Wait a sec.<p>Look at his timeline again.<p>He tested the AWS creds in October.<p>They shut the server off on October 24.<p>He reported the AWS creds in December.<p>Did he tell them about the AWS creds before then? His mails don&#x27;t say that he did.<p>If he didn&#x27;t, <i>why didn&#x27;t he?</i>