What is the punishment you would suggest for those who are ignorant of the difference between hackers and crackers/script kiddies? ;-)
The method is different, the end result is the same - Unauthorized access to private information. I don’t care about intent and I don’t care what they are called.
A “Password” prompt is a big red stop sign with a policeman standing there. Any attempt to go beyond that point is a flagrant violation of the law. Violators should be prosecuted to the fullest extent of the law.
Punishment? Educate them on the damage that hackers do the computer/telecom industry