DOJ’s New CFAA Policy is a Good Start But Does Not Go Far Enough to Protect Security Researchers | Electronic Frontier Foundation