<story><title>American Airlines and The Points Guy  are suing each other</title><url>https://viewfromthewing.com/american-airlines-and-the-points-guy-are-suing-each-other/</url></story><parent_chain><item><author>nybble41</author><text>&amp;gt; What is their case then exactly?&lt;p&gt;Speculating, but TOS generally say that you&amp;#x27;re not allowed to share your password with anyone. Assuming that&amp;#x27;s true for the AA site, AA might argue that TPG is encouraging users to break their TOS (&amp;quot;tortious interference&amp;quot;).&lt;p&gt;Though if app doesn&amp;#x27;t actually share the password with TPG and just uses it locally there may well be a question of whether entering your password into a third-party app actually counts as sharing it with that party. How exactly would this be different logging in from a web browser? It&amp;#x27;s just a different kind of user agent. Are Google, Mozilla, Microsoft, and Apple guilty of tortious interference simply because the software they release has access to your passwords on your own machine and &lt;i&gt;could&lt;/i&gt; report them back? (For that matter, they even store the synced passwords on &lt;i&gt;their&lt;/i&gt; servers, though in principle those are supposed to be private.)&lt;p&gt;Of course there could also be specific terms in the TOS against accessing the service with unapproved user agents, independent of any prohibition on sharing credentials.</text></item><item><author>paxys</author><text>Interesting that AA frames it as TPG&amp;#x27;s app stealing confidential customer data, while it is the customer who set up the app and willingly provided their credentials in the first place.&lt;p&gt;Will AA be able to find a single customer who has a problem with what TPG does? What is their case then exactly? Would they similarly sue the app if customers were copy pasting data into it, rather than accessing it programmatically?&lt;p&gt;FYI the title is editorialized. This suit has nothing to do with screen scraping, but just data access in general. Services like these nowadays almost always use private APIs (built for mobile clients and SPAs) rather than parse HTML.</text></item></parent_chain><comment><author>KieranMac</author><text>American Airlines is alleging 12 legal claims:&lt;p&gt;1. Breach of Contract
2. Tortious Interference with a Contract
3. Unfair Competition by Misappropriation
4. Trespass
5. Trademark infringement
6. Dilution
7. Dilution under Texas State Law
8. False Designation of Origin
9. Copyright Infringement
10. CFAA
11. Violation of Texas Harmful Access by Computer Act
12. Unjust Enrichment</text></comment>
<story><title>American Airlines and The Points Guy  are suing each other</title><url>https://viewfromthewing.com/american-airlines-and-the-points-guy-are-suing-each-other/</url></story><parent_chain><item><author>nybble41</author><text>&amp;gt; What is their case then exactly?&lt;p&gt;Speculating, but TOS generally say that you&amp;#x27;re not allowed to share your password with anyone. Assuming that&amp;#x27;s true for the AA site, AA might argue that TPG is encouraging users to break their TOS (&amp;quot;tortious interference&amp;quot;).&lt;p&gt;Though if app doesn&amp;#x27;t actually share the password with TPG and just uses it locally there may well be a question of whether entering your password into a third-party app actually counts as sharing it with that party. How exactly would this be different logging in from a web browser? It&amp;#x27;s just a different kind of user agent. Are Google, Mozilla, Microsoft, and Apple guilty of tortious interference simply because the software they release has access to your passwords on your own machine and &lt;i&gt;could&lt;/i&gt; report them back? (For that matter, they even store the synced passwords on &lt;i&gt;their&lt;/i&gt; servers, though in principle those are supposed to be private.)&lt;p&gt;Of course there could also be specific terms in the TOS against accessing the service with unapproved user agents, independent of any prohibition on sharing credentials.</text></item><item><author>paxys</author><text>Interesting that AA frames it as TPG&amp;#x27;s app stealing confidential customer data, while it is the customer who set up the app and willingly provided their credentials in the first place.&lt;p&gt;Will AA be able to find a single customer who has a problem with what TPG does? What is their case then exactly? Would they similarly sue the app if customers were copy pasting data into it, rather than accessing it programmatically?&lt;p&gt;FYI the title is editorialized. This suit has nothing to do with screen scraping, but just data access in general. Services like these nowadays almost always use private APIs (built for mobile clients and SPAs) rather than parse HTML.</text></item></parent_chain><comment><author>paxys</author><text>RIP password managers then, I guess</text></comment>