How so? If I embed a piece of malware in a website that launches an .exe on your computer without you knowing it, that certainly constitutes access "beyond wha

How so? If I embed a piece of malware in a website that launches an .exe on your computer without you knowing it, that certainly constitutes access "beyond what was authorized." If that piece of malware mines bitcoins and uses my power supply to do it, the lack of authorization is extremely relevant. I agree that "written" authorization might be overkill, but the general idea of access without permission comes across clearly. Of course, I don't think Tidbit was actually being spread as malware -- but it's easy to imagine a similar system that does.