Here is what&#x27;s happening right now:<p>FB: He&#x27;s an experienced bug bounty hunter and should know where reasonable borders are.<p>All the experienced security guys itt: He&#x27;s an experienced bug bounty hunter and should know where reasonable borders are or at least not pivot&#x2F;escalate without asking. Also never dump and hold data.<p>Everyone else: What he did isn&#x27;t <i>technically</i> against the rules FB wrote, so they are screwing him, despite it also being written that they have sole discretion.