The US systematically imposes harsh punishments for minor cyber "crimes".

I don't think most of these "crimes" should be punished at all. In particular, net protests at a web site virtual are the equivalent of a protest on the street. It is a mistake to call them "attacks".