Silly R, they are both guilty and the victims. Guilty for leaving their wireless system open and the victims because cc #'s were stolen.
We could argue this until we are blue in the face, but the sad truth is that this could have been prevented if WEP, WPA, or even MAC address control was activated.
