wouldn't whoever ran this "exploit" also have to pay their share of upload/data charges?