IT consultant fined for daring to expose shoddy security

Spotting a plaintext password and using it in research without authorization deemed a crime

A security researcher in Germany has been fined 3,000 ($3,300, 2,600) for finding and reporting an e-commerce database vulnerability that was exposing almost 700,000 customer records....