-2Mr Justice Ribeiro PJ: 2. I agree with the judgement of Lord Hoffmann NPJ. Mr Justice Fok PJ: 3. I agree with the judgement of Lord Hoffmann NPJ. Mr Justice Cheung PJ: 4. I agree with the judgement of Lord Hoffmann NPJ. Lord Hoffmann NPJ: 5. On 12 October 2014 the appellant took part in a Distributed Denial of Service (“DDoS”) attack on the website of the Shanghai Commercial Bank. When you call up a website, your computer sends a “request” to the website server, i.e. the computer which supports the website, calling up the website page. If it is available, the website server will respond to the request by transmitting the page. When it appears on your screen, you may click on some service you want to access, for example, your bank account, and your computer will send another request, and so on. The capacity of the server to deal with requests at any given time (its “bandwidth”) is finite. The method of a DDoS attack is for a number of co-ordinated computers to send a very large number of requests at more or less the same time to exhaust the server’s bandwith, thereby denying access to persons wishing to transact their ordinary business through the website and possibly causing the overloaded system to crash. In the present case the server received 504,592 requests within the space of an hour, of which 6,652 came within a space of 16 seconds from the appellant’s computer. But the attack was a failure because