This depends highly on where you live. In the U.S. service abuse that is judged as a denial-of-service attack is illegal under the Computer Fraud and Abuse Act

This depends highly on where you live. In the U.S. service abuse that is judged as a denial-of-service attack is illegal under the Computer Fraud and Abuse Act in some situations (I'm not sure if Aaron was charged under those sections or not though).