I'm not employed in the industry, but unless they disclosed to vulnerability to the company before posting the video, it's definitely shady. I'm not so sure co

I'm not employed in the industry, but unless they disclosed to vulnerability to the company before posting the video, it's definitely shady. I'm not so sure companies will respond well to researchers waving around exploits in public and then trying to sell an audit. Surprised and angry people aren't the best consumers.