Back in high school I found a vulnerability in the website of a major online DVD retailer. I notified them about it, and included information on what specifica

Back in high school I found a vulnerability in the website of a major online DVD retailer. I notified them about it, and included information on what specifically was wrong, the impact it had (over 6 million credit cards, social insurance numbers, addresses, full names, and telephone numbers), and they hired me to help them fix it. I often look back on that event and am quite thankful for how it turned out. I've read about plenty of stories where the person who found the vulnerability was not as fortunate.