Everyone that is doing security research without permission, and doesn't catch charges, is just luckier (or less annoying) than weev: https://www.wired.com/2013/03/att-hacker-gets-3-years/