So it would be illegal to run a metasploit attack against a computer you don't have permission to do so against, right? But what if I configure a web server to nmap scan, then metasploit attack against everyone that connects to me. This is an automated process, so no human is breaking the law, the computers doing it. And, there would be no way to prove which human configured the server to do this. And, even then this was my personal web server for playing with myself, I never intended for any random internet user to stumble across it; they did so at their own risk, I never forced them to.
Has any law been broken by a human here? And how would I stand legally?