How is reporting the vulnerability through a well respected site such as this one, and providing more records to the admin upon claiming that full DB access wasnt possible to show them it was hiding? He waived his right to anonymity, and didnt bother to remove the records from his PC and gave them to the FBI. All he had to do if he was trying to hide was slide a new hard drive in his PC, load his OS and software, and there now wouldnt be a single findable trace on his hard drive, and he had more then enough time to do it. Wether you think he was right or not, dont twist that facts around to tout your case. He had exactly 7 records. He could have taken the whole DB if he was trying to do something with them.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11389/33756#33756