UP's reaction was not proportionate to the issue. From what's been posted online of the policies and reactions the administrative staff has had to the incident (    ), somebody seriously over-reacted. Let's put it this way -- what the program that Mr. Maass wrote did was essentially make his computer look like a PDA. Or a game-system, or any other network device besides those supported by the version of CCA at UP. He didn't hack in without using a username and password, or steal anyone else's account. He didn't attack the CCA system itself with any exploit at all.
That's not to say he didn't handle it poorly. And his actions probably should be a violation of campus policy even if it wasn't when he did it (UP: add some language about "attempting to evade security measures meant to protect the network" and you're done). But suspension? The letter to the local newspaper mentions that there were no less than 19 other lesser sanctions that could have been taken in this instance (see  above). A suspension is ridiculous.
It's also odd the way that other students at UP who possessed the program are having action taken against them. One uses a Mac and couldn't even use the program if he wanted to and yet is still having sanctions taken against him. If all it takes is a program that can be used to evade security, they'd better take action against every student, faculty, and staff on that campus running a web browser (most of them, I would imagine). A browser and a little knowledge is all the weapon you need to hack most websites. Better crack down on butter knives and forks in the cafeteria too while you're at it.
Of course, maybe I'm only taking this position because not too many years ago I showed my own little brother how to evade an early version of CCA on his campus merely by changing his User-Agent string to resemble a Mac (that technique has long since stopped being an effective way to bypass CCA, but there are still many others and always will be in a system where you're trying to get trusted responses from an untrusted system).