz's suicide in January 2013 turned the Computer Fraud and Abuse Act into the most contested statute in tech law, and by the relationship record 2013 was lining up as a year of reckoning for the law critics called overbroad. Then Edward Snowden's revelations landed, and per the confirmed record they pulled Washington's attention away from CFAA reform entirely.
Wired's argument — that the hacker crackdown is structurally a new war on drugs, driven by prosecutorial escalation rather than legislative calibration — traveled widely on the day of publication, picked up by Boing Boing and amplified by EFF's account, a sign that the reform constituency was organized even as its legislative window closed.
First-order effects
- Lawmakers who might have carried CFAA amendments after Swartz's death redirect their oversight bandwidth to Snowden-era surveillance programs, leaving the statute unrevised exactly when its critics had momentum.
- Federal prosecutors continue charging under the CFAA's broad reading — including terms-of-service violations — with EFF and allied groups now forced to fight on both the surveillance and computer-crime fronts simultaneously.
Second-order effects
- Security researchers bear the immediate cost of an unrevised CFAA, since unauthorized probing of systems stays a prosecutable offense and the chilling effect the statute's critics documented persists into future research decisions.
- Civil-liberties advocacy capacity splits between surveillance reform and computer-crime reform, weakening the coalition pressure that Swartz's case had concentrated on a single statutory target.
Third-order effects
- If enforcement keeps substituting for legislation, American computer-crime doctrine hardens through prosecution and judicial precedent rather than congressional revision — the accumulation-by-prosecution dynamic the piece explicitly compares to the drug war.
- A body of hacking case law decided under an unrevised statute becomes de facto policy that outlasts the Snowden news cycle, raising the bar for any future reform effort before Congress.
The trend: U.S. cyber-enforcement policy is escalating against individual hackers through prosecutors rather than legislatures, with political shocks like the 2013 surveillance disclosures determining which statutory reforms ever get a hearing.