Technically you're correct, but by giving out the credentials in a public forum he should have known better.