Unless I'm remembering this incorrectly, didn't he get given the data? I don't think it was him who discovered the flaw. Sort of like handling stolen goods, a

Unless I'm remembering this incorrectly, didn't he get given the data? I don't think it was him who discovered the flaw. Sort of like handling stolen goods, as they were duplicated without permission, he then tries to profit from this (iirc he admitted this). If he had followed responsible disclosure principles, he could have even created a nice media circus for all. As is, I can't understand why he should have sympathy for him. Sure AT&T messed up, if it was under UK law I would hope the Information Commissioner would fine them. He showed contempt for the law, and got a sentence that matches. Given his previous history of not telling the truth, I'm not inclined to believe this is anything but business as usual for the US prison system. Not that business as usual isn't a bad thing.