Originally posted here by Juridian
I don't think it was a good thing. I don't want strangers poking around my house and checking for ways in unless i explicitly hire someone to do it.

Also, doing such unauthorised and for the most part unsupervised checks on live 'production' systems is dangerous and depending on what he was doing could have cost them alot more money than whatever damage to their business was done by him releasing his findings.

Pointing out blatant and obvious holes is one thing, doing a full fledged penetration test of a system you are not responsible or have permission for is another.

There is a smarter way to do what he did, one that doesn't end in feds and jail/probation time.
I agree....Lamo screwed up here. You ASK first and THEN when you have the paperwork in hand you test, NOT the other way around.