> Which does raise the question, if he is a criminal for doing this why aren't Google's Project Zero team?
Two answers, one philosophical and one practical:
- they shouldn't, as increasing awareness about security is a Good Deed
- the Chocolate Factory has pockets deep enough to sue TT -or pretty much anyone, save a few Big Ones-into oblivion, should the need arise, and execs around the world do know that