Suspending his account doesn't make any sense. He could easily sign up with anot...

rubynerd · on March 4, 2012

That's the purpose of sending attempted uses of this exploit straight to the highest place possible: so if he does, they know

Working with him to do what? He pissed about a little with WebInspector, it doesn't make him a security consultant

He threatened to do more damage to your site, why wouldn't you suspend someone like that?

nknight · on March 4, 2012

I mostly agree with you in principle, but sometimes you push the big red button and sort out the pieces later, like when it's not a Sunday.