This is not true at all, Joe hacker would be interested in ALL the records, not the 7 this guy is accused of accessing. Per another article, the only reason the number went from 2 to 7 is because USC didn't believe him when he reported the flaw.

The fact is that the data was accessible, it was found by a proven security researcher (like does it for a living) and reported. The fact is he did not attempt to take all the data, and use it for anything other then reporting the vulnerability. Those are the facts of the case, whatever else is said is just speculation.

The more people "make up" about this based off what the "think" he was thinking, the less people pay attention to the facts.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11389/33755#33755