Comment by portent

The "Computer Fraud and Abuse Act" applies to the US. What if the hacker lives somewhere else? Then that law does not apply to him, and the action was not illegal.