Senator Wants to Make the Computer Fraud and Abuse Act Even Easier to Abuse(eff.org)

    (h) Any person who, outside the jurisdiction of the United
    States, engages in any act that, if committed within the
    jurisdiction of the United States, would constitute an
    offense under subsection (a) or (b) of this section, shall
    be subject to the fines, penalties, imprisonment, and
    forfeiture provided in this title if—
     
    (1) the offense involves an access device issued, owned,
    managed, or controlled by a financial institution, account
    issuer, credit card system member, or other entity within
    the jurisdiction of the United States; and
     
    (2) the person transports, delivers, conveys, transfers to
    or through, or otherwise stores, secrets, or holds within
    the jurisdiction of the United States, any article used to
    assist in the commission of the offense or the proceeds of
    such offense or property derived therefrom.  

    (h) Any person who, outside the jurisdiction of the United
    States, engages in any act that, if committed within the
    jurisdiction of the United States, would constitute an
    offense under subsection (a) or (b) of this section, shall
    be subject to the fines, penalties, imprisonment, and
    forfeiture provided in this title if the offense involves an
    access device issued, owned, managed, or controlled by a 
    financial institution, account issuer, credit card system member,
    or other entity organized under the laws of the United States,
    or any State, the District of Columbia, or other Territory
    of the United States.

    (D) violating or about to violate paragraph (1), (4), (5), or (7) of section 1030(a)
    [the CFAA] where such conduct would affect 100 or more protected computers (as defined
    in section 1030) during any 1-year period, including by denying access to or operation 
    of the computers, installing malicious software on the computers, or using the computers
    without authorization.

    (6) knowingly and with intent to defraud traffics (as
    defined in section 1029) in any password or similar
    information through which a computer may be accessed without
    authorization, if—
     
    (A) such trafficking affects interstate or foreign commerce;
    or
     
    (B) such computer is used by or for the Government of the
    United States; 

    (6) knowing such conduct to be wrongful, intentionally trafficks
    in any password or other similar information, or any other means
    of access, further knowing or having reason to know that a 
    protected computer would be accessed or damaged without authorization
    in a manner prohibited by this section as the result of such 
    trafficking.