Hoffman also said that hacking laws have penalties that are harsh and disproportionate to the offenses people are charged with. For instance, even first-time offenders accused of accessing protected computers without authorization can get up to five years in prison. Repeat offenders face 10 years.
Violations of other parts of the law, she said, are could face up 20 years of life imprisonment.
“The spectre of being incarcerated for years should never have haunted Aaron,” said Hoffman. “Congress must update the CFAA to ensure penalties actually make sense in light of the behavior they’re meant to punish.”