So, the actual sentencing is certainly overzealous, but are you arguing that "unauthorized access" shouldn't be illegal? Should it just be a free-for-all: if you can get into it, you're welcome, and you can do whatever you want with any data you can get your hands on? If not, what's the threshold? Are you allowed to guess a password? What if you bruteforce it? Can you use a zero-day vulnerability in Rails?
Both Weev and this guy clearly knew that they were accessing data they weren't supposed to access, even if the protection in place was/is clearly inadequate.
Both Weev and this guy clearly knew that they were accessing data they weren't supposed to access, even if the protection in place was/is clearly inadequate.