Its vague wording often leads to outlandish maximum sentences for hackers -- and some lawmakers want them to be even stricter.