I agree that is the law, and it should be. It seems to me this guy was either a little over or under the "concrete steps" line. I guess its up to the appellate courts to give us the answer now that the jury has spoken.
There's some pretty sick stuff on the Internet.
Illegally obtaining the home addresses of his chosen targets by accessing a national law enforcement database for personal purposes is both a crime and a concrete step over the line.
You don’t need the home address of a fantasy, you do if you intend to act out a plan.