What Lori Drew allegedly did to Megan Meier was despicable, but it doesn't justify her conviction late last month for violating federal laws designed to keep hackers from invading computer networks.
Two years ago, Megan, a 13-year-old Missouri girl, hanged herself
after her online friend "Josh Evans," who had befriended her on
MySpace, reportedly told her that he didn’t want to be friends with her
and that the world would be better off without her. But Josh was in
fact Drew, a 49-year-old mother of one of Megan's former friends.
According to published reports, Megan had been mean to Drew’s
daughter and Josh’s fake online relationship with Megan was a way for
Drew to retaliate.
During the trial in Los Angeles, it was revealed that some entries
made by Josh were typed by Ashley Grills, a then-18-year-old employee
of Drew who was a witness for the prosecution and was not prosecuted.
The case has widely been characterized as a legal assault on
cyber-bullying, though it is extremely unusual for an adult to bully a
teen. The case against Drew is frequently cited as a warning to
would-be cyber-bullies that their actions could bring severe
consequences to both their victims and themselves.
From what I can gather, this is a case of a squabble between two
13-year-old girls and a mother who intervened in a terribly immature
and inappropriate way. Adults are supposed to help young people
peacefully resolve problems. This is not so much a case of
cyber-bullying as a case of a really bad parental intervention that had
tragic consequences.
We need to fight against rude, deceitful and cruel behavior on and
off the Internet. But that doesn't justify a reinterpretation of
anti-hacking laws to jail people who misuse Internet services.
The legal theory behind the prosecutor’s case was that Drew
violated MySpace's terms of service that prohibit misrepresenting your
identity and harassing others. MySpace rules, which Drew says she
hadn’t read, require that “all information you submit is truthful and
accurate.” Clearly Drew lied. But so have a lot of other people.
She was prosecuted under Section 1030 of the U.S. Code, which was
crafted to protect against unauthorized access to computer networks to
cause damage, steal information or money or jeopardize national
security.
As far as I can tell, the law was not designed to prevent people
from lying about their identity or otherwise violating rules on a
publicly available online service. But that didn’t stop the jury from
convicting Drew of misdemeanor violations. The jury refused to go along
with the prosecution’s felony charges.
Let me say it again: What Drew did was terribly wrong and I don’t
blame prosecutors for wanting for find a way to throw the book at her.
I just wish they had used a different book.
Based on this case, I’m one of millions of people who might also be
guilty of a federal crime. I didn’t harass anyone, but I did violate
MySpace’s terms of service by creating several fake identities with a
variety of ages to test privacy features for teenagers while I was
researching a book about MySpace in 2006.
And what about police officers who pose as teenagers to lure
would-be predators? Should they have to request immunity from federal
prosecution each time they engage in such a sting operation? I’ve even
heard cases of law enforcement people advising kids to lie on their
profiles to protect their privacy. Should they be indicted for
conspiracy?
There are plenty of adults who lie online about their age. I have a
friend who set up a profile on an online dating service using a false
age, an old photograph and the exaggerated claim that he was
“athletic.” A date might have cause to be disappointed or angry at him,
but should she have the right to demand a federal prosecution?
Even Megan, with her mom's knowledge, lied about her age. She was
13 and, at the time, MySpace required users to be at least 14. MySpace
recently started allowing 13-year-olds to sign up. The usual penalty
for violating terms of service is to be kicked off the service.
Had MySpace decided to go after Drew in court, it could have done
so as a civil matter. But it’s not up to federal prosecutors to take it
upon themselves to enforce a company’s online agreement with its
members, especially if that company never asked for federal
intervention.
I can understand why a jury wanted to punish Drew for what happened
to Megan. But it’s not clear to me that putting Drew in jail on a
hacking charge will help prevent cyber-bullying or future tragedies.
What is needed is an educational campaign that makes bullying or
harassing just as unacceptable as racial epithets or subjecting others
to secondhand smoke.
While cases like this one - an adult harassing a teen online - are
rare, cyber-bullying is a real problem among teenagers, but it requires
serious long-term solutions, not quick fixes and the inappropriate use
of a federal anti-hacking law.