Teaching about security by looking for some basic low hanging fruit? Perhaps. But what he's also teaching is how to blame and shame, and needlessly tread into murky legal territory.