No Good Deed…

SecurityFocus Columnist Mark Rasch relates the tale of Bret McDaniel, who had the temerity to inform clients of Tornado Development about a security hole that the company had failed to fix for a year, despite repeated notification, and despite bragging of their "secure" service. McDaniel was then sent to prison under federal law for exposing the security hole, despite the fact that it was never exploited. (Via Slashdot.)