To be clear, he is not a white hat, he's a grey hat at best. Once you hack gmail accounts (without Google's permission) you're definitely in grey hat territory with a possible side of black.