Ars Technica lost a lot of respect with me yesterday when they stated in the analysis of Mega's security that symmetric encryption is inherently less safe than asymmetric.
Also the quoted article does not appear to show considerable insight on internet security.
Sheer directory traversal should never be considered a criminal act.
Of course if they had followed through with the stock manipulation, this would warrant criminal punishment.
Although of course stock manipulation is only punishable if you're not a bank or hedgefund which is sad.
In the actual chat logs (which Ars ignores), another chatter brings up shorting the stock, weev explicitly says shorting the stock would be illegal and that if someone wants to do that, not to involve him. Aside from the fact that no one did it and this was obviously silly chat room banter to begin with, weev is actually showing intent of not running afoul of the law.
Later in the chat, another user says that weev should post the leaked data to a public mailing list, and weev says no because that could potentially be criminal.