Sometimes the controls of a system allow you to break the rules. Now, this is bound to be a wildly unpopular position, but that doesn't absolve you of the conse

Sometimes the controls of a system allow you to break the rules. Now, this is bound to be a wildly unpopular position, but that doesn't absolve you of the consequences of breaking those rules. Noble intentions or not, my read of the articles describing the AT&T incident puts him as responsible for the disclosure of private data. Whether or not that disclosure was inevitable and whether or not there was a better way to disclose the vulnerability is irrelevant. He exposed the very data he should have been trying to protect, which suggests that he never cared about the data being exposed, only being adulated for the discovery.