He didn't have permission to access the data or test it for flaws. Its one thing if you are hired to test a system for flaws and you find one...that's okay. Its a very different thing if you pound away on systems without authorization and find a flaw. That's illegal.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/191/907#907