Ummm... he possibly has his own definition of "legal". Apple did not gave him permission. So the summary is: 1) He broke into Apple systems without authorizati

Ummm... he possibly has his own definition of "legal". Apple did not gave him permission. So the summary is: 1) He broke into Apple systems without authorization 2) He caused mayhem and chaos for Apple and its customers 3) He disclosed private information about individuals. In effect, this kid has a deathwish, because that's the only reasonable explanation - if I want to make any sense of his actions. For a "security researcher", he didn't do much research on what's the usual outcome in these cases.