On the flip side, I have had some positive experiences doing some casual (non-malicious) hacking on some tech-blogs \ websites I frequent. Nothing too fancy, ju

On the flip side, I have had some positive experiences doing some casual (non-malicious) hacking on some tech-blogs \ websites I frequent. Nothing too fancy, just simple SQL injection for privilege escalation and the like. Any time I find something I immediately follow up with an email to the owner/administrator with all of the relevant information (including my IP address and contact information). The reactions have generally been quite positive (I've even gotten some complementary swag out of it).