The difference isn't in the attack, for which we normally hold the attacker responsible, but in the vulnerability and volatility of the attack surface, for whic

The difference isn't in the attack, for which we normally hold the attacker responsible, but in the vulnerability and volatility of the attack surface, for which society is responsible in this case. I think that the maximal culpability for the caller's crime is in the realm of irresponsible disclosure.