First rule of hacking is to separate liability to stay out of jail. Prosecution is typically limited because the person that discovers the hack isn't the perso

First rule of hacking is to separate liability to stay out of jail. Prosecution is typically limited because the person that discovers the hack isn't the person that exploits the hack, isn't the person day trading Facebook stock after the fake press releases. And of course - and still up for controversy - selling hacks isn't restricted in any way right now.