Crack-Extort-Go to jail

Let's say you find some unpatched security holes on the BestBuy.com website because you are an unimaginative script kiddie. What should you do? Obviously, you should threaten full public disclosure of the vulnerabilities, then change your mind and ask for US$2.5 million or else you'll exploit the holes yourself.

That was the thinking of AOL user Thomas E. Ray III, at least until the FBI busted him for extortion. What a moron.

Posted by Dan on January 08, 2004 at 08:33 AM | TrackBack