Many of the criminal offenses contained within the Computer Fraud and Abuse Act (CFAA) require that an intruder either access a computer "without authorization" or exceed authorized access. The term without authorization is not defined in the Act and one court found its meaning "to be elusive."