I think some responsibility needs to be borne by those creating blatantly insecure systems.<p>If I leave my garage door open and you come in and steal a server, sure, that's illegal, but if, say, I lock my garage door, (or otherwise take reasonable precautions)  you break a window, and then steal the same server, your penalty will be greater.<p>depending on equipment on the consumer premises to be secure (especially if your system is so weak as to just look at the mac address.)  sounds to me a lot like leaving the garage door open.<p>I think this goes doubly for the banking systems;  right now, all I need in order to hover all the money out of your bank account is your checking account number (and a merchant account)  and your checking account number is on every cheque you write.    That's a ridiculously insecure system, and sure, it should be illegal to exploit that, but I think the banks are 'leaving the garage door open' here -  they bear responsibility for not taking reasonable precautions.