If senators are asking for this, then there must be some companies out there that have lobbied for this. What kind of company would ask for something like this? Is it Oracle and its ilk?
What kind of company would ask for something like this?
Companies that sell 'security' services.
Attribution can be hard. What liability will companies have if they "hack-back" the wrong people and/or cause financial losses as a result?