The charges are most likely not for how he did (spoof MAC addresses), but what he did (redistribute material he obtained without permission). A crime exists if it can proved there's intention.