Finding and prosecuting the guy would give some sense of justice, but unfortunately the cat's out of the bag since the source code is out and constantly being u

Finding and prosecuting the guy would give some sense of justice, but unfortunately the cat's out of the bag since the source code is out and constantly being updated by engineers that are likely just as good or better than the original author. The real answer is going to be better security practices so that these attacks are less successful. Not that I know exactly what these updated practices are when we're talking about attacks this sophisticated...