The US Department of Justice has stated that it will not prosecute “good-faith security research” under anti-hacking legislation, despite long-standing worries about the Computer Fraud and Abuse Act (CFAA). Prosecutors must also avoid arresting someone for just infringing the terms of service of a website — including minor infractions such as exaggerating a dating profile — or for using a work-related computer for personal purposes.
