German courts/laws seem to be very hostile to anyone exposing security flaws. I remember a story posted here where someone found a hard coded SQL connection st

German courts/laws seem to be very hostile to anyone exposing security flaws. I remember a story posted here where someone found a hard coded SQL connection string in decompiled code, connected to the server with it, and notified the company. Then, the company took the person to court (claiming something nonsensical about circumventing security) and the courts agreed. There was even people on HN siding with the courts that decompiling code and finding the key is circumventing their security which is madness.