Generally I support giving kids who do stupid stuff with technology (like fiddling with their school's network) chances to use their talents or interests for so

Generally I support giving kids who do stupid stuff with technology (like fiddling with their school's network) chances to use their talents or interests for something good -- internships, for example. But it sort of makes me uneasy when someone's first choice is the CRA. There was (and probably still is) plenty of other servers that don't have sensitive information like SINs. It makes me feel as if his motives weren't just to play around with Heartbleed, but to actually do something malicious. Let's hope this kid was just being a kid without this harming him in some form or another for the rest of his life.