A group called Goatse Security has disclosed a vulnerability in an AT&T website that affects Apple iPad 3G owners. The Wall Street Journal reports on the repercussions against vulnerability researchers in Computer Experts Face Backlash Goatse has never disclosed the information they obtained to prove the vulnerability to a 3rd party and they say they have destroyed it. As software and services move from traditional installed software to SaaS and into the cloud, more vulnerabilities are only going to exist in code running on one organization s web server.
Source: https://threatpost.com/pitfalls-website-vulnerability-research-and-disclosure-061510/74104/