a new and unwarranted extension of the US computer crime law shows that you can go to jail for simply telling potential victims that their data is vulnerable.