If what Weev did wasn't a "real" hack, then at&t didn't have "real" security. What is debatable in the legal sense, which is all history at this point, is what you are "allowed" to access, but anyway there are tons of vulnerable websites and network services out there. I think I saw some article recently that someone trivially gained commit access to some double digit percent of all node packages.
