No, a douche would have sold this exploit to an underground group. You just drew attention by show-hacking a big player, preventing other people finding the exploit while this goes unwatched - that's honorable in my opinion.

Dude, you're a hero.

Others just don't realize it yet because they're going through the stages of grief (Denial, Anger, Bargaining, Depression, Acceptance). https://en.wikipedia.org/wiki/K%C3%BCbler-Ross_model

If no one else says it, I will:

Thank You!

You found a problem, tried to warn them. They didn't listen, so you showed it to them, without harming anything (aside from a few egos). That's doing the right thing.

+1 for a hero. Чувак. Ты крут.

-1 For Hero. Чувак извини, ты крут, но ведешь себя как долбоеб

Egor, keep up with the good work. Not your fault Rails guys are overly self-confident.

You're good by me. There are so many ways that you could've gone in a truly evil direction with this exploit, and you chose not to.

You did it under your own full name. For me that's enough to consider your intentions to be good, even though it might've been smarter to try a bit harder to bring attention to the issue in other ways first.

'It's called being a cynical asshole and there's no known cure'

A lot of context is lost in text/email/IM also remember that English is not his native language, and he's likely from a very different cultural background.

Give the guy a break.

On balance I think he's just a well-meaning kid who's achieved notoriety the wrong way, but his deepest intentions are good.

Rather like Robert Tappan Morris, come to think of it!