If I make malware that attacks government services I get ASIO’d and can’t even let my family or a lawyer know I’ve been held and interrogated.
If clammy sammy does it the government buys the product and makes piracy for rich failsons legal.
Someone make this make sense.



For me, the details make or break this. If there was an authentication system that was bypassed that’s a big deal and OpenAI should be held criminally liable. If there was no authentication system though, an unprotected API is indistinguishable from a public API and I would rather the law fall in favour of free use of public APIs.
There’s plenty of other stuff to charge OpenAI with anyway.