[franga2000]

Even in low-crime areas, banks still lock their vaults, military facilities still have fences and guards, etc. Not locking your own door that only has your own stuff behind it is in no way comparable to leaving a system with thousands or millions of users' (students/customers/citizens/whoever) data and property wide open.

"Hacking" isn't the same as "breaking in". Breaking into somewhere is usually destructive, dangerous, can be done b anyone and reveals no poor security (how did they forget to protect their vault door from a drill and plastic explosives??). A DDoS attack falls into this same category - a boring zero-skill brute force attack that can only be interpreted as malicious.

"Real hacking", however, isn't any of those things. If I put on an orange jumper and walk right into the back of my local bank and straight down to the vault without so much as a confused glance from a guard, they will, as they should, be more concerned with firing their guards for dangerous incompetence than prosecuting me for walking past an "employees only" sign. Especially if I, after arriving at the vault, called the bank manager and explained how bad their security is.

[watwut]

The op was not prosecuted. What happened was that adults were angry at 10 years old him. And he finds it unfair that they were angry at him. If 10 years old walks into vault with pretend confused look, it is perfectly ok to be angry at the kid and act like kid done something kid was not supposed to do.