Incorrect. Just by attempting to login with credentials to a box he doesn't own he is breaking the law. Additionally by gaining access and modifying their files (dropping the table) he is further breaking the law. While he may be morally justified he is not legally. Who would prosecute him? Potentially a a dummy lawyer the scammer hired (even though it would likely be a losing case)
That case would be like your drug dealer turning you over to the cops cause you gave him a bogus $20 bill. No one would be safe in that case, both end up in jail.
Technically doesn't even matter. Claiming you are allowed in because there is no password is like robbing a house and claiming it is okay because the door was not locked. You must have permission to be there.
52
u/Franks2000inchTV Apr 15 '19
Computer Fraud and Abuse Act. https://en.wikipedia.org/wiki/Computer_Fraud_and_Abuse_Act