] Bret McDanel was dissatisfied with his former employer,
] Tornado Development, Inc. Tornado provided internet
] access and web-based e-mail to its clients. However,
] McDanel apparently discovered a flaw in the web-mail that
] would permit malicious users to piggyback a previous
] secure session

I hate hearing about people getting fines and having to serve jailtime for discovering a hole. In this case though he may have stepped over the line by informing all of their customers.

SecurityFocus HOME Columnists: The Sad Tale of a Security Whistleblower