A little dissapointed at the responses to this article. Had Lamo identified the security problem with the proxy servers and notified the NYTimes at that point, yes he would've done good. But once he breached the network, hacked passwords and modified a database it became a criminal action. Think about what the staff at the NYTimes had to do to verify that was all he did while in there.

Compare it to someone letting you know you left your front door open to someone who went into your house, rummaged through your drawers and closets, posted a note on your refrigerator, then told you your door was open.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/9520/28497#28497