&gt; On the next screen I just hit the connect button to see what would happen:<p>&gt; Not really sure what it does, but I found several Droisys e-mail addresses in the database and decided to mail them that their database was exposed on the internet.<p>Oh man, this is a bad idea.<p>If you find something out there that you think you can connect to - poor password, no password, etc - you must be <i>very</i> careful.<p>In some cases, just reporting it will cause you problems. At this point, you probably haven&#x27;t broken the law but some companies are just jackasses.<p>But once you connect, the game changes. It is &quot;unauthorized access&quot; and it&#x27;s <i>probable</i> that you broke your local laws. At that point, it&#x27;s not just a jackass company that gets involved, it&#x27;s local law enforcement too.<p>And then you get data from the database. It&#x27;s probably going to get even worse for you.<p>When you go a step further and share a howto on the web... this is a bad idea all around.<p>This is not proper disclosure. If I was him, I&#x27;d get a good lawyer.