I believe what he did was wrong, but I would never charge him for it. I think what he should have probably done was inform them that he's a computer security person, and that for free, he'd be willing to test their system.
But then again, you'd lose the unexpected nature of it.
|