IT consultant fined for daring to expose shoddy security

Spotting a plaintext password and using it in research without authorization deemed a crime
A security researcher in Germany has been fined €3,000 ($3,300, £2,600) for finding and reporting an e-commerce database vulnerability that was exposing almost 700,000 customer records.…