Whereof one cannot speak, one should be silent.  Dumping the user table is the literal next step in a standard vulnerability assessment (in order to acquire reused credentials), wasn&#x27;t prohibited by the terms of FB&#x27;s bug bounty program, and was crucial to the development of the bug.