> they typed “miscellaneous” strings of characters into the login page’s entry fields
So this is legal when the FBI does it, but when someone else does essentially the same thing on an AT&T server it's identity fraud and conspiracy to access a computer without authorization