At a certain level, naïveté is negligence. I work with systems that have to comply with HIPPA regulations. If we didn't comply, we couldn't say "Oh, we didn't

At a certain level, naïveté is negligence. I work with systems that have to comply with HIPPA regulations. If we didn't comply, we couldn't say "Oh, we didn't know, we'll do better next time". It is our job to know, and to comply with regulations; anything else is us being negligent of our duties. A company the size of AOL? They're negligent. This doesn't mean that what Weev did was good, or OK, or even that he should be the poster boy for reform. He also knew what he was doing, and the fact that AOL's security was poor doesn't excuse it. If anything he'll become the poster boy for "why these laws need to exist".