I think what they have done can be reprimended by just a slap on the hand. It is true that they have broken the law, but they did do a favor by helping the administrator fix the holes as they told them how they did it. Now if it was a real terrorist that had done that, he would have copied all the informations he could get (yes there are DOD servers that contain sensitive informations that ARE connected to the NET, unlike what the DOD says), and sell the informations to other third-parties, or use it.

I don't know what other people think, but that is my point of view.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/414/12651#12651