&gt; The response by Patio11 regarding how this was acceptable penetration testing was beyond stupid.<p>Actually, from a security perspective, its quite understandable. If you provide a tool that claims to be safe from state actors, they can use that kind of power to attack it.<p>That said, if it didn&#x27;t pass the usual protocols at the university for ethical standards they can and should be fired regardless of the client or reason.