>...and is in my opinion a good shout but wasn't really a rebuttal to any of the points raised. True, but it was not somehow 'out of order' because it was not

>...and is in my opinion a good shout but wasn't really a rebuttal to any of the points raised. True, but it was not somehow 'out of order' because it was not a rebuttal of the 'whitehat' claims. Given that the article is not primarily about how the author discovered the vulnerability, but the legal problems that ensued, it was not at all unreasonable to point out that acting in accordance with 'whitehat' behaviors and intent is not enough to shield oneself from legal scrutiny. Furthermore, the ensuing discussion, in which various attempts were made to deny this distinction, shows that the point needed to be made!