They got lucky. There have been many people who even tried to responsibly report a bug, and were treated as if they were misusing the resource. This is not jus

They got lucky. There have been many people who even tried to responsibly report a bug, and were treated as if they were misusing the resource. This is not just an education thing. Remember recently when there was a St. Louis reporter who found a glaring privacy violation in a Missouri state website (in that the website for whatever reason included people's SSN in the clear, but commented out. That reporter was initially treated as if they'd hacked the website and the governor of Missouri publicly spoke and said as much. Fortunately they weren't prosecuted, but even after prosecutors declined to do so, the governor still publicly called the reporter a "hacker".