Is it illegal to enter a website with an account that is not yours? I worked as a developer in a company and I had some of the employees' passwords. They are saved in my Google account. What are the consequences of using these passwords to enter as another person? Assuming that I entered them in a program that I created.
I infer from the use of the past tense &quot;worked&quot; that you no longer work for the company in question. Also, from the fact that you are wondering whether there might be negative consequences, I infer that you do not have permission to use the systems in question. The specific consequences will depend on where the company and its computers are located, as well as on the nature of the systems you log in to and on what you do with those systems, but it's certainly possible to receive a penalty of several years' imprisonment. The fact that you created the system in question makes no difference.
There is no requirement to name the parties to a contract I just bought a cup of coffee. I did not give my name to the other party to that contract and while I know the name of the shop, I do not actually know the legal entity I contracted with. Nevertheless, we have a binding contract and, for example, if that coffee gave me food poisoning, I would have legal recourse under that contract. Similarly, there is no difficulty signing a contract under a pseudonym - it still creates a legally binding relationship. The practical difficulties While there is no legal problem, there is an evidentiary one - if someone enters a contract and later disclaims doing so, how do you prove that they did? Or vice-versa, if someone alleges that it was you that entered the contract, how do you prove that you didn’t. What you need is some way of definitively but anonymously tying the person to the contract. I can think of lots - a fingerprint, DNA, public key cryptography, a trusted third-party intermediary to name just a few. This is essentially a technical problem rather than a legal one.
What would be the legal validity of this behaviour? Your changes to the browser source of the website contract or license of Terms of Service (TOS) - essentially a "click-wrap" license - before agreeing to it means nothing in a legal sense, other than to void the contract. The other party (the website) can't possibly agree to those contract changes without them being submitted as contractual changes and agreeing to them, if they did agree to them. That's basic contract law. That website TOS probably has a clause that says that if you don't agree to the TOS in full, as written, without modifications, you can't use the website. And the TOS may also say that they reserve the right to prevent you from using the site by closing your account or even blocking your access. Your "witness" to the contract changes is meaningless, as your witness is not a party to the contract. And any witness to the fact that you have changed the terms of the TOS before agreeing to it would work against you in a civil proceeding as proof of your attempt at modifying the contract.
Yes (in most jurisdictions), but why should you? There might be some interests in publishing the 1,000 most common passwords, e.g. to support security awareness lectures (or to build rainbow tables for nefarious purposes), but anybody who wants to hash them with a specific algorithm can do so easily. It is probably easier to type the passwords from a printed book and to hash them on the computer than it is to type the hashed passwords -- bad passwords would tend to be easy to type. That being said, computer crime laws are generally lagging behind the state of the art, or they are overly broad, so it might be illegal in some places as a &quot;hacking tool&quot; ...
Since the Steam ID contains or may contain enough information for it to be possible to link your account to you as a physical person, it would definitely be considered "personal data" according to Article 4 of the GDPR. However, by agreeing to the DOTA2 terms of service, you have given consent for them to show your information to other players (or at least that is included in most terms of service I have read for other games. I have not read the one for DOTA2 specifically). Replays are an interesting corner case. If download of replays are only possible for other players or if the wording of the ToS says that you consent to displaying your user ID to anybody, that would mean that they would have covered their bases. As long as they comply with other parts of GDPR, like "the right to erasure" (Article 17) that is. If the API is accessible to anyone and not covered by the ToS you might have a case. If you only want to remove the traceability between you and the replays, you can always evoke Article 17 and delete your account.
Not that I am aware of. A person who 'owns' a domain is entitled to utilize that domain including for the purposes of receiving emails. With physical mail, it is a crime in most countries to intentionally interfere with mail that is not addressed to you. For example - Australia. However, this is statute law and as such does not extend to emails - even if it did, if you own the domain then you are the person to whom it was addressed. I note that you seem to misunderstand "confidential" - this only arises in the context of a special relationship between the person transmitting the information and the person receiving it. Usually this is a contractual obligation between A and B but it can be imposed by law (e.g. doctor-patient, banker-client, lawyer-client, GDPR etc.). If A sends confidential (as between A &amp; B) information to C, C is under no general obligation to keep it confidential if C has no relationship of confidentiality with A or B. If C discloses it and B suffers damage, B sues A for breach of confidence (or the government prosecutes A for breaking the law); B has no case against C. For your situation, where B has allowed A to send the information to an obsolete address then B has contributed to the breach to an extent that B would be extremely unlikely to succeed in a suit against A.
You have several issues. Breach of Contract When you sign up with each of those services you are entering a legally binding contract and must comply with the terms of that contract. For example, this is taken from Facebook's terms: Here are some commitments you make to us relating to registering and maintaining the security of your account: You will not provide any false personal information on Facebook, or create an account for anyone other than yourself without permission. You will not create more than one personal account. I haven't checked but its a fair bet that the other services have similar terms. Unless you have permission, what you are doing breaches these terms of service. If what you do causes damage to Facebook et al then they can sue you and your employer for damages. Even if it doesn't they can probably bar you from having an account for as long as they like. Improper use of images This is jurisdictional but it is generally required to have the permission of the subject of a photograph where that photograph is used for commercial gain. There are exceptions where the person is not the primary subject (e.g. crowd shots, or images primarily of something else where the person happens to be in the shot) but the type of photos you would use for these services are not going to be exempt. The sanctions for breaching this will be dependent on jurisdiction. Breach of Copyright Somebody owns the copyright in those photographs. If you do not have a licence to use them in the way you propose then you are breaching their copyright. The copyright holder can sue for damages (if any) and any profits you make. Vicarious Liability An employer is strictly liable for the actions of their employees, jointly and severally with the employee. That means a plaintiff can go after either the employer, the employee or both. An employee may have some statutory or contractual indemnity but this is by no means common.
I don't think the issue is that it is a violation of a law, but rather that it is a violation of the terms of service you agree to when you sign up for the site - which is a breach of contract. You can be sued for breach of contract, if the site can prove any damages based on your breach. So if you use a bot to make money on a site, in violation of the site's license agreement, then I believe the site could indeed sue you to get the money back. Also, the phrasing of your question ("creating a robot") raises a separate issue. It is not actually creating the bot that is illegal, but using it where not allowed can be a violation of contract. Suppose person A makes a poker bot, just as a programming exercise, and doesn't use it. But then suppose person B uses the robot created by person A on a site that forbids it. Although this could be a gray area, I do not believe the site would have any recourse against person A (even though they probably would against person B).