(and even in the US it is much more nuanced. logging in and doing nothing with a public username and password is really in the grey area).
The only restriction on US law is how hard we want to push other governments to enforce them.
