Sounds like he'd have been better off just doing a "leak" to wired or some other tech blog with large following, then it'd be all over the news and basically de

Sounds like he'd have been better off just doing a "leak" to wired or some other tech blog with large following, then it'd be all over the news and basically destroy the company...seems like companies would rather THAT happen than an altruistic security researcher tell the company and ONLY the company: "Hey, um you have a few issues here and here..."