<i>then responded by threatening a researcher&#x27;s employment after multiple conciliatory e-mails.</i><p>That is NOT what happened. Look at the timeline again.<p>* He popped the server.<p>* He submitted the RCE.<p>* He submitted dumped file from the compromise as a finding.<p>* They fixed the RCE.<p>* They told him not to dump files.<p>* They paid out the RCE finding.<p>* A month later, they declined to pay out on the dumped file.<p>* In response, he submits <i>a new finding, with AWS creds that he stored for more than a month after they shut down the server</i><p>* (Whatever else happens that day)<p>* Stamos calls Synack.