> I have over 100,000+ users details ...
> I do not want my name to be in blacklist
One would think that 73 compromised Apple employee accounts should be enough to make a point. Why would he take another 100k user accounts hostage?
So the guy is a hero. Thanks for disturbing real life businesses for several days, I guess?
> he was making Apple do something about it.
This behavior is endemic for the self-righteous security "researcher" scene. "I found a bug - you must do what I say, NOW, or else ..."
It's not like Apple would have ignored his bug reports if he wouldn't have scraped 100k developer accounts.
Yes, and that behavior is moving us to a world where corporations have to be careful what they put out, not just rush the newest shiny feature out faster. Besides, who do you want exploiting the bug, a self-righteous guy who 'may' be in it for his own glory, or an out-and-out criminal?
So, it's very much "like Apple would have ignored his bug reports..."
This is not responsible reporting, and he's clearly broken the UK computer misuse laws, since he signed an agreement with Apple governing the use of these systems.
I hope he's arrested soon. This behavior does nothing to help legitimate business or the security community.
Hopefully not for long... https://news.ycombinator.com/item?id=6093468
Don't get me wrong, I don't agree with what he did, but the whole case is baffling to me.