There isnt that fine of a line. That's the moral hazard, are you building something or are you working to destroy something. Frame it as the VW firmware, they

There isnt that fine of a line. That's the moral hazard, are you building something or are you working to destroy something. Frame it as the VW firmware, they didn't cheat emissions because one or two guys did some late night hackers and put some extra code in to git, there was an orchestrated effort where a lot of people thought "out side the box" and rationalized their morals. Would it be more moral to report the API use to Lyft? Those folks are just trying to earn a living too, right? Would lent you feel just as clever reporting their vulnerability to them?