I wouldn&#x27;t do that (I&#x27;d be scared to death about what would happen, even without reading this article). But I also don&#x27;t find it an unreasonable move. Just make it clear - you dump data, we&#x27;re going to sue you. Right now, the researcher is in the clear, even though what he did was incredibly stupid.<p>I don&#x27;t understand why a company would ever say &quot;you can snoop around in our stuff&quot; without <i></i>very clearly<i></i> stating what they can do. You&#x27;re leaving open a legal loophole where a blackhat can claim to be a whitehat.