- Never do unsolicited pentesting
- If you do, be very careful about how you report it; must be to a recognised bug bounty program
- Especially don't do this in a repressive state
- If you do, be very careful about how you report it; must be to a recognised bug bounty program
- Especially don't do this in a repressive state
I understand that he did not want to admit wrongdoing, since he believed it should be considered an extenuating circumstance where public interest requires such action.