The ubiquity of the Internet doesn’t confer the same ubiquity to venue, the U.S. Court of Appeals for the Third Circuit has ruled, reversing Andrew Auernheimer’s cybercrime conviction from the District of New Jersey.

Auernheimer was a resident of Arkansas at the time that he helped Daniel Spitler perfect a program to collect emails through a security flaw in AT&T’s website, according to the opinion, and the pair publicized their effort as evidence of a lack of data security at AT&T.