I guess ATT going after a guy a few years ago for finding out that all accounts where public and all you had to do was manipulate the URL didn't fix their underlying incompetence to fix their security procedures. Calling the poor guy a sophisticated hacker and throwing the book at him. I have no pity for ATT.