Assuming that those third-party services are ones that the public can access via their own web interfaces, such that the only thing unauthorized is the manner in which the APIs are consumed, this would seem (unless I am missing more specific precedent) to fall out of CFAA coverage as a result of the Van Buren v. United States decision.

I remember when this passed and thinking that it was all the big, incompetent businesses that can afford lawyers on retainer making sure that only big businesses that can afford lawyers on retainer maintain their position of superior power over individuals. Snuffing out any hope that the little guy - who through sheer talent - can do things on this incredible newfangled equalizing innovation called the Internet will finally have some real chance at power.

Bank of America used it to make people who simply changed the account number in their URL bar the criminals instead of them, who were completely incompetent at securing access to their customer's accounts. What previously would have been arguably criminal negligence.

It placed intent above competence - but only for those who can afford lawyers.

And here it is again, being abused the same way.

Hot take: It should be repealed completely.