Dev says ByteDance bots have been scraping his app for 18 months, eyeing CFAA lawsuit

Kyrannio · x · 2026-11-04

Developer Kyrannio says that, until the recent Railway drama, he didn't realize the scraping traffic hitting his instance NoSpoon over the past 18 months — which he attributes to ByteDance and others — may actually be illegal rather than harmless automated scanning. He has been logging all of it and blocking the requests.

Attached screenshots lay out potential legal grounds: the Computer Fraud and Abuse Act (CFAA, civil suits for economic damage), the Stored Communications Act (civil cause of action for unauthorized access), and state unfair competition laws covering malicious tools like bots and SQL injections. A request log shows ByteDance-associated IPs probing sensitive paths like .env, /backend/settings.py, and secrets.json.

Original post →

More from Companies & People

Companies & People channel →