[volkercraig]

It would be in Canada, but our "misuse of computer" charge is overly broad and never been well tested.

[charlieyu1]

On the other hand, in Hong Kong it would be straight to jail. Someone was sent a link by the airlines, he changed a couple of characters and it ended up showing another person’s data. The guy voluntarily reported the vulnerability and all he got was a criminal charge and found guilty