I am surprised at the hate against Sam Odio. Sam had the option of taking the gift card and selling the card and keeping the iPad. He exposed the vulnerability. If he hadnt you would have paid in for the card, but someone would have abused the system, and not disclosed it. Here is a though experiment. There is a widely used piece of software which has a vulnerability. There are bad guys who are going to abuse it. A g…
As far as what Sam did in particular, it'd be entirely different if Sam came out and said, "Hey, look! I was able to write a script that has syphoned off $625 from the card and put it into Starbucks gift cards. I could then turn around and sell those cards on eBay and turn them into cash. I'll be putting the money back onto the original card, but I just wanted to expose the exploit." Instead, he followed through with turning it into cash and wrote a snarky blog post about how yuppies buying yuppies coffee isn't all that interesting, and he had decided to redirect the experiment to "will someone buy a Starbucks gift card for full price."