https://scott.arciszewski.me/blog/2014/03/black-and-white-26...
The total "intrusion" lasted only 23 minutes, according to court documents.
I'd be concerned if someone intruded into my computer for 23 seconds. Attempting to minimize what you're accused of with statements like this will likely turn people against you.
As usual, the game was rigged, and I lost
Sometimes introspection allows us to see that we legitimately lose; that things aren't always rigged against us. It also lets us see that our attitude can be our own worst enemy.
My last semester was erased (which screwed up my taxes for the next year and is probably illegal)
"Woe is me" doesn't play well when you are experiencing the negative consequences of having committed an alleged crime. Also don't accuse others of illegal activities unless you can prove them; it destroys your credibility.
For the digital equivalent of knocking on someone's front door, it swinging ajar, looking in, seeing nobody home, going on my way, and then being put on house arrest
Again, you're minimizing what you did. A more apt analogy based on your own description of what you did would be coming up to a locked door, seeing it is Brand X locks, purposely seeking out an exploit on how to pick Brand X locks, spending time picking the lock and then broadcasting to the world what you did.
I could go on, but the summary is that being a humble and contrite person will often allow a guilty person to go off scot-free. When I was arrested for hacking, that's what happened to me and I was literally let go with no record. On the flip side, rightly or wrongly coming across with a negative attitude can help an innocent person go to jail. Fair or not, that's the world we live in.
Which, you can believe that or not, but in terms of mitigating risks perceived by employers, not creating that impression should be your #1 priority.
The opportunity is gone now, but I really wish he'd fought this case and gotten it in front of a jury. It's very technical testimony and I think a jury could really question the damage amount. If it were below $5,000 this law doesn't apply. How much did it really cost? They had to delete 3 files and apply patches that they should have applied all along.
It's also just weird how punishment scales work. I used to go to my probation officer's office and see all the other guys he was monitoring. Most were serious drug dealers or weapons violations. It seemed so out of whack. But then when I'd go do community service I'd see people sentenced to 20 hours of community service, hundreds of dollars in fines, and weeks in jail for crap like shoplifting a 99 cent air freshener or a pack of cigarettes.
I'm not entirely sure what the punishment Scott received actually was, but he served no time, so it sounds like his sentencing level was below the noise floor.
Unless it's changed, I think under the normal federal sentencing guidelines, that amount of "damage" doesn't even qualify for any prison time at all, but the specific offense overrides that to impose a minimum of six months. That's because of a little outcry in the 1990s over hackers not serving any time and the (maybe valid) perception that they actually benefited from the notoriety of a conviction.
To be pedantic, the door WAS unlocked. You did not even need a user account to upload files. In hindsight, I probably could have argued that "authorized access" was never exceeded because the form I used was publicly accessible as part of a DotNetNuke design flaw, but I didn't want to drag to court battle out any longer. I was in the wrong, even if I wasn't the only one.
You are not a spectator for your own life. You aren't limited to expressing opinions about it. You are free to act that way. You can try to play a victim card that only a tiny fraction of people will even understand, let alone sympathize with. You can choose to make your life about this event.
Or you can make your life about something else, and put this behind you.
I'd just worry that you probably can't do both of those things.
If you're going to do the latter, my advice is this: any time you talk about what happened with you and that stupid website, have a clear goal behind whatever it is you're saying. Make sure that goal squares up with your overall goal of getting this in the past. The Internet really, really, really, really wants you to pick it apart and debate it. That creates drama, and drama is fun. Personally, I think you've donated enough drama to the Internet, and you don't owe anyone any more of it.
OP: Eventually the narrative will shift to "I was young and stupid, and it was a long time ago," which is exactly what you want. By continuing to defend what you did, you're actively delaying the time until you can begin using that line. Frankly, whether you believe you're right or not is beside the point; no hiring manager is going to care, and your current attitude towards it presents as toxic.
If I was an employer and I saw a job applicant tweet something like that, their resume would immediately go in the shredder.
Think about it from the employer's point of view: "What happens if this guy is disgruntled with us for some reason? Is he going to joke about something that'll embarrass us? Maybe he'll turn our website into an archive of obscene furry porn?" Given you're tweeting things like that, why would I hire you?
(and yes, I know that that tweet's referring to the previous "HEAD /passwords.txt" tweet, but it's incredibly easy to take things out of context on the internets)